From d342a45d98c4795b3a3fe1aaef5236ad4a782b55 Mon Sep 17 00:00:00 2001
From: Yuuta Liang <yuutaw@students.cs.ubc.ca>
Date: Thu, 12 Oct 2023 12:10:33 +0800
Subject: Implement data structures from X.680, X.501, X.509, and PKCS#10, with
 X.690 encoding / decoding support

The implementation took four days, and it is still a little bit rough. Updated version should arrive soon.

Signed-off-by: Yuuta Liang <yuutaw@students.cs.ubc.ca>
---
 src/main/model/pki/crl/RevokedCertificate.java | 72 ++++++++++++++++++++++++++
 1 file changed, 72 insertions(+)
 create mode 100644 src/main/model/pki/crl/RevokedCertificate.java

(limited to 'src/main/model/pki/crl/RevokedCertificate.java')

diff --git a/src/main/model/pki/crl/RevokedCertificate.java b/src/main/model/pki/crl/RevokedCertificate.java
new file mode 100644
index 0000000..457ecb8
--- /dev/null
+++ b/src/main/model/pki/crl/RevokedCertificate.java
@@ -0,0 +1,72 @@
+package model.pki.crl;
+
+import model.asn1.*;
+
+import java.util.Arrays;
+import java.util.Collection;
+import java.util.stream.Stream;
+
+/**
+ * Indicates the revocation status of a certificate, given its serial number, revocation date, and reason.
+ * <pre>
+ *     SEQUENCE {
+ *        serialNumber CertificateSerialNumber,
+ *        revocationDate Time,
+ *        crlEntryExtensions Extensions OPTIONAL,
+ *     ...}
+ * </pre>
+ */
+public class RevokedCertificate extends ASN1Object {
+    private final Int serialNumber;
+    private final ASN1Time revocationDate;
+    private final Reason reason;
+
+    /**
+     * EFFECT: Init with tags and parameters. See {@link ASN1Object} for tags.
+     * REQUIRES: revocationDate should be either UtcTime or GeneralTime.
+     */
+    public RevokedCertificate(Tag tag, Tag parentTag,
+                              Int serialNumber,
+                              ASN1Time revocationDate,
+                              Reason reason) {
+        super(tag, parentTag);
+        this.serialNumber = serialNumber;
+        this.revocationDate = revocationDate;
+        this.reason = reason;
+    }
+
+    @Override
+    public Byte[] encodeValueDER() {
+        final Byte[] r = new OctetString(OctetString.TAG,
+                        null,
+                        new Byte[]{ 0x0A, 0x01, (byte) reason.getVal() })
+                        .encodeDER();
+        final Byte[] oid = new ObjectIdentifier(ObjectIdentifier.TAG, null, ObjectIdentifier.OID_CRL_REASON)
+                .encodeDER();
+        final Byte[] seqExt = Stream.of(Arrays.asList(TAG_SEQUENCE.encodeDER()),
+        Arrays.asList(new ASN1Length(r.length + oid.length).encodeDER()),
+        Arrays.asList(oid),
+        Arrays.asList(r))
+                .flatMap(Collection::stream)
+                .toArray(Byte[]::new);
+        return Stream.of(Arrays.asList(serialNumber.encodeDER()),
+                Arrays.asList(revocationDate.encodeDER()),
+                Arrays.asList(TAG_SEQUENCE.encodeDER()),
+                Arrays.asList(new ASN1Length(seqExt.length).encodeDER()),
+                Arrays.asList(seqExt))
+                .flatMap(Collection::stream)
+                .toArray(Byte[]::new);
+    }
+
+    public Int getSerialNumber() {
+        return serialNumber;
+    }
+
+    public ASN1Time getRevocationDate() {
+        return revocationDate;
+    }
+
+    public Reason getReason() {
+        return reason;
+    }
+}
-- 
cgit v1.2.3