Download - Svetlin Nakov

private void verifyReceivedCertificate()
throws IOException, GeneralSecurityException {
// Create the list of the trusted certificates for direct validation
X509Certificate[] trustedCertificates =
getCertificateList(mApplicationContext,CERTS_FOR_DIRECT_VALIDATION_DIR);
}
// Verify the certificate and display the verification results
mOut.println("Certificate direct verification status: ");
try {
DigitalSignatureUtils.verifyCertificate(
mCertificate, trustedCertificates);
mOut.println("Certificate is verified to be VALID.");
} catch (CertificateExpiredException cee) {
mOut.println("Certificate is INVALID (validity period expired)!");
} catch (CertificateNotYetValidException cnyve) {
mOut.println("Certificate is INVALID (validity period not started)!");
} catch (DigitalSignatureUtils.CertificateValidationException cve) {
mOut.println("Certificate is INVALID! " + cve.getMessage());
}
mOut.println("");
/**
* Verifies received certification chain and displays the verification results.
* The chain for verification is taken form mCertPath member variable. Trusted
* CA root certificates are taken from the TRUSTED_CA_ROOT_CERTS_DIR directory.
* This directory should be relative to the Web application root directory and
* should contain only .CER files (DER-encoded X.509 certificates).
*/
private void verifyReceivedCertificationChain()
throws IOException, GeneralSecurityException {
// Create the most trusted CA set of trust anchors
X509Certificate[] trustedCACerts =
getCertificateList(mApplicationContext, TRUSTED_CA_ROOT_CERTS_DIR);
}
// Verify the certification chain and display the verification results
mOut.println("Certification chain verification: ");
try {
DigitalSignatureUtils.verifyCertificationChain(
mCertPath, trustedCACerts);
mOut.println("Certification chain verified to be VALID.");
} catch (CertPathValidatorException cpve) {
mOut.println("Certification chain is INVALID! Validation failed on " +
"cert [" + cpve.getIndex() + "] from the chain: "+cpve.toString());
}
mOut.println(" ");
/**
* @return a list of X509 certificates, obtained by reading all files from the
* given directory. The supplied directory should be a given as a relative path
* from the Web appication root (e.g. "/WEB-INF/test") and should contain only
* .CER files (DER-encoded X.509 certificates).
*/
private X509Certificate[] getCertificateList(ServletContext aServletContext,
String aCertificatesDirectory)
throws IOException, GeneralSecurityException {
// Get a list of all files in the given directory
Set trustedCertsResNames =
aServletContext.getResourcePaths(aCertificatesDirectory);
// Allocate an array for storing the certificates
int count = trustedCertsResNames.size();
X509Certificate[] trustedCertificates = new X509Certificate[count];
123