From 089d8c3fb0a277351a55371dff8c2b27bd3f4ed5 Mon Sep 17 00:00:00 2001
From: Bogumil Zebek <bogumil.zebek@nokia.com>
Date: Wed, 17 Apr 2019 07:56:27 +0200
Subject: Security TC op2

Change-Id: I247c1223b5731c8dbea1480ca88db1cff78cb633
Issue-ID: VNFSDK-342
Signed-off-by: Zebek Bogumil <bogumil.zebek@nokia.com>
---
 .../onap/cvc/csar/rsa/RSACertificateValidator.java | 43 ++++++++++++++++++++++
 1 file changed, 43 insertions(+)
 create mode 100644 csarvalidation/src/main/java/org/onap/cvc/csar/rsa/RSACertificateValidator.java

(limited to 'csarvalidation/src/main/java/org/onap/cvc/csar/rsa/RSACertificateValidator.java')

diff --git a/csarvalidation/src/main/java/org/onap/cvc/csar/rsa/RSACertificateValidator.java b/csarvalidation/src/main/java/org/onap/cvc/csar/rsa/RSACertificateValidator.java
new file mode 100644
index 0000000..022f697
--- /dev/null
+++ b/csarvalidation/src/main/java/org/onap/cvc/csar/rsa/RSACertificateValidator.java
@@ -0,0 +1,43 @@
+/*
+ * Copyright 2019 Nokia
+ * <p>
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ * <p>
+ * http://www.apache.org/licenses/LICENSE-2.0
+ * <p>
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ *
+ */
+
+package org.onap.cvc.csar.rsa;
+
+
+import java.security.PublicKey;
+
+public class RSACertificateValidator {
+
+    private final X509RsaCertification x509RsaCertification;
+
+    public RSACertificateValidator(X509RsaCertification x509RsaCertification) {
+        this.x509RsaCertification = x509RsaCertification;
+    }
+
+    public boolean isValid(byte [] content, String signature, String publicCertificateContent) throws Exception {
+
+        String publicCert = extractPublicKeyCertificate(publicCertificateContent);
+        final PublicKey publicKey = this.x509RsaCertification.generatePublicKey(publicCert);
+
+        return this.x509RsaCertification.verify(content,signature,publicKey);
+    }
+
+    private String extractPublicKeyCertificate(String publicCertificateContent) {
+        String publicCert = publicCertificateContent.replace("-----BEGIN CERTIFICATE-----\n", "");
+        return publicCert.replace("-----END CERTIFICATE-----\n", "");
+    }
+}
-- 
cgit 1.2.3-korg