Java 类java.security.CodeSigner 实例源码

项目：mobile-store 文件：RepoUpdater.java

/**
 * FDroid's index.jar is signed using a particular format and does not allow lots of
 * signing setups that would be valid for a regular jar.  This validates those
 * restrictions.
 */
X509Certificate getSigningCertFromJar(JarEntry jarEntry) throws SigningException {
    final CodeSigner[] codeSigners = jarEntry.getCodeSigners();
    if (codeSigners == null || codeSigners.length == 0) {
        throw new SigningException(repo, "No signature found in index");
    }
    /* we could in theory support more than 1, but as of now we do not */
    if (codeSigners.length > 1) {
        throw new SigningException(repo, "index.jar must be signed by a single code signer!");
    }
    List<? extends Certificate> certs = codeSigners[0].getSignerCertPath().getCertificates();
    if (certs.size() != 1) {
        throw new SigningException(repo, "index.jar code signers must only have a single certificate!");
    }
    return (X509Certificate) certs.get(0);
}

项目：jdk8u-jdk 文件：SignatureFileVerifier.java

/**
 * Create the named SignatureFileVerifier.
 *
 * @param name the name of the signature block file (.DSA/.RSA/.EC)
 *
 * @param rawBytes the raw bytes of the signature block file
 */
public SignatureFileVerifier(ArrayList<CodeSigner[]> signerCache,
                             ManifestDigester md,
                             String name,
                             byte rawBytes[])
    throws IOException, CertificateException
{
    // new PKCS7() calls CertificateFactory.getInstance()
    // need to use local providers here, see Providers class
    Object obj = null;
    try {
        obj = Providers.startJarVerification();
        block = new PKCS7(rawBytes);
        sfBytes = block.getContentInfo().getData();
        certificateFactory = CertificateFactory.getInstance("X509");
    } finally {
        Providers.stopJarVerification(obj);
    }
    this.name = name.substring(0, name.lastIndexOf("."))
                                               .toUpperCase(Locale.ENGLISH);
    this.md = md;
    this.signerCache = signerCache;
}

项目：jdk8u-jdk 文件：SignatureFileVerifier.java

/**
 * process the signature block file. Goes through the .SF file
 * and adds code signers for each section where the .SF section
 * hash was verified against the Manifest section.
 *
 *
 */
public void process(Hashtable<String, CodeSigner[]> signers,
        List<Object> manifestDigests)
    throws IOException, SignatureException, NoSuchAlgorithmException,
        JarException, CertificateException
{
    // calls Signature.getInstance() and MessageDigest.getInstance()
    // need to use local providers here, see Providers class
    Object obj = null;
    try {
        obj = Providers.startJarVerification();
        processImpl(signers, manifestDigests);
    } finally {
        Providers.stopJarVerification(obj);
    }

}

项目：openjdk-jdk10 文件：SignatureFileVerifier.java

/**
 * Create the named SignatureFileVerifier.
 *
 * @param name the name of the signature block file (.DSA/.RSA/.EC)
 *
 * @param rawBytes the raw bytes of the signature block file
 */
public SignatureFileVerifier(ArrayList<CodeSigner[]> signerCache,
                             ManifestDigester md,
                             String name,
                             byte[] rawBytes)
    throws IOException, CertificateException
{
    // new PKCS7() calls CertificateFactory.getInstance()
    // need to use local providers here, see Providers class
    Object obj = null;
    try {
        obj = Providers.startJarVerification();
        block = new PKCS7(rawBytes);
        sfBytes = block.getContentInfo().getData();
        certificateFactory = CertificateFactory.getInstance("X509");
    } finally {
        Providers.stopJarVerification(obj);
    }
    this.name = name.substring(0, name.lastIndexOf('.'))
                                               .toUpperCase(Locale.ENGLISH);
    this.md = md;
    this.signerCache = signerCache;
}

项目：openjdk-jdk10 文件：SignatureFileVerifier.java

/**
 * process the signature block file. Goes through the .SF file
 * and adds code signers for each section where the .SF section
 * hash was verified against the Manifest section.
 *
 *
 */
public void process(Hashtable<String, CodeSigner[]> signers,
        List<Object> manifestDigests)
    throws IOException, SignatureException, NoSuchAlgorithmException,
        JarException, CertificateException
{
    // calls Signature.getInstance() and MessageDigest.getInstance()
    // need to use local providers here, see Providers class
    Object obj = null;
    try {
        obj = Providers.startJarVerification();
        processImpl(signers, manifestDigests);
    } finally {
        Providers.stopJarVerification(obj);
    }

}

项目：CCTweaks-Lua 文件：ClassLoaderHelpers.java

static CodeSource findSource(ClassLoader loader, String name) {
    String fileName = name.replace('.', '/') + ".class";
    URL url = loader.getResource(fileName);
    if (url == null) return null;

    CodeSigner[] signers = null;
    if (name.lastIndexOf('.') > -1) {
        try {
            URLConnection connection = url.openConnection();
            if (connection instanceof JarURLConnection) {
                JarURLConnection jarConnection = (JarURLConnection) connection;
                url = jarConnection.getJarFileURL();

                JarFile jarFile = jarConnection.getJarFile();
                if (jarFile != null && jarFile.getManifest() != null) {
                    signers = jarFile.getJarEntry(fileName).getCodeSigners();
                }
            }
        } catch (IOException e) {
            return null;
        }
    }

    return new CodeSource(url, signers);
}

项目：jdk8u_jdk 文件：SignatureFileVerifier.java

/**
 * Create the named SignatureFileVerifier.
 *
 * @param name the name of the signature block file (.DSA/.RSA/.EC)
 *
 * @param rawBytes the raw bytes of the signature block file
 */
public SignatureFileVerifier(ArrayList<CodeSigner[]> signerCache,
                             ManifestDigester md,
                             String name,
                             byte[] rawBytes)
    throws IOException, CertificateException
{
    // new PKCS7() calls CertificateFactory.getInstance()
    // need to use local providers here, see Providers class
    Object obj = null;
    try {
        obj = Providers.startJarVerification();
        block = new PKCS7(rawBytes);
        sfBytes = block.getContentInfo().getData();
        certificateFactory = CertificateFactory.getInstance("X509");
    } finally {
        Providers.stopJarVerification(obj);
    }
    this.name = name.substring(0, name.lastIndexOf('.'))
                                               .toUpperCase(Locale.ENGLISH);
    this.md = md;
    this.signerCache = signerCache;
}

项目：jdk8u_jdk 文件：SignatureFileVerifier.java

/**
 * process the signature block file. Goes through the .SF file
 * and adds code signers for each section where the .SF section
 * hash was verified against the Manifest section.
 *
 *
 */
public void process(Hashtable<String, CodeSigner[]> signers,
        List<Object> manifestDigests)
    throws IOException, SignatureException, NoSuchAlgorithmException,
        JarException, CertificateException
{
    // calls Signature.getInstance() and MessageDigest.getInstance()
    // need to use local providers here, see Providers class
    Object obj = null;
    try {
        obj = Providers.startJarVerification();
        processImpl(signers, manifestDigests);
    } finally {
        Providers.stopJarVerification(obj);
    }

}

项目：lookaside_java-1.8.0-openjdk 文件：SignatureFileVerifier.java

/**
 * Create the named SignatureFileVerifier.
 *
 * @param name the name of the signature block file (.DSA/.RSA/.EC)
 *
 * @param rawBytes the raw bytes of the signature block file
 */
public SignatureFileVerifier(ArrayList<CodeSigner[]> signerCache,
                             ManifestDigester md,
                             String name,
                             byte[] rawBytes)
    throws IOException, CertificateException
{
    // new PKCS7() calls CertificateFactory.getInstance()
    // need to use local providers here, see Providers class
    Object obj = null;
    try {
        obj = Providers.startJarVerification();
        block = new PKCS7(rawBytes);
        sfBytes = block.getContentInfo().getData();
        certificateFactory = CertificateFactory.getInstance("X509");
    } finally {
        Providers.stopJarVerification(obj);
    }
    this.name = name.substring(0, name.lastIndexOf('.'))
                                               .toUpperCase(Locale.ENGLISH);
    this.md = md;
    this.signerCache = signerCache;
}

项目：lookaside_java-1.8.0-openjdk 文件：SignatureFileVerifier.java

/**
 * process the signature block file. Goes through the .SF file
 * and adds code signers for each section where the .SF section
 * hash was verified against the Manifest section.
 *
 *
 */
public void process(Hashtable<String, CodeSigner[]> signers,
        List<Object> manifestDigests)
    throws IOException, SignatureException, NoSuchAlgorithmException,
        JarException, CertificateException
{
    // calls Signature.getInstance() and MessageDigest.getInstance()
    // need to use local providers here, see Providers class
    Object obj = null;
    try {
        obj = Providers.startJarVerification();
        processImpl(signers, manifestDigests);
    } finally {
        Providers.stopJarVerification(obj);
    }

}

项目：fdroid 文件：RepoUpdater.java

/**
 * FDroid's index.jar is signed using a particular format and does not allow lots of
 * signing setups that would be valid for a regular jar.  This validates those
 * restrictions.
 */
private X509Certificate getSigningCertFromJar(JarEntry jarEntry) throws SigningException {
    final CodeSigner[] codeSigners = jarEntry.getCodeSigners();
    if (codeSigners == null || codeSigners.length == 0) {
        throw new SigningException(repo, "No signature found in index");
    }
    /* we could in theory support more than 1, but as of now we do not */
    if (codeSigners.length > 1) {
        throw new SigningException(repo, "index.jar must be signed by a single code signer!");
    }
    List<? extends Certificate> certs = codeSigners[0].getSignerCertPath().getCertificates();
    if (certs.size() != 1) {
        throw new SigningException(repo, "index.jar code signers must only have a single certificate!");
    }
    return (X509Certificate) certs.get(0);
}

项目：AppHub 文件：RepoUpdater.java

/**
 * FDroid's index.jar is signed using a particular format and does not allow lots of
 * signing setups that would be valid for a regular jar.  This validates those
 * restrictions.
 */
private X509Certificate getSigningCertFromJar(JarEntry jarEntry) throws SigningException {
    final CodeSigner[] codeSigners = jarEntry.getCodeSigners();
    if (codeSigners == null || codeSigners.length == 0) {
        throw new SigningException(repo, "No signature found in index");
    }
    /* we could in theory support more than 1, but as of now we do not */
    if (codeSigners.length > 1) {
        throw new SigningException(repo, "index.jar must be signed by a single code signer!");
    }
    List<? extends Certificate> certs = codeSigners[0].getSignerCertPath().getCertificates();
    if (certs.size() != 1) {
        throw new SigningException(repo, "index.jar code signers must only have a single certificate!");
    }
    return (X509Certificate) certs.get(0);
}