Changeset 5898 for branches/2.3/security/ExpressoCert/src/br/gov/serpro/cert/Token.java

Timestamp:

04/09/12 15:21:57 (12 years ago)

Author:

rafaelraymundo

Message:

Ticket #2256 - Problemas com o token iKey 2032 / 4000.

File:

• branches/2.3/security/ExpressoCert/src/br/gov/serpro/cert/Token.java (modified) (2 diffs)

branches/2.3/security/ExpressoCert/src/br/gov/serpro/cert/Token.java

@@ -13 +13 @@
 import java.security.ProviderException;
 import java.security.Security;
-import java.security.cert.CertificateFactory;
-import java.util.logging.Level;
-import java.util.logging.Logger;
-import java.security.cert.X509Certificate;
-import java.text.DateFormat;
-import java.util.HashMap;
-import java.util.Locale;
-import java.util.Map;
-import sun.security.pkcs11.wrapper.CK_ATTRIBUTE;
-import sun.security.pkcs11.wrapper.CK_C_INITIALIZE_ARGS;
-import sun.security.pkcs11.wrapper.Functions;
-import sun.security.pkcs11.wrapper.PKCS11;
-import sun.security.pkcs11.wrapper.PKCS11Exception;
-import static sun.security.pkcs11.wrapper.PKCS11Constants.*;
 
 //TODO: Deal with wildcards for environments variables.
@@ -111 +97 @@
     }
 
-    Map<String, String> getAliases() throws IOException{
-
-        if (setup.getParameter("debug").equalsIgnoreCase("true")) {
-            System.out.println("Getting Aliases");
-        }
-
-        Map<String, String> aliases = new HashMap<String, String>();
-
-        CK_C_INITIALIZE_ARGS initArgs = new CK_C_INITIALIZE_ARGS();
-        String functionList = "C_GetFunctionList";
-
-        initArgs.flags = CKF_OS_LOCKING_OK;
-
-        PKCS11 tmpPKCS11 = null;
-        try {
-            try {
-                tmpPKCS11 = PKCS11.getInstance(libraryPath, functionList, initArgs, false);
-            } catch (IOException ex) {
-                if (setup.getParameter("debug").equalsIgnoreCase("true")) {
-                    Logger.getLogger(TokenCollection.class.getName()).log(Level.SEVERE, null, ex);
-                }
-                throw ex;
-            }
-        } catch (PKCS11Exception e) {
-            try {
-                initArgs = null;
-                tmpPKCS11 = PKCS11.getInstance(libraryPath, functionList, initArgs, true);
-            } catch (IOException ex) {
-                if (setup.getParameter("debug").equalsIgnoreCase("true")) {
-                    Logger.getLogger(TokenCollection.class.getName()).log(Level.SEVERE, null, ex);
-                }
-            } catch (PKCS11Exception ex) {
-                if (setup.getParameter("debug").equalsIgnoreCase("true")) {
-                    Logger.getLogger(TokenCollection.class.getName()).log(Level.SEVERE, null, ex);
-                }
-            }
-        }
-
-        try {
-            // cria sessão pública rw. com flag CKF_SERIAL_SESSION
-            long session = tmpPKCS11.C_OpenSession(this.slot, CKF_SERIAL_SESSION, null, null);
-
-            if (setup.getParameter("debug").equalsIgnoreCase("true")) {
-                System.out.println("session number:  "+session);
-            }
-
-            // TODO: Verifica se está logado, senão loga usuário. Pede pin? ou recebe pin?
-
-            CK_ATTRIBUTE[] TEMPLATE_CERTIFICATE = {new CK_ATTRIBUTE(CKA_CLASS, CKO_CERTIFICATE)};
-            CK_ATTRIBUTE[] TEMPLATE_PKEY = {new CK_ATTRIBUTE(CKA_CLASS, CKO_PRIVATE_KEY)};
-            CK_ATTRIBUTE[] TEMPLATE_KEY_LABEL_ID = {new CK_ATTRIBUTE(CKA_LABEL), new CK_ATTRIBUTE(CKA_ID)};
-            CK_ATTRIBUTE[] TEMPLATE_CERT_LABEL_ID = {
-                new CK_ATTRIBUTE(CKA_LABEL),
-                new CK_ATTRIBUTE(CKA_ID),
-                new CK_ATTRIBUTE(CKA_VALUE)
-            };
-
-            tmpPKCS11.C_FindObjectsInit(session, TEMPLATE_CERTIFICATE);
-            long[] certs = tmpPKCS11.C_FindObjects(session, 20);
-
-            tmpPKCS11.C_FindObjectsFinal(session);
-
-            tmpPKCS11.C_FindObjectsInit(session, TEMPLATE_PKEY);
-            long[] keys = tmpPKCS11.C_FindObjects(session, 20);
-
-            if (setup.getParameter("debug").equalsIgnoreCase("true")) {
-                System.out.println("Private Keys: "+keys.length);
-            }
-
-            for (long key : keys){
-                tmpPKCS11.C_GetAttributeValue(session, key, TEMPLATE_KEY_LABEL_ID);
-
-                if (setup.getParameter("debug").equalsIgnoreCase("true")) {
-                    System.out.print("Private key ID: ");
-                    for (byte b : (byte [])TEMPLATE_KEY_LABEL_ID[1].pValue){
-                        System.out.print(b);
-                    }
-                    System.out.println();
-                    if (TEMPLATE_KEY_LABEL_ID[0].pValue != null)
-                    {
-                        System.out.println("Private key LABEL: "+new String((char [])TEMPLATE_KEY_LABEL_ID[0].pValue));
-                    }
-                }
-
-                if (setup.getParameter("debug").equalsIgnoreCase("true")) {
-                    System.out.println("Certs:");
-                }
-                
-                for (long cert : certs){
-                    tmpPKCS11.C_GetAttributeValue(session, cert, TEMPLATE_CERT_LABEL_ID);
-
-                    if (Functions.equals((byte [])TEMPLATE_KEY_LABEL_ID[1].pValue, 
-                            (byte [])TEMPLATE_CERT_LABEL_ID[1].pValue)){
-                        if (TEMPLATE_CERT_LABEL_ID[0].pValue != null)
-                        {
-                            if (setup.getParameter("debug").equalsIgnoreCase("true")) {
-                                System.out.println("Certificate LABEL: "+new String((char [])TEMPLATE_CERT_LABEL_ID[0].pValue));
-                            }
-                            ByteArrayInputStream in = new ByteArrayInputStream((byte [])TEMPLATE_CERT_LABEL_ID[2].pValue);
-                            CertificateFactory cf = CertificateFactory.getInstance("X.509");
-                            X509Certificate certObj = (X509Certificate)cf.generateCertificate(in);
-                            if (certObj.getBasicConstraints() == -1 ){
-
-                                StringBuilder selector = new StringBuilder();
-                                // get more info to generate the value
-                                // Subject's CN / Issuer's CN / Expiration Data
-                                String subject = certObj.getSubjectX500Principal().getName();
-                                int pInicial = subject.indexOf('=')+1;
-                                int pFinal = subject.indexOf(',', pInicial);
-                                selector.append(subject.substring(pInicial, pFinal)+" | ");
-
-                                String issuer = certObj.getIssuerX500Principal().getName();
-                                pInicial = issuer.indexOf('=')+1;
-                                pFinal = issuer.indexOf(',', pInicial);
-                                selector.append(issuer.substring(pInicial, pFinal)+" | ");
-
-                                Locale locale = new Locale("pt", "BR");
-                                DateFormat df = DateFormat.getDateInstance(DateFormat.MEDIUM, locale);
-                                selector.append(df.format(certObj.getNotAfter())+" | ");
-                                
-                                selector.append("("+certObj.getSerialNumber()+")");
-                                
-                                aliases.put(new String((char [])TEMPLATE_CERT_LABEL_ID[0].pValue),
-                                        selector.toString());
-                            }
-                        }
-                    }
-
-                }
-                if (setup.getParameter("debug").equalsIgnoreCase("true")) {
-                    System.out.println();
-                }
-            }
-
-            tmpPKCS11.C_CloseSession(session);
-
-        } catch (PKCS11Exception ex) {
-            if (setup.getParameter("debug").equalsIgnoreCase("true")) {
-                Logger.getLogger(TokenCollection.class.getName()).log(Level.SEVERE, null, ex);
-            }
-        } catch (Throwable t) {
-            if (setup.getParameter("debug").equalsIgnoreCase("true")) {
-                Logger.getLogger(TokenCollection.class.getName()).log(Level.SEVERE, null, t);
-            }
-        }
-
-        return aliases;
-
-    }
-
     public boolean libraryExists(){