1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
|
//------------------------------------------------------------
// Copyright (c) Microsoft Corporation. All rights reserved.
//------------------------------------------------------------
namespace System.IdentityModel.Tokens
{
using System.Diagnostics;
using System.Globalization;
using System.Security.Cryptography;
using System.Security.Cryptography.X509Certificates;
public class X509IssuerSerialKeyIdentifierClause : SecurityKeyIdentifierClause
{
readonly string issuerName;
readonly string issuerSerialNumber;
public X509IssuerSerialKeyIdentifierClause(string issuerName, string issuerSerialNumber)
: base(null)
{
if (string.IsNullOrEmpty(issuerName))
throw DiagnosticUtility.ExceptionUtility.ThrowHelperArgumentNull("issuerName");
if (string.IsNullOrEmpty(issuerSerialNumber))
throw DiagnosticUtility.ExceptionUtility.ThrowHelperArgumentNull("issuerSerialNumber");
this.issuerName = issuerName;
this.issuerSerialNumber = issuerSerialNumber;
}
public X509IssuerSerialKeyIdentifierClause(X509Certificate2 certificate)
: base(null)
{
if (certificate == null)
throw DiagnosticUtility.ExceptionUtility.ThrowHelperArgumentNull("certificate");
this.issuerName = certificate.Issuer;
this.issuerSerialNumber = Asn1IntegerConverter.Asn1IntegerToDecimalString(certificate.GetSerialNumber());
}
public string IssuerName
{
get { return this.issuerName; }
}
public string IssuerSerialNumber
{
get { return this.issuerSerialNumber; }
}
public override bool Matches(SecurityKeyIdentifierClause keyIdentifierClause)
{
X509IssuerSerialKeyIdentifierClause that = keyIdentifierClause as X509IssuerSerialKeyIdentifierClause;
// PreSharp Bug: Parameter 'that' to this public method must be validated: A null-dereference can occur here.
#pragma warning suppress 56506
return ReferenceEquals(this, that) || (that != null && that.Matches(this.issuerName, this.issuerSerialNumber));
}
public bool Matches(X509Certificate2 certificate)
{
if (certificate == null)
return false;
return Matches(certificate.Issuer, Asn1IntegerConverter.Asn1IntegerToDecimalString(certificate.GetSerialNumber()));
}
public bool Matches(string issuerName, string issuerSerialNumber)
{
if (issuerName == null)
{
return false;
}
// If serial numbers dont match, we can avoid the potentially expensive issuer name comparison
if (this.issuerSerialNumber != issuerSerialNumber)
{
return false;
}
// Serial numbers match. Do a string comparison of issuer names
if (this.issuerName == issuerName)
{
return true;
}
// String equality comparison for issuer names failed
// Do a byte-level comparison of the X500 distinguished names corresponding to the issuer names.
// X500DistinguishedName constructor can throw for malformed inputs
bool x500IssuerNameMatch = false;
try
{
if (CryptoHelper.IsEqual(new X500DistinguishedName(this.issuerName).RawData,
new X500DistinguishedName(issuerName).RawData))
{
x500IssuerNameMatch = true;
}
}
catch (CryptographicException e)
{
// Absorb and log exception. Fallthrough and return false from method.
DiagnosticUtility.TraceHandledException(e, TraceEventType.Warning);
}
return x500IssuerNameMatch;
}
public override string ToString()
{
return string.Format(CultureInfo.InvariantCulture, "X509IssuerSerialKeyIdentifierClause(Issuer = '{0}', Serial = '{1}')",
this.IssuerName, this.IssuerSerialNumber);
}
}
}
|
