blob: 0969069ffe9cd7ce4d96c7cee733150133c3ddc2 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
|
package de.blinkt.openvpn.core;
import android.text.TextUtils;
import de.blinkt.openvpn.VpnProfile;
import org.spongycastle.util.io.pem.PemObject;
import org.spongycastle.util.io.pem.PemReader;
import javax.security.auth.x500.X500Principal;
import java.io.*;
import java.security.cert.Certificate;
import java.security.cert.CertificateException;
import java.security.cert.CertificateFactory;
import java.security.cert.X509Certificate;
public class X509Utils {
public static Certificate getCertificateFromFile(String certfilename) throws FileNotFoundException, CertificateException {
CertificateFactory certFact = CertificateFactory.getInstance("X.509");
InputStream inStream;
if(certfilename.startsWith(VpnProfile.INLINE_TAG))
inStream = new ByteArrayInputStream(certfilename.replace(VpnProfile.INLINE_TAG,"").getBytes());
else
inStream = new FileInputStream(certfilename);
return certFact.generateCertificate(inStream);
}
public static PemObject readPemObjectFromFile (String keyfilename) throws CertificateException, IOException {
Reader inStream;
if(keyfilename.startsWith(VpnProfile.INLINE_TAG))
inStream = new StringReader(keyfilename.replace(VpnProfile.INLINE_TAG,""));
else
inStream = new FileReader(new File(keyfilename));
PemReader pr = new PemReader(inStream);
PemObject r = pr.readPemObject();
pr.close();
return r;
}
public static String getCertificateFriendlyName (String filename) {
if(!TextUtils.isEmpty(filename)) {
try {
X509Certificate cert = (X509Certificate) getCertificateFromFile(filename);
X500Principal principal = (X500Principal) cert.getSubjectDN();
String friendlyname = principal.getName();
System.out.println(friendlyname);
// Really evil hack to decode email address
String[] parts = friendlyname.split(",");
for (int i=0;i<parts.length;i++){
String part = parts[i];
if (part.startsWith("1.2.840.113549.1.9.1=#16")) {
parts[i] = "email=" + ia5decode(part.replace("1.2.840.113549.1.9.1=#16", ""));
}
}
friendlyname = TextUtils.join(",",parts);
return friendlyname;
} catch (Exception e) {
OpenVPN.logError("Could not read certificate" + e.getLocalizedMessage());
}
}
return "Could not read/parse certificate";
}
public static boolean isPrintableChar(char c) {
Character.UnicodeBlock block = Character.UnicodeBlock.of( c );
return (!Character.isISOControl(c)) &&
block != null &&
block != Character.UnicodeBlock.SPECIALS;
}
private static String ia5decode(String ia5string) {
String d = "";
for (int i=1;i<ia5string.length();i=i+2) {
String hexstr = ia5string.substring(i-1,i+1);
char c = (char) Integer.parseInt(hexstr,16);
if (isPrintableChar(c)) {
d+=c;
} else if (i==1 && c==0x12) {
; // ignore
} else {
d += "\\x" + hexstr;
}
}
return d;
}
}
|
