Changeset 239

Timestamp:

08/03/07 14:51:32 (1 year ago)

Author:

paulhethmon

Message:

commit intermediate version. this version creates public and private keys ok. it also has a lot of code snippets for various ways to create key objects. it does not validate signatures yet

Files:

• MetaTest/trunk/src/metatest/Main.java (modified) (5 diffs)

MetaTest/trunk/src/metatest/Main.java

@@ -26 +26 @@
-import org.opensaml.xml.util.Base64;
-
+import java.security.cert.Certificate;
+import java.security.cert.CertificateFactory;
-import java.security.Security;
-import java.security.KeyFactory;
@@ -32 +34 @@
-import java.security.spec.X509EncodedKeySpec;
-import java.security.spec.EncodedKeySpec;
+import java.security.spec.RSAPublicKeySpec;
-import java.io.*;
-
@@ -56 +59 @@
-   */
-  public static void main(String[] args) throws MetadataProviderException, ConfigurationException, java.security.NoSuchAlgorithmException, 
-
-
-
+
+
+
+
+
+
-    
-    org.opensaml.DefaultBootstrap.bootstrap();
@@ -64 +70 @@
-//    if (1 == 1) return;
-    
-
+
+
-    String encodedPrivateKey = "";
-    String line;
@@ -196 +203 @@
-    System.out.println("PublicKey finally created");
-*/
+/*    
+    System.out.println("----- begin -----");
-    String encodedPublicKey = x509Cert.getValue();
-
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
-    X509EncodedKeySpec pubKeySpec = new X509EncodedKeySpec( x509KeyBytes );
+*/
+/*
+    java.security.cert.X509Certificate jX509Cert;
+    jX509Cert = KeyInfoHelper.getCertificate(x509Cert);
+    X509EncodedKeySpec pubKeySpec = new X509EncodedKeySpec( jX509Cert.getEncoded() );
+*/
+    
+    // ----- google code sample -----
+/*    
+    String certFilename = "C:\\Business\\Clareity\\Dev\\SAML\\MetaTest\\src\\devcert.pem";
+    String pubKeyFilename = "C:\\Business\\Clareity\\Dev\\SAML\\MetaTest\\src\\devpubkey-google.pem";
+    try {
+      
+      InputStream certFileIs = new FileInputStream(certFilename);
+      CertificateFactory cf = CertificateFactory.getInstance("X509");
+      java.security.cert.X509Certificate cert =
+          (java.security.cert.X509Certificate) cf.generateCertificate(certFileIs);
+      OutputStream publicKyFileOs = new FileOutputStream(pubKeyFilename);
+      publicKyFileOs.write(cert.getPublicKey().getEncoded());
+      publicKyFileOs.close();
+      
+    } catch (IOException e) {
+      e.printStackTrace();
+    } catch (java.security.cert.CertificateException e) {
+      e.printStackTrace();
+    }
+ */
+   // ----- end google code sample -----
+    
+/*
+    // This section reads the certficate file directly
+    FileInputStream fis = new FileInputStream("C:\\Business\\Clareity\\Dev\\SAML\\MetaTest\\src\\devcert.pem");
+    BufferedInputStream bis = new BufferedInputStream(fis);
+    
+    CertificateFactory cf = CertificateFactory.getInstance("X.509");
+    Certificate cert = null;
+    while (bis.available() > 0) {
+      cert = cf.generateCertificate(bis);
+      System.out.println(cert.toString());
+    }
+    // now that we havea  cert object, pull out the public key to make a keyspec
+    if (cert != null) pubKeySpec = new X509EncodedKeySpec(cert.getPublicKey().getEncoded());
+    if (cert == null) {
+      System.out.println("cert is null");
+      return;
+    }
+*/
+    // We need a Java X509Certificate object first
+    java.security.cert.X509Certificate jX509Cert;
+    // Now create it based on the OpenSAML X509Certificate object
+    jX509Cert = KeyInfoHelper.getCertificate(x509Cert);
+    // Now we can pull out the public key part of the certificate into a KeySpec
+    X509EncodedKeySpec pubKeySpec = new X509EncodedKeySpec( jX509Cert.getPublicKey().getEncoded() );
+    
+    // Get our KeyFactory object that creates key objects for us specifying RSA
-    KeyFactory keyFactory = KeyFactory.getInstance("RSA");
+    System.out.println("provider = " + keyFactory.getProvider().toString() );
+    // Now let's finally generate that PublicKey that we can actually use to validate signatures
-    PublicKey publicKey = keyFactory.generatePublic(pubKeySpec);
-    System.out.println("PublicKey finally created");