net.sf.keystore_explorer.gui.actions.ExportKeyPairCertificateChainAction.java Source code

Introduction

Here is the source code for net.sf.keystore_explorer.gui.actions.ExportKeyPairCertificateChainAction.java

Source

/*
 * Copyright 2004 - 2013 Wayne Grant
 *           2013 - 2016 Kai Kramer
 *
 * This file is part of KeyStore Explorer.
 *
 * KeyStore Explorer is free software: you can redistribute it and/or modify
 * it under the terms of the GNU General Public License as published by
 * the Free Software Foundation, either version 3 of the License, or
 * (at your option) any later version.
 *
 * KeyStore Explorer is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 * GNU General Public License for more details.
 *
 * You should have received a copy of the GNU General Public License
 * along with KeyStore Explorer.  If not, see <http://www.gnu.org/licenses/>.
 */
package net.sf.keystore_explorer.gui.actions;

import java.awt.Toolkit;
import java.io.File;
import java.io.FileNotFoundException;
import java.io.FileOutputStream;
import java.io.IOException;
import java.security.KeyStore;
import java.security.KeyStoreException;
import java.security.cert.X509Certificate;
import java.text.MessageFormat;

import javax.swing.ImageIcon;
import javax.swing.JOptionPane;

import org.apache.commons.io.IOUtils;

import net.sf.keystore_explorer.crypto.CryptoException;
import net.sf.keystore_explorer.crypto.x509.X509CertUtil;
import net.sf.keystore_explorer.gui.KseFrame;
import net.sf.keystore_explorer.gui.dialogs.importexport.DExportCertificates;
import net.sf.keystore_explorer.gui.error.DError;
import net.sf.keystore_explorer.utilities.history.KeyStoreHistory;

/**
 * Action to export the selected key pair entry's certificate chain.
 *
 */
public class ExportKeyPairCertificateChainAction extends KeyStoreExplorerAction {
    /**
     * Construct action.
     *
     * @param kseFrame
     *            KeyStore Explorer frame
     */
    public ExportKeyPairCertificateChainAction(KseFrame kseFrame) {
        super(kseFrame);

        putValue(LONG_DESCRIPTION, res.getString("ExportKeyPairCertificateChainAction.statusbar"));
        putValue(NAME, res.getString("ExportKeyPairCertificateChainAction.text"));
        putValue(SHORT_DESCRIPTION, res.getString("ExportKeyPairCertificateChainAction.tooltip"));
        putValue(SMALL_ICON, new ImageIcon(Toolkit.getDefaultToolkit()
                .createImage(getClass().getResource(res.getString("ExportKeyPairCertificateChainAction.image")))));
    }

    /**
     * Do action.
     */
    @Override
    protected void doAction() {
        File exportFile = null;

        try {
            String alias = kseFrame.getSelectedEntryAlias();

            DExportCertificates dExportCertificates = new DExportCertificates(frame, alias, true);
            dExportCertificates.setLocationRelativeTo(frame);
            dExportCertificates.setVisible(true);

            if (!dExportCertificates.exportSelected()) {
                return;
            }

            exportFile = dExportCertificates.getExportFile();
            boolean pemEncode = dExportCertificates.pemEncode();
            boolean exportChain = dExportCertificates.exportChain();

            byte[] encoded = null;

            if (exportChain) {
                X509Certificate[] certChain = getCertificateChain(alias);

                if (dExportCertificates.exportFormatPkcs7()) {
                    if (pemEncode) {
                        encoded = X509CertUtil.getCertsEncodedPkcs7Pem(certChain).getBytes();
                    } else {
                        encoded = X509CertUtil.getCertsEncodedPkcs7(certChain);
                    }
                } else if (dExportCertificates.exportFormatPkiPath()) {
                    encoded = X509CertUtil.getCertsEncodedPkiPath(certChain);
                } else if (dExportCertificates.exportFormatSpc()) {
                    // SPC is just DER PKCS #7
                    encoded = X509CertUtil.getCertsEncodedPkcs7(certChain);
                }
            } else {
                X509Certificate cert = getHeadCertificate(alias);

                if (dExportCertificates.exportFormatX509()) {
                    if (pemEncode) {
                        encoded = X509CertUtil.getCertEncodedX509Pem(cert).getBytes();
                    } else {
                        encoded = X509CertUtil.getCertEncodedX509(cert);
                    }
                } else if (dExportCertificates.exportFormatPkcs7()) {
                    if (pemEncode) {
                        encoded = X509CertUtil.getCertEncodedPkcs7Pem(cert).getBytes();
                    } else {
                        encoded = X509CertUtil.getCertEncodedPkcs7(cert);
                    }
                } else if (dExportCertificates.exportFormatPkiPath()) {
                    encoded = X509CertUtil.getCertEncodedPkiPath(cert);
                } else if (dExportCertificates.exportFormatSpc()) {
                    encoded = X509CertUtil.getCertEncodedPkcs7(cert); // SPC is just DER PKCS #7
                }
            }

            exportEncodedCertificates(encoded, exportFile);

            JOptionPane.showMessageDialog(frame,
                    res.getString("ExportKeyPairCertificateChainAction.ExportCertificateChainSuccessful.message"),
                    res.getString("ExportKeyPairCertificateChainAction.ExportCertificateChain.Title"),
                    JOptionPane.INFORMATION_MESSAGE);
        } catch (FileNotFoundException ex) {
            String message = MessageFormat
                    .format(res.getString("ExportKeyPairCertificateChainAction.NoWriteFile.message"), exportFile);

            JOptionPane.showMessageDialog(frame, message,
                    res.getString("ExportKeyPairCertificateChainAction.ExportCertificateChain.Title"),
                    JOptionPane.WARNING_MESSAGE);
        } catch (Exception ex) {
            DError.displayError(frame, ex);
        }
    }

    private X509Certificate getHeadCertificate(String alias) throws CryptoException {
        return X509CertUtil.orderX509CertChain(getCertificateChain(alias))[0];
    }

    private X509Certificate[] getCertificateChain(String alias) throws CryptoException {
        try {
            KeyStoreHistory history = kseFrame.getActiveKeyStoreHistory();
            KeyStore keyStore = history.getCurrentState().getKeyStore();

            X509Certificate[] certChain = X509CertUtil.convertCertificates(keyStore.getCertificateChain(alias));

            return certChain;
        } catch (KeyStoreException ex) {
            String message = MessageFormat
                    .format(res.getString("ExportKeyPairCertificateChainAction.NoAccessEntry.message"), alias);
            throw new CryptoException(message, ex);
        }
    }

    private void exportEncodedCertificates(byte[] encoded, File exportFile) throws IOException {
        FileOutputStream fos = null;

        try {
            fos = new FileOutputStream(exportFile);
            fos.write(encoded);
        } finally {
            IOUtils.closeQuietly(fos);
        }
    }
}