CertificateRequest.cs

using System;
using System.Collections.Generic;
using System.Text;
 
namespace Waher.Security.PKCS
{
    public class CertificateRequest
    {
        private readonly SignatureAlgorithm signatureAlgorithm;
        private string commonName = null;                   // 2.5.4.3      CN
        private string surname = null;                      // 2.5.4.4
        private string serialNumber = null;                 // 2.5.4.5
        private string country = null;                      // 2.5.4.6      C
        private string locality = null;                     // 2.5.4.7      L
        private string stateOrProvince = null;              // 2.5.4.8      ST
        private string streetAddress = null;                // 2.5.4.9
        private string organization = null;                 // 2.5.4.10     O
        private string organizationalUnit = null;           // 2.5.4.11     OU
        private string title = null;                        // 2.5.4.12
        private string description = null;                  // 2.5.4.13
        private string postalAddress = null;                // 2.5.4.16
        private string postalCode = null;                   // 2.5.4.17
        private string postOfficeBox = null;                // 2.5.4.18
        private string physicalDeliveryOfficeName = null;   // 2.5.4.19
        private string telephoneNumber = null;              // 2.5.4.20
        private string registeredAddress = null;            // 2.5.4.26
        private string presentationAddress = null;          // 2.5.4.29
        private string name = null;                         // 2.5.4.41
        private string givenName = null;                    // 2.5.4.42
        private string initials = null;                     // 2.5.4.43
        private string distinguishedName = null;            // 2.5.4.49
        private string houseIdentifier = null;              // 2.5.4.51
        private string[] subjectAlternativeNames = null;    // 2.5.29.17
        private string emailAddress = null;                 // 1.2.840.113549.1.9.1
 
        public CertificateRequest(SignatureAlgorithm SignatureAlgorithm)
        {
            this.signatureAlgorithm = SignatureAlgorithm;
        }
 
        public SignatureAlgorithm SignatureAlgorithm => this.signatureAlgorithm;
 
        public string CommonName
        {
            get => this.commonName;
            set => this.commonName = value;
        }
 
        public string Surname
        {
            get => this.surname;
            set => this.surname = value;
        }
 
        public string SerialNumber
        {
            get => this.serialNumber;
            set => this.serialNumber = value;
        }
 
        public string Country
        {
            get => this.country;
            set => this.country = value;
        }
 
        public string Locality
        {
            get => this.locality;
            set => this.locality = value;
        }
 
        public string StateOrProvince
        {
            get => this.stateOrProvince;
            set => this.stateOrProvince = value;
        }
 
        public string StreetAddress
        {
            get => this.streetAddress;
            set => this.streetAddress = value;
        }
 
        public string Organization
        {
            get => this.organization;
            set => this.organization = value;
        }
 
        public string OrganizationalUnit
        {
            get => this.organizationalUnit;
            set => this.organizationalUnit = value;
        }
 
        public string Title
        {
            get => this.title;
            set => this.title = value;
        }
 
        public string Description
        {
            get => this.description;
            set => this.description = value;
        }
 
        public string PostalAddress
        {
            get => this.postalAddress;
            set => this.postalAddress = value;
        }
 
        public string PostalCode
        {
            get => this.postalCode;
            set => this.postalCode = value;
        }
 
        public string PostOfficeBox
        {
            get => this.postOfficeBox;
            set => this.postOfficeBox = value;
        }
 
        public string PhysicalDeliveryOfficeName
        {
            get => this.physicalDeliveryOfficeName;
            set => this.physicalDeliveryOfficeName = value;
        }
 
        public string TelephoneNumber
        {
            get => this.telephoneNumber;
            set => this.telephoneNumber = value;
        }
 
        public string RegisteredAddress
        {
            get => this.registeredAddress;
            set => this.registeredAddress = value;
        }
 
        public string PresentationAddress
        {
            get => this.presentationAddress;
            set => this.presentationAddress = value;
        }
 
        public string Name
        {
            get => this.name;
            set => this.name = value;
        }
 
        public string GivenName
        {
            get => this.givenName;
            set => this.givenName = value;
        }
 
        public string Initials
        {
            get => this.initials;
            set => this.initials = value;
        }
 
        public string DistinguishedName
        {
            get => this.distinguishedName;
            set => this.distinguishedName = value;
        }
 
        public string HouseIdentifier
        {
            get => this.houseIdentifier;
            set => this.houseIdentifier = value;
        }
 
        public string[] SubjectAlternativeNames
        {
            get => this.subjectAlternativeNames;
            set => this.subjectAlternativeNames = value;
        }
 
        public string EMailAddress
        {
            get => this.emailAddress;
            set => this.emailAddress = value;
        }
 
        public byte[] BuildCSR()
        {
            DerEncoder DER = new DerEncoder();
 
            DER.StartSEQUENCE();     // CertificationRequestInfo 
            DER.INTEGER(0);          // Version
 
            DER.StartSEQUENCE();     // subject
            this.EncodeIfDefined(DER, "2.5.4.3", this.commonName);
            this.EncodeIfDefined(DER, "2.5.4.4", this.surname);
            this.EncodeIfDefined(DER, "2.5.4.5", this.serialNumber);
            this.EncodeIfDefined(DER, "2.5.4.6", this.country);
            this.EncodeIfDefined(DER, "2.5.4.7", this.locality);
            this.EncodeIfDefined(DER, "2.5.4.8", this.stateOrProvince);
            this.EncodeIfDefined(DER, "2.5.4.9", this.streetAddress);
            this.EncodeIfDefined(DER, "2.5.4.10", this.organization);
            this.EncodeIfDefined(DER, "2.5.4.11", this.organizationalUnit);
            this.EncodeIfDefined(DER, "2.5.4.12", this.title);
            this.EncodeIfDefined(DER, "2.5.4.13", this.description);
            this.EncodeIfDefined(DER, "2.5.4.16", this.postalAddress);
            this.EncodeIfDefined(DER, "2.5.4.17", this.postalCode);
            this.EncodeIfDefined(DER, "2.5.4.18", this.postOfficeBox);
            this.EncodeIfDefined(DER, "2.5.4.19", this.physicalDeliveryOfficeName);
            this.EncodeIfDefined(DER, "2.5.4.20", this.telephoneNumber);
            this.EncodeIfDefined(DER, "2.5.4.26", this.registeredAddress);
            this.EncodeIfDefined(DER, "2.5.4.29", this.presentationAddress);
            this.EncodeIfDefined(DER, "2.5.4.41", this.name);
            this.EncodeIfDefined(DER, "2.5.4.42", this.givenName);
            this.EncodeIfDefined(DER, "2.5.4.43", this.initials);
            this.EncodeIfDefined(DER, "2.5.4.49", this.distinguishedName);
            this.EncodeIfDefined(DER, "2.5.4.51", this.houseIdentifier);
            this.EncodeIfDefined(DER, "1.2.840.113549.1.9.1", this.emailAddress);
            DER.EndSEQUENCE();       // end of subject
 
            DER.StartSEQUENCE();     // subjectPKInfo
            DER.StartSEQUENCE();     // algorithm
            DER.OBJECT_IDENTIFIER(this.signatureAlgorithm.PkiAlgorithmOID);
            DER.NULL();  // No parameters
            DER.EndSEQUENCE();       // end of algorithm
            DER.StartBITSTRING();    // subjectPublicKey
 
            this.signatureAlgorithm.ExportPublicKey(DER);
 
            DER.EndBITSTRING();      // end of subjectPublicKey
            DER.EndSEQUENCE();       // end of subjectPKInfo
 
            DER.StartContent(Asn1TypeClass.ContextSpecific);    // attributes
 
            if (!(this.subjectAlternativeNames is null) && this.subjectAlternativeNames.Length > 0)
            {
                DER.StartSEQUENCE();
                DER.OBJECT_IDENTIFIER("1.2.840.113549.1.9.14");  // extensionRequest
                DER.StartSET();
                DER.StartSEQUENCE();
                DER.StartSEQUENCE();
                DER.OBJECT_IDENTIFIER("2.5.29.17");
                DER.StartOCTET_STRING();
                DER.StartSEQUENCE();
 
                foreach (string s in this.subjectAlternativeNames)
                {
                    int Pos = DER.Position;
                    DER.IA5_STRING(s);
                    DER[Pos] = 0x82;    // Encoded as Context-specific INTEGER...
                }
 
                DER.EndSEQUENCE();
                DER.EndOCTET_STRING();
                DER.EndSEQUENCE();
                DER.EndSEQUENCE();
                DER.EndSET();
                DER.EndSEQUENCE();
            }
 
            DER.EndContent(Asn1TypeClass.ContextSpecific);  // end of attributes
            DER.EndSEQUENCE();       // end of CertificationRequestInfo
 
            byte[] CertificationRequestInfo = DER.ToArray();
 
            DER.Clear();
            DER.StartSEQUENCE();     // CertificationRequest
            DER.Raw(CertificationRequestInfo);
 
            DER.StartSEQUENCE();     // signatureAlgorithm
            DER.OBJECT_IDENTIFIER(this.signatureAlgorithm.HashAlgorithmOID);
            DER.NULL();              // parameters
            DER.EndSEQUENCE();       // End of signatureAlgorithm
 
            DER.BITSTRING(this.signatureAlgorithm.Sign(CertificationRequestInfo));  // signature
 
            DER.EndSEQUENCE();       // end of CertificationRequest
 
            return DER.ToArray();
        }
 
        private void EncodeIfDefined(DerEncoder DER, string OID, string Value)
        {
            if (!(Value is null))
            {
                DER.StartSET();
                DER.StartSEQUENCE();
                DER.OBJECT_IDENTIFIER(OID);
 
                if (DerEncoder.IsPrintable(Value))
                    DER.PRINTABLE_STRING(Value);
                else
                    DER.IA5_STRING(Value);
 
                DER.EndSEQUENCE();
                DER.EndSET();
            }
        }
 
    }
}