1 package org.cacert.gigi.crypto;
3 import java.io.ByteArrayOutputStream;
4 import java.io.IOException;
5 import java.io.PrintWriter;
6 import java.math.BigInteger;
7 import java.security.GeneralSecurityException;
8 import java.security.PrivateKey;
9 import java.security.Signature;
10 import java.security.cert.X509Certificate;
11 import java.util.Random;
13 import org.cacert.gigi.util.PEM;
15 import sun.security.pkcs.ContentInfo;
16 import sun.security.pkcs.PKCS7;
17 import sun.security.pkcs.SignerInfo;
18 import sun.security.util.DerOutputStream;
19 import sun.security.x509.AlgorithmId;
20 import sun.security.x509.X500Name;
24 public static String doAlternatives(String plain, String html) {
26 plain = "Content-type: text/plain\r\n\r\n" + plain;
27 html = "Content-type: text/html\r\n\r\n" + html;
28 String boundary = generateBoundary(plain, html);
29 StringBuffer content = new StringBuffer("Content-Type: multipart/alternative; boundary=\"");
30 content.append(boundary);
31 content.append("\"\r\n\r\n");
33 content.append(boundary);
34 content.append("\r\n");
35 content.append(plain);
36 content.append("\r\n--");
37 content.append(boundary);
38 content.append("\r\n");
40 content.append("\r\n--");
41 content.append(boundary);
42 content.append("--\r\n");
43 return content.toString();
47 public static void smime(String contents, PrivateKey pKey, X509Certificate c, PrintWriter to) throws IOException, GeneralSecurityException {
49 Signature signature = Signature.getInstance("SHA1WithRSA");
50 signature.initSign(pKey);
51 signature.update(contents.getBytes("UTF-8"));
52 byte[] signedData = signature.sign();
54 // "IssuerAndSerialNumber"
55 X500Name xName = X500Name.asX500Name(c.getIssuerX500Principal());
56 BigInteger serial = c.getSerialNumber();
58 SignerInfo sInfo = new SignerInfo(xName, serial, new AlgorithmId(AlgorithmId.SHA_oid), null, new AlgorithmId(AlgorithmId.RSAEncryption_oid), signedData, null);
60 // Content is outside so content here is null.
61 ContentInfo cInfo = new ContentInfo(ContentInfo.DATA_OID, null);
63 // Create PKCS7 Signed data
64 PKCS7 p7 = new PKCS7(new AlgorithmId[] {
65 new AlgorithmId(AlgorithmId.SHA_oid)
66 }, cInfo, new java.security.cert.X509Certificate[] {
72 ByteArrayOutputStream bOut = new DerOutputStream();
73 p7.encodeSignedData(bOut);
75 mimeEncode(contents, PEM.formatBase64(bOut.toByteArray()), to);
78 private static Random r = new Random();
80 private static void mimeEncode(String contents, String signature, PrintWriter to) {
81 String boundary = generateBoundary(contents, null);
82 to.println("MIME-Version: 1.0");
83 to.println("Content-Type: multipart/signed; protocol=\"application/x-pkcs7-signature\"; micalg=\"sha1\"; boundary=\"" + boundary + "\"");
85 to.println("This is an S/MIME signed message");
87 to.println("--" + boundary);
89 to.println("--" + boundary);
90 to.println("Content-Type: application/x-pkcs7-signature; name=\"smime.p7s\"");
91 to.println("Content-Transfer-Encoding: base64");
92 to.println("Content-Disposition: attachment; filename=\"smime.p7s\"");
94 to.println(signature);
96 to.println("--" + boundary + "--");
99 private static String generateBoundary(String contents, String contents2) {
100 String boundary = "";
101 while (contents.contains(boundary) || (contents2 != null && contents2.contains(boundary))) {
102 boundary = "--" + new BigInteger(16 * 8, r).toString(16).toUpperCase();