import org.bouncycastle.x509.X509AttributeCertificate; //导入依赖的package包/类
private static Collection convertCerts(Collection collection)
    throws IOException
{
    List list = new ArrayList(collection.size());

    for (Iterator it = collection.iterator(); it.hasNext();)
    {
        Object o = it.next();

        if (o instanceof X509AttributeCertificate)
        {
            X509AttributeCertificate cert = (X509AttributeCertificate)o;

            list.add(new JcaX509AttributeCertificateHolder(cert));
        }
        else
        {
            list.add(o);
        }
    }

    return list;
}
 

import org.bouncycastle.x509.X509AttributeCertificate; //导入依赖的package包/类
private X509AttributeCertificate readDERCertificate(
    InputStream in)
    throws IOException
{
    ASN1InputStream dIn = new ASN1InputStream(in);
    ASN1Sequence seq = (ASN1Sequence)dIn.readObject();

    if (seq.size() > 1
            && seq.getObjectAt(0) instanceof DERObjectIdentifier)
    {
        if (seq.getObjectAt(0).equals(PKCSObjectIdentifiers.signedData))
        {
            sData = new SignedData(ASN1Sequence.getInstance(
                            (ASN1TaggedObject)seq.getObjectAt(1), true)).getCertificates();

            return getCertificate();
        }
    }

    return new X509V2AttributeCertificate(seq.getEncoded());
}
 

import org.bouncycastle.x509.X509AttributeCertificate; //导入依赖的package包/类
private X509AttributeCertificate getCertificate()
    throws IOException
{
    if (sData != null)
    {
        while (sDataObjectCount < sData.size())
        {
            Object obj = sData.getObjectAt(sDataObjectCount++);

            if (obj instanceof ASN1TaggedObject && ((ASN1TaggedObject)obj).getTagNo() == 2)
            {
               return new X509V2AttributeCertificate(
                      ASN1Sequence.getInstance((ASN1TaggedObject)obj, false).getEncoded());
            }
        }
    }

    return null;
}
 

import org.bouncycastle.x509.X509AttributeCertificate; //导入依赖的package包/类
private X509AttributeCertificate readDERCertificate(
    InputStream in)
    throws IOException
{
    ASN1InputStream dIn = new ASN1InputStream(in);
    ASN1Sequence seq = (ASN1Sequence)dIn.readObject();

    if (seq.size() > 1
            && seq.getObjectAt(0) instanceof ASN1ObjectIdentifier)
    {
        if (seq.getObjectAt(0).equals(PKCSObjectIdentifiers.signedData))
        {
            sData = new SignedData(ASN1Sequence.getInstance(
                            (ASN1TaggedObject)seq.getObjectAt(1), true)).getCertificates();

            return getCertificate();
        }
    }

    return new X509V2AttributeCertificate(seq.getEncoded());
}
 

import org.bouncycastle.x509.X509AttributeCertificate; //导入依赖的package包/类
static void checkCRLsNotEmpty(Set crls, Object cert)
    throws AnnotatedException
{
    if (crls.isEmpty())
    {
        if (cert instanceof X509AttributeCertificate)
        {
            X509AttributeCertificate aCert = (X509AttributeCertificate)cert;

            throw new AnnotatedException("No CRLs found for issuer \"" + aCert.getIssuer().getPrincipals()[0] + "\"");
        }
        else
        {
            X509Certificate xCert = (X509Certificate)cert;

            throw new AnnotatedException("No CRLs found for issuer \"" + RFC4519Style.INSTANCE.toString(PrincipalUtils.getIssuerPrincipal(xCert)) + "\"");
        }
    }
}
 

import org.bouncycastle.x509.X509AttributeCertificate; //导入依赖的package包/类
/**
     * Returns the issuer of an attribute certificate or certificate.
     *
     * @param cert The attribute certificate or certificate.
     * @return The issuer as <code>X509Principal</code>.
     */
    protected static X509Principal getEncodedIssuerPrincipal(
        Object cert)
    {
        if (cert instanceof X509Certificate)
        {
try
{
            return PrincipalUtil.getIssuerX509Principal((X509Certificate)cert);
}
catch (Exception e)
{
throw new IllegalStateException(e.toString());
}
        }
        else
        {
            return (X509Principal)((X509AttributeCertificate)cert).getIssuer().getPrincipals()[0];
        }
    }
 

import org.bouncycastle.x509.X509AttributeCertificate; //导入依赖的package包/类
private Set createAttributeCertificates(List list,
                                        X509AttributeCertStoreSelector xselector) throws StoreException
{
    Set certSet = new HashSet();

    Iterator it = list.iterator();
    X509AttrCertParser parser = new X509AttrCertParser();
    while (it.hasNext())
    {
        try
        {
            parser.engineInit(new ByteArrayInputStream((byte[])it
                .next()));
            X509AttributeCertificate cert = (X509AttributeCertificate)parser
                .engineRead();
            if (xselector.match((Object)cert))
            {
                certSet.add(cert);
            }
        }
        catch (StreamParsingException e)
        {

        }
    }

    return certSet;
}
 

import org.bouncycastle.x509.X509AttributeCertificate; //导入依赖的package包/类
private X509AttributeCertificate readPEMCertificate(
    InputStream  in)
    throws IOException
{
    ASN1Sequence seq = PEM_PARSER.readPEMObject(in);

    if (seq != null)
    {
        return new X509V2AttributeCertificate(seq.getEncoded());
    }

    return null;
}
 

import org.bouncycastle.x509.X509AttributeCertificate; //导入依赖的package包/类
public Collection engineReadAll()
    throws StreamParsingException
{
    X509AttributeCertificate cert;
    List certs = new ArrayList();

    while ((cert = (X509AttributeCertificate)engineRead()) != null)
    {
        certs.add(cert);
    }

    return certs;
}
 

import org.bouncycastle.x509.X509AttributeCertificate; //导入依赖的package包/类
/**
 * Returns the issuer of an attribute certificate or certificate.
 *
 * @param cert The attribute certificate or certificate.
 * @return The issuer as <code>X500Principal</code>.
 */
protected static X500Principal getEncodedIssuerPrincipal(
    Object cert)
{
    if (cert instanceof X509Certificate)
    {
        return ((X509Certificate)cert).getIssuerX500Principal();
    }
    else
    {
        return (X500Principal)((X509AttributeCertificate)cert).getIssuer().getPrincipals()[0];
    }
}
 

import org.bouncycastle.x509.X509AttributeCertificate; //导入依赖的package包/类
private static BigInteger getSerialNumber(
    Object cert)
{
    if (cert instanceof X509Certificate)
    {
        return ((X509Certificate)cert).getSerialNumber();
    }
    else
    {
        return ((X509AttributeCertificate)cert).getSerialNumber();
    }
}
 

import org.bouncycastle.x509.X509AttributeCertificate; //导入依赖的package包/类
/**
 * Parses the contents of an attribute certificate.<br>
 * <b>NOTE:</b> Cryptographic signatures, time stamps etc. will <b>not</b> be checked.
 *
 * @param ac the attribute certificate to parse for VOMS attributes
 */
public VOMSAttribute(X509AttributeCertificate ac) 
{
    if (ac == null) 
    {
        throw new IllegalArgumentException("VOMSAttribute: AttributeCertificate is NULL");
    }

    myAC = ac;

    X509Attribute[] l = ac.getAttributes(VOMS_ATTR_OID);

    if (l == null) 
    {
        return;
    }

    try 
    {
        for (int i = 0; i != l.length; i++) 
        {
            IetfAttrSyntax attr = IetfAttrSyntax.getInstance(l[i].getValues()[0]);

            // policyAuthority is on the format <vo>/<host>:<port>
            String url = ((DERIA5String)attr.getPolicyAuthority().getNames()[0].getName()).getString();
            int idx = url.indexOf("://");

            if ((idx < 0) || (idx == (url.length() - 1)))
            {
                throw new IllegalArgumentException("Bad encoding of VOMS policyAuthority : [" + url + "]");
            }

            myVo = url.substring(0, idx);
            myHostPort = url.substring(idx + 3);

            if (attr.getValueType() != IetfAttrSyntax.VALUE_OCTETS)
            {
                throw new IllegalArgumentException(
                    "VOMS attribute values are not encoded as octet strings, policyAuthority = " + url);
            }

            ASN1OctetString[]   values = (ASN1OctetString[])attr.getValues();
            for (int j = 0; j != values.length; j++)        
            {
                String fqan = new String(values[j].getOctets());
                FQAN f = new FQAN(fqan);

                if (!myStringList.contains(fqan) && fqan.startsWith("/" + myVo + "/"))
           {
                    myStringList.add(fqan);
                    myFQANs.add(f);
                }
            }
        }
    }
    catch (IllegalArgumentException ie) 
    {
        throw ie;
    }
    catch (Exception e) 
    {
        throw new IllegalArgumentException("Badly encoded VOMS extension in AC issued by " +
            ac.getIssuer());
    }
}
 

import org.bouncycastle.x509.X509AttributeCertificate; //导入依赖的package包/类
/**
 * Reads in a X509 Attribute Certificate.
 *
 * @return the X509 Attribute Certificate
 * @throws IOException if an I/O error occured
 */
private X509AttributeCertificate readAttributeCertificate(
    String  endMarker)
    throws IOException
{
    return new X509V2AttributeCertificate(readBytes(endMarker));
}
 

import org.bouncycastle.x509.X509AttributeCertificate; //导入依赖的package包/类
/**
 * Returns the issuer of an attribute certificate or certificate.
 *
 * @param cert The attribute certificate or certificate.
 * @return The issuer as <code>X500Principal</code>.
 */
static X500Name getEncodedIssuerPrincipal(
    Object cert)
{
    if (cert instanceof X509Certificate)
    {
        return getIssuerPrincipal((X509Certificate)cert);
    }
    else
    {
        return X500Name.getInstance(((X500Principal)((X509AttributeCertificate)cert).getIssuer().getPrincipals()[0]).getEncoded());
    }
}
 

import org.bouncycastle.x509.X509AttributeCertificate; //导入依赖的package包/类
private void testCertWithBaseCertificateID()
    throws Exception
{
    X509AttributeCertificate attrCert = new X509V2AttributeCertificate(certWithBaseCertificateID);
    CertificateFactory       fact = CertificateFactory.getInstance("X.509", "BC");   
    X509Certificate          cert = (X509Certificate)fact.generateCertificate(new ByteArrayInputStream(holderCertWithBaseCertificateID));
    
    AttributeCertificateHolder holder = attrCert.getHolder();
    
    if (holder.getEntityNames() != null)
    {
        fail("entity names set when none expected");
    }
    
    if (!holder.getSerialNumber().equals(cert.getSerialNumber()))
    {
        fail("holder serial number doesn't match");
    }

    if (!holder.getIssuer()[0].equals(cert.getIssuerX500Principal()))
    {
        fail("holder issuer doesn't match");
    }
    
    if (!holder.match(cert))
    {
        fail("holder not matching holder certificate");
    }

    if (!holder.equals(holder.clone()))
    {
        fail("holder clone test failed");
    }

    if (!attrCert.getIssuer().equals(attrCert.getIssuer().clone()))
    {
        fail("issuer clone test failed");
    }
    
    //equalityAndHashCodeTest(attrCert, certWithBaseCertificateID);
}
 

import org.bouncycastle.x509.X509AttributeCertificate; //导入依赖的package包/类
private static Collection convertCert(X509AttributeCertificate attrCert)
    throws IOException
{
    List tmp = new ArrayList();

    tmp.add(attrCert);

    return convertCerts(tmp);
}