PKIXAttrCertPathValidatorSpi.smali
.class public Lorg/spongycastle/jce/provider/PKIXAttrCertPathValidatorSpi;
.super Ljava/security/cert/CertPathValidatorSpi;
.source "PKIXAttrCertPathValidatorSpi.java"
# instance fields
.field private final helper:Lorg/spongycastle/jcajce/util/JcaJceHelper;
# direct methods
.method public constructor <init>()V
.registers 2
.prologue
.line 37
invoke-direct {p0}, Ljava/security/cert/CertPathValidatorSpi;-><init>()V
.line 34
new-instance v0, Lorg/spongycastle/jcajce/util/BCJcaJceHelper;
invoke-direct {v0}, Lorg/spongycastle/jcajce/util/BCJcaJceHelper;-><init>()V
iput-object v0, p0, Lorg/spongycastle/jce/provider/PKIXAttrCertPathValidatorSpi;->helper:Lorg/spongycastle/jcajce/util/JcaJceHelper;
.line 38
return-void
.end method
# virtual methods
.method public engineValidate(Ljava/security/cert/CertPath;Ljava/security/cert/CertPathParameters;)Ljava/security/cert/CertPathValidatorResult;
.registers 13
.prologue
.line 68
instance-of v0, p2, Lorg/spongycastle/x509/ExtendedPKIXParameters;
if-nez v0, :cond_29
instance-of v0, p2, Lorg/spongycastle/jcajce/PKIXExtendedParameters;
if-nez v0, :cond_29
.line 70
new-instance v0, Ljava/security/InvalidAlgorithmParameterException;
new-instance v1, Ljava/lang/StringBuilder;
const-string v2, "Parameters must be a "
invoke-direct {v1, v2}, Ljava/lang/StringBuilder;-><init>(Ljava/lang/String;)V
const-class v2, Lorg/spongycastle/x509/ExtendedPKIXParameters;
.line 72
invoke-virtual {v2}, Ljava/lang/Class;->getName()Ljava/lang/String;
move-result-object v2
invoke-virtual {v1, v2}, Ljava/lang/StringBuilder;->append(Ljava/lang/String;)Ljava/lang/StringBuilder;
move-result-object v1
const-string v2, " instance."
invoke-virtual {v1, v2}, Ljava/lang/StringBuilder;->append(Ljava/lang/String;)Ljava/lang/StringBuilder;
move-result-object v1
invoke-virtual {v1}, Ljava/lang/StringBuilder;->toString()Ljava/lang/String;
move-result-object v1
invoke-direct {v0, v1}, Ljava/security/InvalidAlgorithmParameterException;-><init>(Ljava/lang/String;)V
throw v0
.line 74
:cond_29
new-instance v3, Ljava/util/HashSet;
invoke-direct {v3}, Ljava/util/HashSet;-><init>()V
.line 75
new-instance v2, Ljava/util/HashSet;
invoke-direct {v2}, Ljava/util/HashSet;-><init>()V
.line 76
new-instance v1, Ljava/util/HashSet;
invoke-direct {v1}, Ljava/util/HashSet;-><init>()V
.line 77
new-instance v6, Ljava/util/HashSet;
invoke-direct {v6}, Ljava/util/HashSet;-><init>()V
.line 80
instance-of v0, p2, Ljava/security/cert/PKIXParameters;
if-eqz v0, :cond_ac
.line 82
new-instance v4, Lorg/spongycastle/jcajce/PKIXExtendedParameters$Builder;
move-object v0, p2
check-cast v0, Ljava/security/cert/PKIXParameters;
invoke-direct {v4, v0}, Lorg/spongycastle/jcajce/PKIXExtendedParameters$Builder;-><init>(Ljava/security/cert/PKIXParameters;)V
.line 84
instance-of v0, p2, Lorg/spongycastle/x509/ExtendedPKIXParameters;
if-eqz v0, :cond_f4
.line 86
check-cast p2, Lorg/spongycastle/x509/ExtendedPKIXParameters;
.line 88
invoke-virtual {p2}, Lorg/spongycastle/x509/ExtendedPKIXParameters;->isUseDeltasEnabled()Z
move-result v0
invoke-virtual {v4, v0}, Lorg/spongycastle/jcajce/PKIXExtendedParameters$Builder;->setUseDeltasEnabled(Z)Lorg/spongycastle/jcajce/PKIXExtendedParameters$Builder;
.line 89
invoke-virtual {p2}, Lorg/spongycastle/x509/ExtendedPKIXParameters;->getValidityModel()I
move-result v0
invoke-virtual {v4, v0}, Lorg/spongycastle/jcajce/PKIXExtendedParameters$Builder;->setValidityModel(I)Lorg/spongycastle/jcajce/PKIXExtendedParameters$Builder;
.line 90
invoke-virtual {p2}, Lorg/spongycastle/x509/ExtendedPKIXParameters;->getAttrCertCheckers()Ljava/util/Set;
move-result-object v2
.line 91
invoke-virtual {p2}, Lorg/spongycastle/x509/ExtendedPKIXParameters;->getProhibitedACAttributes()Ljava/util/Set;
move-result-object v1
.line 92
invoke-virtual {p2}, Lorg/spongycastle/x509/ExtendedPKIXParameters;->getNecessaryACAttributes()Ljava/util/Set;
move-result-object v0
.line 95
:goto_69
invoke-virtual {v4}, Lorg/spongycastle/jcajce/PKIXExtendedParameters$Builder;->build()Lorg/spongycastle/jcajce/PKIXExtendedParameters;
move-result-object p2
move-object v3, v0
move-object v4, v1
move-object v5, v2
move-object v1, p2
.line 102
:goto_71
invoke-virtual {v1}, Lorg/spongycastle/jcajce/PKIXExtendedParameters;->getTargetConstraints()Lorg/spongycastle/jcajce/PKIXCertStoreSelector;
move-result-object v0
.line 103
instance-of v2, v0, Lorg/spongycastle/x509/X509AttributeCertStoreSelector;
if-nez v2, :cond_b3
.line 105
new-instance v0, Ljava/security/InvalidAlgorithmParameterException;
new-instance v1, Ljava/lang/StringBuilder;
const-string v2, "TargetConstraints must be an instance of "
invoke-direct {v1, v2}, Ljava/lang/StringBuilder;-><init>(Ljava/lang/String;)V
const-class v2, Lorg/spongycastle/x509/X509AttributeCertStoreSelector;
.line 107
invoke-virtual {v2}, Ljava/lang/Class;->getName()Ljava/lang/String;
move-result-object v2
invoke-virtual {v1, v2}, Ljava/lang/StringBuilder;->append(Ljava/lang/String;)Ljava/lang/StringBuilder;
move-result-object v1
const-string v2, " for "
invoke-virtual {v1, v2}, Ljava/lang/StringBuilder;->append(Ljava/lang/String;)Ljava/lang/StringBuilder;
move-result-object v1
.line 108
invoke-virtual {p0}, Ljava/lang/Object;->getClass()Ljava/lang/Class;
move-result-object v2
invoke-virtual {v2}, Ljava/lang/Class;->getName()Ljava/lang/String;
move-result-object v2
invoke-virtual {v1, v2}, Ljava/lang/StringBuilder;->append(Ljava/lang/String;)Ljava/lang/StringBuilder;
move-result-object v1
const-string v2, " class."
invoke-virtual {v1, v2}, Ljava/lang/StringBuilder;->append(Ljava/lang/String;)Ljava/lang/StringBuilder;
move-result-object v1
invoke-virtual {v1}, Ljava/lang/StringBuilder;->toString()Ljava/lang/String;
move-result-object v1
invoke-direct {v0, v1}, Ljava/security/InvalidAlgorithmParameterException;-><init>(Ljava/lang/String;)V
throw v0
.line 99
:cond_ac
check-cast p2, Lorg/spongycastle/jcajce/PKIXExtendedParameters;
move-object v4, v2
move-object v5, v3
move-object v3, v1
move-object v1, p2
goto :goto_71
.line 111
:cond_b3
check-cast v0, Lorg/spongycastle/x509/X509AttributeCertStoreSelector;
.line 112
invoke-virtual {v0}, Lorg/spongycastle/x509/X509AttributeCertStoreSelector;->getAttributeCert()Lorg/spongycastle/x509/X509AttributeCertificate;
move-result-object v0
.line 114
invoke-static {v0, v1}, Lorg/spongycastle/jce/provider/RFC3281CertPathUtilities;->processAttrCert1(Lorg/spongycastle/x509/X509AttributeCertificate;Lorg/spongycastle/jcajce/PKIXExtendedParameters;)Ljava/security/cert/CertPath;
move-result-object v7
.line 115
invoke-static {p1, v1}, Lorg/spongycastle/jce/provider/RFC3281CertPathUtilities;->processAttrCert2(Ljava/security/cert/CertPath;Lorg/spongycastle/jcajce/PKIXExtendedParameters;)Ljava/security/cert/CertPathValidatorResult;
move-result-object v8
.line 117
invoke-virtual {p1}, Ljava/security/cert/CertPath;->getCertificates()Ljava/util/List;
move-result-object v2
const/4 v9, 0x0
invoke-interface {v2, v9}, Ljava/util/List;->get(I)Ljava/lang/Object;
move-result-object v2
check-cast v2, Ljava/security/cert/X509Certificate;
.line 118
invoke-static {v2, v1}, Lorg/spongycastle/jce/provider/RFC3281CertPathUtilities;->processAttrCert3(Ljava/security/cert/X509Certificate;Lorg/spongycastle/jcajce/PKIXExtendedParameters;)V
.line 119
invoke-static {v2, v6}, Lorg/spongycastle/jce/provider/RFC3281CertPathUtilities;->processAttrCert4(Ljava/security/cert/X509Certificate;Ljava/util/Set;)V
.line 120
invoke-static {v0, v1}, Lorg/spongycastle/jce/provider/RFC3281CertPathUtilities;->processAttrCert5(Lorg/spongycastle/x509/X509AttributeCertificate;Lorg/spongycastle/jcajce/PKIXExtendedParameters;)V
.line 122
invoke-static {v0, p1, v7, v1, v5}, Lorg/spongycastle/jce/provider/RFC3281CertPathUtilities;->processAttrCert7(Lorg/spongycastle/x509/X509AttributeCertificate;Ljava/security/cert/CertPath;Ljava/security/cert/CertPath;Lorg/spongycastle/jcajce/PKIXExtendedParameters;Ljava/util/Set;)V
.line 123
invoke-static {v0, v4, v3}, Lorg/spongycastle/jce/provider/RFC3281CertPathUtilities;->additionalChecks(Lorg/spongycastle/x509/X509AttributeCertificate;Ljava/util/Set;Ljava/util/Set;)V
.line 127
const/4 v3, 0x0
const/4 v4, -0x1
:try_start_dd
invoke-static {v1, v3, v4}, Lorg/spongycastle/jce/provider/CertPathValidatorUtilities;->getValidCertDateFromValidityModel(Lorg/spongycastle/jcajce/PKIXExtendedParameters;Ljava/security/cert/CertPath;I)Ljava/util/Date;
:try_end_e0
.catch Lorg/spongycastle/jce/provider/AnnotatedException; {:try_start_dd .. :try_end_e0} :catch_eb
move-result-object v3
.line 134
invoke-virtual {p1}, Ljava/security/cert/CertPath;->getCertificates()Ljava/util/List;
move-result-object v4
iget-object v5, p0, Lorg/spongycastle/jce/provider/PKIXAttrCertPathValidatorSpi;->helper:Lorg/spongycastle/jcajce/util/JcaJceHelper;
invoke-static/range {v0 .. v5}, Lorg/spongycastle/jce/provider/RFC3281CertPathUtilities;->checkCRLs(Lorg/spongycastle/x509/X509AttributeCertificate;Lorg/spongycastle/jcajce/PKIXExtendedParameters;Ljava/security/cert/X509Certificate;Ljava/util/Date;Ljava/util/List;Lorg/spongycastle/jcajce/util/JcaJceHelper;)V
.line 135
return-object v8
.line 129
:catch_eb
move-exception v0
.line 131
new-instance v1, Lorg/spongycastle/jce/exception/ExtCertPathValidatorException;
const-string v2, "Could not get validity date from attribute certificate."
invoke-direct {v1, v2, v0}, Lorg/spongycastle/jce/exception/ExtCertPathValidatorException;-><init>(Ljava/lang/String;Ljava/lang/Throwable;)V
throw v1
:cond_f4
move-object v0, v1
move-object v1, v2
move-object v2, v3
goto/16 :goto_69
.end method