~brian-thomason/+junk/bouncycastle

X509v3CertificateBuilder v3CertGen = new JcaX509v3CertificateBuilder(new X500Name(issDN), BigInteger.valueOf(serialNo++), new Date(System.currentTimeMillis()), new Date(System.currentTimeMillis() + (1000L * 60 * 60 * 24 * 100)), new X500Name(subDN), subPub);

102

103

v3CertGen.addExtension(

104

X509Extension.subjectKeyIdentifier,

105

false,

106

createSubjectKeyId(subPub));

107

108

v3CertGen.addExtension(

109

X509Extension.authorityKeyIdentifier,

110

false,

111

createAuthorityKeyId(issPub));

112

113

return new JcaX509CertificateConverter().setProvider("BC").getCertificate(v3CertGen.build(new JcaContentSignerBuilder("MD5withRSA").setProvider("BC").build(issPriv)));

114

}

115

116

public static void main(

117

String args[])

118

throws Exception

119

{

120

121

// set up our certs

122

123

KeyPairGenerator kpg = KeyPairGenerator.getInstance("RSA", "BC");

124

125

kpg.initialize(1024, new SecureRandom());

126

127

128

// cert that issued the signing certificate

129

130

String signDN = "O=Bouncy Castle, C=AU";

131

KeyPair signKP = kpg.generateKeyPair();

132

X509Certificate signCert = makeCertificate(

133

signKP, signDN, signKP, signDN);

134

135

136

// cert we sign against

137

138

String origDN = "CN=Eric H. Echidna, E=eric@bouncycastle.org, O=Bouncy Castle, C=AU";

139

KeyPair origKP = kpg.generateKeyPair();

140

X509Certificate origCert = makeCertificate(

141

origKP, origDN, signKP, signDN);

142

143

List certList = new ArrayList();

144

145

certList.add(origCert);

146

certList.add(signCert);

147

148

149

// create a CertStore containing the certificates we want carried

150

// in the signature

151

152

Store certs = new JcaCertStore(certList);

153

154

155

// create some smime capabilities in case someone wants to respond

156

157

ASN1EncodableVector signedAttrs = new ASN1EncodableVector();

158

SMIMECapabilityVector caps = new SMIMECapabilityVector();

159

160

caps.addCapability(SMIMECapability.dES_EDE3_CBC);

161

caps.addCapability(SMIMECapability.rC2_CBC, 128);

162

caps.addCapability(SMIMECapability.dES_CBC);

163

164

signedAttrs.add(new SMIMECapabilitiesAttribute(caps));

165

166

167

// add an encryption key preference for encrypted responses -

168

// normally this would be different from the signing certificate...

169

170

IssuerAndSerialNumber issAndSer = new IssuerAndSerialNumber(

171

new X500Name(signDN), origCert.getSerialNumber());

172

173

signedAttrs.add(new SMIMEEncryptionKeyPreferenceAttribute(issAndSer));

174

175

176

// create the generator for creating an smime/signed message

177

178

SMIMESignedGenerator gen = new SMIMESignedGenerator();

179

180

181

// add a signer to the generator - this specifies we are using SHA1 and

182

// adding the smime attributes above to the signed attributes that

183

// will be generated as part of the signature. The encryption algorithm

184

// used is taken from the key - in this RSA with PKCS1Padding

185

186

gen.addSignerInfoGenerator(new JcaSimpleSignerInfoGeneratorBuilder().setProvider("BC").setSignedAttributeGenerator(new AttributeTable(signedAttrs)).build("SHA1withRSA", origKP.getPrivate(), origCert));

187

188

189

// add our pool of certs and cerls (if any) to go with the signature

190

191

gen.addCertificates(certs);

192

193

194

// create the base for our message

195

196

MimeBodyPart msg = new MimeBodyPart();

197

198

msg.setDataHandler(new DataHandler(new FileDataSource(new File(args[0]))));

199

msg.setHeader("Content-Type", "application/octet-stream");

200

msg.setHeader("Content-Transfer-Encoding", "base64");

201

202

203

// extract the multipart object from the SMIMESigned object.

204

205

MimeMultipart mm = gen.generate(msg);

206

207

208

// Get a Session object and create the mail message

209

210

Properties props = System.getProperties();

211

Session session = Session.getDefaultInstance(props, null);

212

213

Address fromUser = new InternetAddress("\"Eric H. Echidna\"<eric@bouncycastle.org>");

214

Address toUser = new InternetAddress("example@bouncycastle.org");

215

216

MimeMessage body = new MimeMessage(session);

217

body.setFrom(fromUser);

218

body.setRecipient(Message.RecipientType.TO, toUser);

219

body.setSubject("example signed message");

220

body.setContent(mm, mm.getContentType());

221

body.saveChanges();

222

223

body.writeTo(new FileOutputStream("signed.message"));

224

}

225

}