sun.security.pkcs.android

Class PKCS7

java.lang.Object

sun.security.pkcs.android.PKCS7

public class PKCS7
extends java.lang.Object

PKCS7 as defined in RSA Laboratories PKCS7 Technical Note. Profile Supports only SignedData ContentInfo type, where to the type of data signed is plain Data. For signedData, crls, attributes and PKCS#6 Extended Certificates are not supported.

Author:

Benjamin Renaud

Constructor Summary

Constructors

Constructor and Description
PKCS7(AlgorithmId[] digestAlgorithmIds, ContentInfo contentInfo, java.security.cert.X509Certificate[] certificates, SignerInfo[] signerInfos) Construct an initialized PKCS7 block.
PKCS7(byte[] bytes) Unmarshals a PKCS7 block from its encoded form, parsing the encoded bytes.
PKCS7(DerInputStream derin) Unmarshals a PKCS7 block from its encoded form, parsing the encoded bytes from the DerInputStream.
PKCS7(java.io.InputStream in) Unmarshals a PKCS7 block from its encoded form, parsing the encoded bytes from the InputStream.

Method Summary

Methods

Modifier and Type	Method and Description
void	encodeSignedData(DerOutputStream out) Encodes the signed data to a DerOutputStream.
void	encodeSignedData(java.io.OutputStream out) Encodes the signed data to an output stream.
java.security.cert.X509Certificate	getCertificate(java.math.BigInteger serial, X500Name issuerName) Returns the X.509 certificate listed in this PKCS7 block which has a matching serial number and Issuer name, or null if one is not found.
java.security.cert.X509Certificate[]	getCertificates() Returns the X.509 certificates listed in this PKCS7 block.
ContentInfo	getContentInfo() Returns the content information specified in this PKCS7 block.
java.security.cert.X509CRL[]	getCRLs() Returns the X.509 crls listed in this PKCS7 block.
AlgorithmId[]	getDigestAlgorithmIds() Returns the message digest algorithms specified in this PKCS7 block.
SignerInfo[]	getSignerInfos() Returns the signer's information specified in this PKCS7 block.
java.math.BigInteger	getVersion() Returns the version number of this PKCS7 block.
boolean	isOldStyle() Returns true if this is a JDK1.1.x-style PKCS#7 block, and false otherwise.
java.lang.String	toString() Returns the PKCS7 block in a printable string form.
SignerInfo[]	verify() Returns all signerInfos which self-verify.
SignerInfo[]	verify(byte[] bytes) Returns all signerInfos which self-verify.
SignerInfo	verify(SignerInfo info, byte[] bytes) This verifies a given SignerInfo.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, wait, wait, wait

Constructor Detail

PKCS7

public PKCS7(java.io.InputStream in)
      throws ParsingException,
             java.io.IOException

Unmarshals a PKCS7 block from its encoded form, parsing the encoded bytes from the InputStream.

Parameters:

in - an input stream holding at least one PKCS7 block.

Throws:

ParsingException - on parsing errors.

java.io.IOException - on other errors.

PKCS7

public PKCS7(DerInputStream derin)
      throws ParsingException

Unmarshals a PKCS7 block from its encoded form, parsing the encoded bytes from the DerInputStream.

Parameters:

derin - a DerInputStream holding at least one PKCS7 block.

Throws:

ParsingException - on parsing errors.

PKCS7

public PKCS7(byte[] bytes)
      throws ParsingException

Unmarshals a PKCS7 block from its encoded form, parsing the encoded bytes.

Parameters:

bytes - the encoded bytes.

Throws:

ParsingException - on parsing errors.

PKCS7

public PKCS7(AlgorithmId[] digestAlgorithmIds,
     ContentInfo contentInfo,
     java.security.cert.X509Certificate[] certificates,
     SignerInfo[] signerInfos)

Construct an initialized PKCS7 block.

Parameters:

digestAlgorithmIds - the message digest algorithm identifiers.

contentInfo - the content information.

certificates - an array of X.509 certificates.

signerInfos - an array of signer information.

Method Detail

encodeSignedData

public void encodeSignedData(java.io.OutputStream out)
                      throws java.io.IOException

Encodes the signed data to an output stream.

Parameters:

out - the output stream to write the encoded data to.

Throws:

java.io.IOException - on encoding errors.

encodeSignedData

public void encodeSignedData(DerOutputStream out)
                      throws java.io.IOException

Encodes the signed data to a DerOutputStream.

Parameters:

out - the DerOutputStream to write the encoded data to.

Throws:

java.io.IOException - on encoding errors.

verify

public SignerInfo verify(SignerInfo info,
                byte[] bytes)
                  throws java.security.NoSuchAlgorithmException,
                         java.security.SignatureException

This verifies a given SignerInfo.

Parameters:

info - the signer information.

bytes - the DER encoded content information.

Throws:

java.security.NoSuchAlgorithmException - on unrecognized algorithms.

java.security.SignatureException - on signature handling errors.

verify

public SignerInfo[] verify(byte[] bytes)
                    throws java.security.NoSuchAlgorithmException,
                           java.security.SignatureException

Returns all signerInfos which self-verify.

Parameters:

bytes - the DER encoded content information.

Throws:

java.security.NoSuchAlgorithmException - on unrecognized algorithms.

java.security.SignatureException - on signature handling errors.

verify

public SignerInfo[] verify()
                    throws java.security.NoSuchAlgorithmException,
                           java.security.SignatureException

Returns all signerInfos which self-verify.

Throws:

java.security.NoSuchAlgorithmException - on unrecognized algorithms.

java.security.SignatureException - on signature handling errors.

getVersion

public java.math.BigInteger getVersion()

Returns the version number of this PKCS7 block.

Returns:

the version or null if version is not specified for the content type.

getDigestAlgorithmIds

public AlgorithmId[] getDigestAlgorithmIds()

Returns the message digest algorithms specified in this PKCS7 block.

Returns:

the array of Digest Algorithms or null if none are specified for the content type.

getContentInfo

public ContentInfo getContentInfo()

Returns the content information specified in this PKCS7 block.

getCertificates

public java.security.cert.X509Certificate[] getCertificates()

Returns the X.509 certificates listed in this PKCS7 block.

Returns:

a clone of the array of X.509 certificates or null if none are specified for the content type.

getCRLs

public java.security.cert.X509CRL[] getCRLs()

Returns the X.509 crls listed in this PKCS7 block.

Returns:

a clone of the array of X.509 crls or null if none are specified for the content type.

getSignerInfos

public SignerInfo[] getSignerInfos()

Returns the signer's information specified in this PKCS7 block.

Returns:

the array of Signer Infos or null if none are specified for the content type.

getCertificate

public java.security.cert.X509Certificate getCertificate(java.math.BigInteger serial,
                                                X500Name issuerName)

Returns the X.509 certificate listed in this PKCS7 block which has a matching serial number and Issuer name, or null if one is not found.

Parameters:

serial - the serial number of the certificate to retrieve.

issuerName - the Distinguished Name of the Issuer.

toString

public java.lang.String toString()

Returns the PKCS7 block in a printable string form.

Overrides:

toString in class java.lang.Object

isOldStyle

public boolean isOldStyle()

Returns true if this is a JDK1.1.x-style PKCS#7 block, and false otherwise.