/*

 * Copyright (c) 2003, 2013, Oracle and/or its affiliates. All rights reserved.

 * DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.

 *

 * This code is free software; you can redistribute it and/or modify it

 * under the terms of the GNU General Public License version 2 only, as

 * published by the Free Software Foundation.  Oracle designates this

 * particular file as subject to the "Classpath" exception as provided

 * by Oracle in the LICENSE file that accompanied this code.

 *

 * This code is distributed in the hope that it will be useful, but WITHOUT

 * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or

 * FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License

 * version 2 for more details (a copy is included in the LICENSE file that

 * accompanied this code).

 *

 * You should have received a copy of the GNU General Public License version

 * 2 along with this work; if not, write to the Free Software Foundation,

 * Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.

 *

 * Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA

 * or visit www.oracle.com if you need additional information or have any

 * questions.

 */

package sun.security.provider.certpath;

import java.io.*;

import java.security.*;

import java.security.cert.CertificateException;

import java.security.cert.CertificateParsingException;

import java.security.cert.CertPathValidatorException;

import java.security.cert.CRLReason;

import java.security.cert.TrustAnchor;

import java.security.cert.X509Certificate;

import java.util.ArrayList;

import java.util.Arrays;

import java.util.Collections;

import java.util.Date;

import java.util.HashMap;

import java.util.List;

import java.util.Map;

import javax.security.auth.x500.X500Principal;

import sun.misc.HexDumpEncoder;

import sun.security.action.GetIntegerAction;

import sun.security.x509.*;

import sun.security.util.*;

/**

 * This class is used to process an OCSP response.

 * The OCSP Response is defined

 * in RFC 2560 and the ASN.1 encoding is as follows:

 * <pre>

 *

 *  OCSPResponse ::= SEQUENCE {

 *      responseStatus         OCSPResponseStatus,

 *      responseBytes          [0] EXPLICIT ResponseBytes OPTIONAL }

 *

 *   OCSPResponseStatus ::= ENUMERATED {

 *       successful            (0),  --Response has valid confirmations

 *       malformedRequest      (1),  --Illegal confirmation request

 *       internalError         (2),  --Internal error in issuer

 *       tryLater              (3),  --Try again later

 *                                   --(4) is not used

 *       sigRequired           (5),  --Must sign the request

 *       unauthorized          (6)   --Request unauthorized

 *   }

 *

 *   ResponseBytes ::=       SEQUENCE {

 *       responseType   OBJECT IDENTIFIER,

 *       response       OCTET STRING }

 *

 *   BasicOCSPResponse       ::= SEQUENCE {

 *      tbsResponseData      ResponseData,

 *      signatureAlgorithm   AlgorithmIdentifier,

 *      signature            BIT STRING,

 *      certs                [0] EXPLICIT SEQUENCE OF Certificate OPTIONAL }

 *

 *   The value for signature SHALL be computed on the hash of the DER

 *   encoding ResponseData.

 *

 *   ResponseData ::= SEQUENCE {

 *      version              [0] EXPLICIT Version DEFAULT v1,

 *      responderID              ResponderID,

 *      producedAt               GeneralizedTime,

 *      responses                SEQUENCE OF SingleResponse,

 *      responseExtensions   [1] EXPLICIT Extensions OPTIONAL }

 *

 *   ResponderID ::= CHOICE {

 *      byName               [1] Name,

 *      byKey                [2] KeyHash }

 *

 *   KeyHash ::= OCTET STRING -- SHA-1 hash of responder's public key

 *   (excluding the tag and length fields)

 *

 *   SingleResponse ::= SEQUENCE {

 *      certID                       CertID,

 *      certStatus                   CertStatus,

 *      thisUpdate                   GeneralizedTime,

 *      nextUpdate         [0]       EXPLICIT GeneralizedTime OPTIONAL,

 *      singleExtensions   [1]       EXPLICIT Extensions OPTIONAL }

 *

 *   CertStatus ::= CHOICE {

 *       good        [0]     IMPLICIT NULL,

 *       revoked     [1]     IMPLICIT RevokedInfo,

 *       unknown     [2]     IMPLICIT UnknownInfo }

 *

 *   RevokedInfo ::= SEQUENCE {

 *       revocationTime              GeneralizedTime,

 *       revocationReason    [0]     EXPLICIT CRLReason OPTIONAL }

 *

 *   UnknownInfo ::= NULL -- this can be replaced with an enumeration

 *

 * </pre>

 *

 * @author      Ram Marti

 */

public final class OCSPResponse {

    public enum ResponseStatus {

        SUCCESSFUL,            // Response has valid confirmations

        MALFORMED_REQUEST,     // Illegal confirmation request

        INTERNAL_ERROR,        // Internal error in issuer

        TRY_LATER,             // Try again later

        UNUSED,                // is not used

        SIG_REQUIRED,          // Must sign the request

        UNAUTHORIZED           // Request unauthorized

    };

    private static ResponseStatus[] rsvalues = ResponseStatus.values();

    private static final Debug debug = Debug.getInstance("certpath");

    private static final boolean dump = false;

    private static final ObjectIdentifier OCSP_BASIC_RESPONSE_OID =

        ObjectIdentifier.newInternal(new int[] { 1, 3, 6, 1, 5, 5, 7, 48, 1, 1});

    private static final int CERT_STATUS_GOOD = 0;

    private static final int CERT_STATUS_REVOKED = 1;

    private static final int CERT_STATUS_UNKNOWN = 2;

    // ResponderID CHOICE tags

    private static final int NAME_TAG = 1;

    private static final int KEY_TAG = 2;

    // Object identifier for the OCSPSigning key purpose

    private static final String KP_OCSP_SIGNING_OID = "1.3.6.1.5.5.7.3.9";

    // Default maximum clock skew in milliseconds (15 minutes)

    // allowed when checking validity of OCSP responses

    private static final int DEFAULT_MAX_CLOCK_SKEW = 900000;

    /**

     * Integer value indicating the maximum allowable clock skew, in seconds,

     * to be used for the OCSP check.

     */

    private static final int MAX_CLOCK_SKEW = initializeClockSkew();

    /**

     * Initialize the maximum allowable clock skew by getting the OCSP

     * clock skew system property. If the property has not been set, or if its

     * value is negative, set the skew to the default.

     */

    private static int initializeClockSkew() {

        Integer tmp = java.security.AccessController.doPrivileged(

                new GetIntegerAction("com.sun.security.ocsp.clockSkew"));

        if (tmp == null || tmp < 0) {

            return DEFAULT_MAX_CLOCK_SKEW;

        }

        // Convert to milliseconds, as the system property will be

        // specified in seconds

        return tmp * 1000;

    }

    // an array of all of the CRLReasons (used in SingleResponse)

    private static CRLReason[] values = CRLReason.values();

    private final ResponseStatus responseStatus;

    private final Map<CertId, SingleResponse> singleResponseMap;

    private final List<X509CertImpl> certs;

    private final AlgorithmId sigAlgId;

    private final byte[] signature;

    private final byte[] tbsResponseData;

    private final byte[] responseNonce;

    /*

     * Create an OCSP response from its ASN.1 DER encoding.

     */

    OCSPResponse(byte[] bytes) throws IOException {

        if (dump) {

            HexDumpEncoder hexEnc = new HexDumpEncoder();

            System.out.println("OCSPResponse bytes are...");

            System.out.println(hexEnc.encode(bytes));

        }

        DerValue der = new DerValue(bytes);

        if (der.tag != DerValue.tag_Sequence) {

            throw new IOException("Bad encoding in OCSP response: " +

                "expected ASN.1 SEQUENCE tag.");

        }

        DerInputStream derIn = der.getData();

        // responseStatus

        int status = derIn.getEnumerated();

        if (status >= 0 && status < rsvalues.length) {

            responseStatus = rsvalues[status];

        } else {

            // unspecified responseStatus

            throw new IOException("Unknown OCSPResponse status: " + status);

        }

        if (debug != null) {

            debug.println("OCSP response status: " + responseStatus);

        }

        if (responseStatus != ResponseStatus.SUCCESSFUL) {

            // no need to continue, responseBytes are not set.

            singleResponseMap = Collections.emptyMap();

            certs = Collections.<X509CertImpl>emptyList();

            sigAlgId = null;

            signature = null;

            tbsResponseData = null;

            responseNonce = null;

            return;

        }

        // responseBytes

        der = derIn.getDerValue();

        if (!der.isContextSpecific((byte)0)) {

            throw new IOException("Bad encoding in responseBytes element " +

                "of OCSP response: expected ASN.1 context specific tag 0.");

        }

        DerValue tmp = der.data.getDerValue();

        if (tmp.tag != DerValue.tag_Sequence) {

            throw new IOException("Bad encoding in responseBytes element " +

                "of OCSP response: expected ASN.1 SEQUENCE tag.");

        }

        // responseType

        derIn = tmp.data;

        ObjectIdentifier responseType = derIn.getOID();

        if (responseType.equals((Object)OCSP_BASIC_RESPONSE_OID)) {

            if (debug != null) {

                debug.println("OCSP response type: basic");

            }

        } else {

            if (debug != null) {

                debug.println("OCSP response type: " + responseType);

            }

            throw new IOException("Unsupported OCSP response type: " +

                                  responseType);

        }

        // BasicOCSPResponse

        DerInputStream basicOCSPResponse =

            new DerInputStream(derIn.getOctetString());

        DerValue[] seqTmp = basicOCSPResponse.getSequence(2);

        if (seqTmp.length < 3) {

            throw new IOException("Unexpected BasicOCSPResponse value");

        }

        DerValue responseData = seqTmp[0];

        // Need the DER encoded ResponseData to verify the signature later

        tbsResponseData = seqTmp[0].toByteArray();

        // tbsResponseData

        if (responseData.tag != DerValue.tag_Sequence) {

            throw new IOException("Bad encoding in tbsResponseData " +

                "element of OCSP response: expected ASN.1 SEQUENCE tag.");

        }

        DerInputStream seqDerIn = responseData.data;

        DerValue seq = seqDerIn.getDerValue();

        // version

        if (seq.isContextSpecific((byte)0)) {

            // seq[0] is version

            if (seq.isConstructed() && seq.isContextSpecific()) {

                //System.out.println ("version is available");

                seq = seq.data.getDerValue();

                int version = seq.getInteger();

                if (seq.data.available() != 0) {

                    throw new IOException("Bad encoding in version " +

                        " element of OCSP response: bad format");

                }

                seq = seqDerIn.getDerValue();

            }

        }

        // responderID

        short tag = (byte)(seq.tag & 0x1f);

        if (tag == NAME_TAG) {

            if (debug != null) {

                X500Principal responderName =

                    new X500Principal(seq.getData().toByteArray());

                debug.println("OCSP Responder name: " + responderName);

            }

        } else if (tag == KEY_TAG) {

            if (debug != null) {

                byte[] responderKey = seq.getData().getOctetString();

                debug.println("OCSP Responder key: " +

                              Debug.toString(responderKey));

            }

        } else {

            throw new IOException("Bad encoding in responderID element of " +

                "OCSP response: expected ASN.1 context specific tag 0 or 1");

        }

        // producedAt

        seq = seqDerIn.getDerValue();

        if (debug != null) {

            Date producedAtDate = seq.getGeneralizedTime();

            debug.println("OCSP response produced at: " + producedAtDate);

        }

        // responses

        DerValue[] singleResponseDer = seqDerIn.getSequence(1);

        singleResponseMap = new HashMap<>(singleResponseDer.length);

        if (debug != null) {

            debug.println("OCSP number of SingleResponses: "

                          + singleResponseDer.length);

        }

        for (int i = 0; i < singleResponseDer.length; i++) {

            SingleResponse singleResponse =

                new SingleResponse(singleResponseDer[i]);

            singleResponseMap.put(singleResponse.getCertId(), singleResponse);

        }

        // responseExtensions

        byte[] nonce = null;

        if (seqDerIn.available() > 0) {

            seq = seqDerIn.getDerValue();

            if (seq.isContextSpecific((byte)1)) {

                DerValue[] responseExtDer = seq.data.getSequence(3);

                for (int i = 0; i < responseExtDer.length; i++) {

                    Extension ext = new Extension(responseExtDer[i]);

                    if (debug != null) {

                        debug.println("OCSP extension: " + ext);

                    }

                    // Only the NONCE extension is recognized

                    if (ext.getExtensionId().equals((Object)

                        OCSP.NONCE_EXTENSION_OID))

                    {

                        nonce = ext.getExtensionValue();

                    } else if (ext.isCritical())  {

                        throw new IOException(

                            "Unsupported OCSP critical extension: " +

                            ext.getExtensionId());

                    }

                }

            }

        }

        responseNonce = nonce;

        // signatureAlgorithmId

        sigAlgId = AlgorithmId.parse(seqTmp[1]);

        // signature

        signature = seqTmp[2].getBitString();

        // if seq[3] is available , then it is a sequence of certificates

        if (seqTmp.length > 3) {

            // certs are available

            DerValue seqCert = seqTmp[3];

            if (!seqCert.isContextSpecific((byte)0)) {

                throw new IOException("Bad encoding in certs element of " +

                    "OCSP response: expected ASN.1 context specific tag 0.");

            }

            DerValue[] derCerts = seqCert.getData().getSequence(3);

            certs = new ArrayList<X509CertImpl>(derCerts.length);

            try {

                for (int i = 0; i < derCerts.length; i++) {

                    certs.add(new X509CertImpl(derCerts[i].toByteArray()));

                }

            } catch (CertificateException ce) {

                throw new IOException("Bad encoding in X509 Certificate", ce);

            }

        } else {

            certs = Collections.<X509CertImpl>emptyList();

        }

    }

    void verify(List<CertId> certIds, X509Certificate responderCert,

                Date date, byte[] nonce)

        throws CertPathValidatorException

    {

        if (responseStatus != ResponseStatus.SUCCESSFUL) {

            throw new CertPathValidatorException

                ("OCSP response error: " + responseStatus);

        }

        // Check that the response includes a response for all of the

        // certs that were supplied in the request

        for (CertId certId : certIds) {

            SingleResponse sr = getSingleResponse(certId);

            if (sr == null) {

                if (debug != null) {

                    debug.println("No response found for CertId: " + certId);

                }

                throw new CertPathValidatorException(

                    "OCSP response does not include a response for a " +

                    "certificate supplied in the OCSP request");

            }

            if (debug != null) {

                debug.println("Status of certificate (with serial number " +

                    certId.getSerialNumber() + ") is: " + sr.getCertStatus());

            }

        }

        // Check whether the cert returned by the responder is trusted

        if (!certs.isEmpty()) {

            X509CertImpl cert = certs.get(0);

            // First check if the cert matches the expected responder cert

            if (cert.equals(responderCert)) {

                // cert is trusted, now verify the signed response

            // Next check if the cert was issued by the responder cert

            // which was set locally.

            } else if (cert.getIssuerX500Principal().equals(

                       responderCert.getSubjectX500Principal())) {

                // Check for the OCSPSigning key purpose

                try {

                    List<String> keyPurposes = cert.getExtendedKeyUsage();

                    if (keyPurposes == null ||

                        !keyPurposes.contains(KP_OCSP_SIGNING_OID)) {

                        throw new CertPathValidatorException(

                            "Responder's certificate not valid for signing " +

                            "OCSP responses");

                    }

                } catch (CertificateParsingException cpe) {

                    // assume cert is not valid for signing

                    throw new CertPathValidatorException(

                        "Responder's certificate not valid for signing " +

                        "OCSP responses", cpe);

                }

                // Check algorithm constraints specified in security property

                // "jdk.certpath.disabledAlgorithms".

                AlgorithmChecker algChecker = new AlgorithmChecker(

                                    new TrustAnchor(responderCert, null));

                algChecker.init(false);

                algChecker.check(cert, Collections.<String>emptySet());

                // check the validity

                try {

                    if (date == null) {

                        cert.checkValidity();

                    } else {

                        cert.checkValidity(date);

                    }

                } catch (CertificateException e) {

                    throw new CertPathValidatorException(

                        "Responder's certificate not within the " +

                        "validity period", e);

                }

                // check for revocation

                //

                // A CA may specify that an OCSP client can trust a

                // responder for the lifetime of the responder's

                // certificate. The CA does so by including the

                // extension id-pkix-ocsp-nocheck.

                //

                Extension noCheck =

                    cert.getExtension(PKIXExtensions.OCSPNoCheck_Id);

                if (noCheck != null) {

                    if (debug != null) {

                        debug.println("Responder's certificate includes " +

                            "the extension id-pkix-ocsp-nocheck.");

                    }

                } else {

                    // we should do the revocation checking of the

                    // authorized responder in a future update.

                }

                // verify the signature

                try {

                    cert.verify(responderCert.getPublicKey());

                    responderCert = cert;

                    // cert is trusted, now verify the signed response

                } catch (GeneralSecurityException e) {

                    responderCert = null;

                }

            } else {

                throw new CertPathValidatorException(

                    "Responder's certificate is not authorized to sign " +

                    "OCSP responses");

            }

        }

        // Confirm that the signed response was generated using the public

        // key from the trusted responder cert

        if (responderCert != null) {

            // Check algorithm constraints specified in security property

            // "jdk.certpath.disabledAlgorithms".

            AlgorithmChecker.check(responderCert.getPublicKey(), sigAlgId);