authorityattributeidentifier.java

一个完整的XACML工程,学习XACML技术的好例子!

/*
* Copyright (c) 2006, University of Kent
* All rights reserved.
*
* Redistribution and use in source and binary forms, with or without 
* modification, are permitted provided that the following conditions are met:
*
* Redistributions of source code must retain the above copyright notice, this 
* list of conditions and the following disclaimer.
* 
* Redistributions in binary form must reproduce the above copyright notice, 
* this list of conditions and the following disclaimer in the documentation 
* and/or other materials provided with the distribution. 
*
* 1. Neither the name of the University of Kent nor the names of its 
* contributors may be used to endorse or promote products derived from this 
* software without specific prior written permission. 
*
* 2. THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS  
* IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO,
* THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR 
* PURPOSE ARE DISCLAIMED. 
*
* 3. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE 
* LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR 
* CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF 
* SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS 
* INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN 
* CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) 
* ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
* POSSIBILITY OF SUCH DAMAGE.
*
* 4. YOU AGREE THAT THE EXCLUSIONS IN PARAGRAPHS 2 AND 3 ABOVE ARE REASONABLE
* IN THE CIRCUMSTANCES.  IN PARTICULAR, YOU ACKNOWLEDGE (1) THAT THIS
* SOFTWARE HAS BEEN MADE AVAILABLE TO YOU FREE OF CHARGE, (2) THAT THIS
* SOFTWARE IS NOT "PRODUCT" QUALITY, BUT HAS BEEN PRODUCED BY A RESEARCH
* GROUP WHO DESIRE TO MAKE THIS SOFTWARE FREELY AVAILABLE TO PEOPLE WHO WISH
* TO USE IT, AND (3) THAT BECAUSE THIS SOFTWARE IS NOT OF "PRODUCT" QUALITY
* IT IS INEVITABLE THAT THERE WILL BE BUGS AND ERRORS, AND POSSIBLY MORE
* SERIOUS FAULTS, IN THIS SOFTWARE.
*
* 5. This license is governed, except to the extent that local laws
* necessarily apply, by the laws of England and Wales.
*/

package issrg.ac.attributes;
import iaik.asn1.*;
import issrg.ac.IssuerSerial;
import java.util.Vector;

/**
 *
 * @author  anhnt
 */


/*15.5.2.4 Authority attribute identifier extension

authorityAttributeIdentifier EXTENSION ::=
{
SYNTAX AuthorityAttributeIdentifierSyntax
IDENTIFIED BY { id-ce-authorityAttributeIdentifier }
}
AuthorityAttributeIdentifierSyntax ::= SEQUENCE SIZE (1..MAX) OF AuthAttId
AuthAttId ::= IssuerSerial 
 
 IssuerSerial  ::=  SEQUENCE {
	issuer		GeneralNames,
	serial			CertificateSerialNumber, //INTEGER
	issuerUID	UniqueIdentifier OPTIONAL }
 
 */


public class AuthorityAttributeIdentifier extends issrg.ac.Extension { 
    
    /**
     *The string stores the standard OID for the Authority Attribute Identifier: 2.5.29.38
     */
    public static final String AUTHORITY_ATTRIBUTE_IDENTIFIER_OID = "2.5.29.38"; 

    private IssuerSerial[] issuers;

    /**
   * This method registers this extension as an extension with a specific
   * OID. After it has been registered, Extensions can recognise 
   * the extension with this OID.
   */  
    
    public static void registerMe() {
        issrg.ac.Extensions.registerExtension(AUTHORITY_ATTRIBUTE_IDENTIFIER_OID, AuthorityAttributeIdentifier.class);
    }
    
      
    /** Creates a new instance of AAI extension based on an 
     *existing AAI extension
     *
     *@param e is an AAI extension
     */
    
    public AuthorityAttributeIdentifier(AuthorityAttributeIdentifier e) throws CodingException {
      super(AUTHORITY_ATTRIBUTE_IDENTIFIER_OID, false, e.getExtensionValue());
    }

    /**
     *This method constructs an AAI extension based on a list of issuerSerials
     *@param issuerSerials is an array of IssuerSerial objects.
     */
    
    public AuthorityAttributeIdentifier (IssuerSerial[] issuerSerials) {
      super(AUTHORITY_ATTRIBUTE_IDENTIFIER_OID, false);
      setIssuerSerials(issuerSerials);
    }    
    
    public Object clone(){
        try {
            return new AuthorityAttributeIdentifier(this);
        } catch (CodingException ce) {return null;}
    }

    /**
     *This method decodes an ASN1Object to get the array of IssuerSerials 
     *object.
     *
     *@param ao is the ASN1Object is going to be decoded.
     */
    public void decodeValue(ASN1Object ao) throws CodingException {
      if (ao.getAsnType()!=ASN.SEQUENCE){
        throw new CodingException("SEQUENCE was expected in AttributeAuthorityIdentifier extension");
      }
      Vector s = new Vector();
      int num = ao.countComponents();
      for (int i = 0; i < num; i++) s.add(new IssuerSerial(ao.getComponentAt(i))); 
      issuers = (IssuerSerial[]) s.toArray(new IssuerSerial[0]);
    }

    /**
     *This method encodes an array of IssuerSerials objects to an ASN1Object 
     *object. This method is the reversion of the previous method.
     *
     *@return an ASN1Object that contains the array of IssuerSerials objects.
     */
    
    public ASN1Object encodeValue() throws CodingException {
      SEQUENCE s=new SEQUENCE();
      
      for(int i=0; i<issuers.length; i++){
        s.addComponent(issuers[i].toASN1Object());
      }
      return s;
    }
   
    /**
     *This method constructs an AAI extension from an ASN1Object.
     *
     *@param ao is an ASN1Object.
     */
    public AuthorityAttributeIdentifier(ASN1Object ao) throws CodingException{
      super(ao);
    }
    
    /**
     *This method returns all the issuerSerials
     *@return an array of IssuerSerial
     */

    public IssuerSerial [] getIssuerSerials(){
      return issuers;
    }

    /**
     *This method is used to set the issuerSerials for the object
     *@param is is an array of IssuerSerial
     */
    
    public void setIssuerSerials(IssuerSerial [] is){
      issuers=is;
    }

    /**
     *This method creates a string that represents all issuer serials
     *@param ident is a string used to separate the issuer serials
     *@return a string that represents all the issuer serials 
     */
    public String extensionValueToString(String indent){
        String ret = "";
        for (int i = 0; i < issuers.length; i++) ret=ret+issuers[i].toString(indent);
        return ret;
    }
}