aboutsummaryrefslogtreecommitdiff
path: root/Emby.Server.Implementations/Cryptography/X509Builder.cs
diff options
context:
space:
mode:
Diffstat (limited to 'Emby.Server.Implementations/Cryptography/X509Builder.cs')
-rw-r--r--Emby.Server.Implementations/Cryptography/X509Builder.cs153
1 files changed, 0 insertions, 153 deletions
diff --git a/Emby.Server.Implementations/Cryptography/X509Builder.cs b/Emby.Server.Implementations/Cryptography/X509Builder.cs
deleted file mode 100644
index a2e292350..000000000
--- a/Emby.Server.Implementations/Cryptography/X509Builder.cs
+++ /dev/null
@@ -1,153 +0,0 @@
-//
-// X509Builder.cs: Abstract builder class for X509 objects
-//
-// Author:
-// Sebastien Pouliot <sebastien@ximian.com>
-//
-// (C) 2002, 2003 Motus Technologies Inc. (http://www.motus.com)
-// (C) 2004 Novell (http://www.novell.com)
-//
-
-//
-// Permission is hereby granted, free of charge, to any person obtaining
-// a copy of this software and associated documentation files (the
-// "Software"), to deal in the Software without restriction, including
-// without limitation the rights to use, copy, modify, merge, publish,
-// distribute, sublicense, and/or sell copies of the Software, and to
-// permit persons to whom the Software is furnished to do so, subject to
-// the following conditions:
-//
-// The above copyright notice and this permission notice shall be
-// included in all copies or substantial portions of the Software.
-//
-// THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
-// EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
-// MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
-// NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE
-// LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION
-// OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
-// WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
-//
-
-using System;
-using System.Globalization;
-using System.Security.Cryptography;
-
-namespace Emby.Server.Core.Cryptography
-{
-
- public abstract class X509Builder {
-
- private const string defaultHash = "SHA1";
- private string hashName;
-
- protected X509Builder ()
- {
- hashName = defaultHash;
- }
-
- protected abstract ASN1 ToBeSigned (string hashName);
-
- // move to PKCS1
- protected string GetOid (string hashName)
- {
- switch (hashName.ToLower (CultureInfo.InvariantCulture)) {
- case "md2":
- // md2withRSAEncryption (1 2 840 113549 1 1 2)
- return "1.2.840.113549.1.1.2";
- case "md4":
- // md4withRSAEncryption (1 2 840 113549 1 1 3)
- return "1.2.840.113549.1.1.3";
- case "md5":
- // md5withRSAEncryption (1 2 840 113549 1 1 4)
- return "1.2.840.113549.1.1.4";
- case "sha1":
- // sha1withRSAEncryption (1 2 840 113549 1 1 5)
- return "1.2.840.113549.1.1.5";
- case "sha256":
- // sha256WithRSAEncryption OBJECT IDENTIFIER ::= { pkcs-1 11 }
- return "1.2.840.113549.1.1.11";
- case "sha384":
- // sha384WithRSAEncryption OBJECT IDENTIFIER ::= { pkcs-1 12 }
- return "1.2.840.113549.1.1.12";
- case "sha512":
- // sha512WithRSAEncryption OBJECT IDENTIFIER ::= { pkcs-1 13 }
- return "1.2.840.113549.1.1.13";
- default:
- throw new NotSupportedException ("Unknown hash algorithm " + hashName);
- }
- }
-
- public string Hash {
- get { return hashName; }
- set {
- if (hashName == null)
- hashName = defaultHash;
- else
- hashName = value;
- }
- }
-
- public virtual byte[] Sign (AsymmetricAlgorithm aa)
- {
- if (aa is RSA)
- return Sign (aa as RSA);
- else if (aa is DSA)
- return Sign (aa as DSA);
- else
- throw new NotSupportedException ("Unknown Asymmetric Algorithm " + aa.ToString());
- }
-
- private byte[] Build (ASN1 tbs, string hashoid, byte[] signature)
- {
- ASN1 builder = new ASN1 (0x30);
- builder.Add (tbs);
- builder.Add (PKCS7.AlgorithmIdentifier (hashoid));
- // first byte of BITSTRING is the number of unused bits in the first byte
- byte[] bitstring = new byte [signature.Length + 1];
- Buffer.BlockCopy (signature, 0, bitstring, 1, signature.Length);
- builder.Add (new ASN1 (0x03, bitstring));
- return builder.GetBytes ();
- }
-
- public virtual byte[] Sign (RSA key)
- {
- string oid = GetOid (hashName);
- ASN1 tbs = ToBeSigned (oid);
- HashAlgorithm ha = HashAlgorithm.Create (hashName);
- byte[] hash = ha.ComputeHash (tbs.GetBytes ());
-
- RSAPKCS1SignatureFormatter pkcs1 = new RSAPKCS1SignatureFormatter (key);
- pkcs1.SetHashAlgorithm (hashName);
- byte[] signature = pkcs1.CreateSignature (hash);
-
- return Build (tbs, oid, signature);
- }
-
- public virtual byte[] Sign (DSA key)
- {
- string oid = "1.2.840.10040.4.3";
- ASN1 tbs = ToBeSigned (oid);
- HashAlgorithm ha = HashAlgorithm.Create (hashName);
- if (!(ha is SHA1))
- throw new NotSupportedException ("Only SHA-1 is supported for DSA");
- byte[] hash = ha.ComputeHash (tbs.GetBytes ());
-
- DSASignatureFormatter dsa = new DSASignatureFormatter (key);
- dsa.SetHashAlgorithm (hashName);
- byte[] rs = dsa.CreateSignature (hash);
-
- // split R and S
- byte[] r = new byte [20];
- Buffer.BlockCopy (rs, 0, r, 0, 20);
- byte[] s = new byte [20];
- Buffer.BlockCopy (rs, 20, s, 0, 20);
- ASN1 signature = new ASN1 (0x30);
- signature.Add (new ASN1 (0x02, r));
- signature.Add (new ASN1 (0x02, s));
-
- // dsaWithSha1 (1 2 840 10040 4 3)
- return Build (tbs, oid, signature.GetBytes ());
- }
- }
-}