pgsqlclient-checkins

[<car...@us...>]

Update of /cvsroot/pgsqlclient/pgsqlclient_10/Mono.Security.Protocol.Tls/Mono.Security.Protocol.Tls/Mono.Security/Mono.Security.X509
In directory sc8-pr-cvs1:/tmp/cvs-serv32346

Modified Files:
	X509Certificate.cs 
Log Message:
Minor change

Index: X509Certificate.cs
===================================================================
RCS file: /cvsroot/pgsqlclient/pgsqlclient_10/Mono.Security.Protocol.Tls/Mono.Security.Protocol.Tls/Mono.Security/Mono.Security.X509/X509Certificate.cs,v
retrieving revision 1.1
retrieving revision 1.2
diff -C2 -d -r1.1 -r1.2
*** X509Certificate.cs	28 Oct 2003 16:12:06 -0000	1.1
--- X509Certificate.cs	26 Dec 2003 11:15:54 -0000	1.2
***************
*** 1,429 ****
! //
! // X509Certificates.cs: Handles X.509 certificates.
! //
! // Author:
! //	Sebastien Pouliot (spo...@mo...)
! //
! // (C) 2002, 2003 Motus Technologies Inc. (http://www.motus.com)
! //
! 
! using System;
! using System.Security.Cryptography;
! using SSCX = System.Security.Cryptography.X509Certificates;
! using System.Text;
! 
! namespace Mono.Security.X509 {
! 
! 	// References:
! 	// a.	Internet X.509 Public Key Infrastructure Certificate and CRL Profile
! 	//	http://www.ietf.org/rfc/rfc3280.txt
! 	// b.	ITU ASN.1 standards (free download)
! 	//	http://www.itu.int/ITU-T/studygroups/com17/languages/
! 
! 	internal class X509Certificate {
! 
! 		private ASN1 decoder;
! 
! 		private byte[] m_encodedcert;
! 		private DateTime m_from;
! 		private DateTime m_until;
! 		private string m_issuername;
! 		private string m_keyalgo;
! 		private byte[] m_keyalgoparams;
! 		private string m_subject;
! 		private byte[] m_publickey;
! 		private byte[] signature;
! 		private string m_signaturealgo;
! 		private byte[] m_signaturealgoparams;
! 		
! 		// from http://www.ietf.org/rfc/rfc2459.txt
! 		//
! 		//Certificate  ::=  SEQUENCE  {
! 		//     tbsCertificate       TBSCertificate,
! 		//     signatureAlgorithm   AlgorithmIdentifier,
! 		//     signature            BIT STRING  }
! 		//
! 		//TBSCertificate  ::=  SEQUENCE  {
! 		//     version         [0]  Version DEFAULT v1,
! 		//     serialNumber         CertificateSerialNumber,
! 		//     signature            AlgorithmIdentifier,
! 		//     issuer               Name,
! 		//     validity             Validity,
! 		//     subject              Name,
! 		//     subjectPublicKeyInfo SubjectPublicKeyInfo,
! 		//     issuerUniqueID  [1]  IMPLICIT UniqueIdentifier OPTIONAL,
! 		//                          -- If present, version shall be v2 or v3
! 		//     subjectUniqueID [2]  IMPLICIT UniqueIdentifier OPTIONAL,
! 		//                          -- If present, version shall be v2 or v3
! 		//     extensions      [3]  Extensions OPTIONAL
! 		//                          -- If present, version shall be v3 --  }
! 		private int version;
! 		private byte[] serialnumber;
! 
! 		private byte[] issuerUniqueID;
! 		private byte[] subjectUniqueID;
! 		private X509Extensions extensions;
! 
! 		// that's were the real job is!
! 		private void Parse (byte[] data) 
! 		{
! 			string e = "Input data cannot be coded as a valid certificate.";
! 			try {
! 				decoder = new ASN1 (data);
! 				// Certificate 
! 				if (decoder.Tag != 0x30)
! 					throw new CryptographicException (e);
! 				// Certificate / TBSCertificate
! 				if (decoder [0].Tag != 0x30)
! 					throw new CryptographicException (e);
! 
! 				ASN1 tbsCertificate = decoder [0];
! 
! 				int tbs = 0;
! 				// Certificate / TBSCertificate / Version
! 				ASN1 v = decoder [0][tbs];
! 				version = 1;			// DEFAULT v1
! 				if (v.Tag == 0xA0) {
! 					// version (optional) is present only in v2+ certs
! 					version += v.Value [0];	// zero based
! 					tbs++;
! 				}
! 
! 				// Certificate / TBSCertificate / CertificateSerialNumber
! 				ASN1 sn = decoder [0][tbs++];
! 				if (sn.Tag != 0x02) 
! 					throw new CryptographicException (e);
! 				serialnumber = sn.Value;
! 				Array.Reverse (serialnumber, 0, serialnumber.Length);
! 		
! 				// Certificate / TBSCertificate / AlgorithmIdentifier
! 				ASN1 signatureAlgo = tbsCertificate.Element (tbs++, 0x30); 
! 		
! 				ASN1 issuer = tbsCertificate.Element (tbs++, 0x30); 
! 				m_issuername = X501.ToString (issuer);
! 		
! 				ASN1 validity = tbsCertificate.Element (tbs++, 0x30);
! 				ASN1 notBefore = validity [0];
! 				m_from = ASN1Convert.ToDateTime (notBefore);
! 				ASN1 notAfter = validity [1];
! 				m_until = ASN1Convert.ToDateTime (notAfter);
! 		
! 				ASN1 subject = tbsCertificate.Element (tbs++, 0x30);
! 				m_subject = X501.ToString (subject);
! 		
! 				ASN1 subjectPublicKeyInfo = tbsCertificate.Element (tbs++, 0x30);
! 		
! 				ASN1 algorithm = subjectPublicKeyInfo.Element (0, 0x30);
! 				ASN1 algo = algorithm.Element (0, 0x06);
! 				m_keyalgo = ASN1Convert.ToOID (algo);
! 				// parameters ANY DEFINED BY algorithm OPTIONAL
! 				// so we dont ask for a specific (Element) type and return DER
! 				ASN1 parameters = algorithm [1];
! 				m_keyalgoparams = parameters.GetBytes ();
! 		
! 				ASN1 subjectPublicKey = subjectPublicKeyInfo.Element (1, 0x03); 
! 				// we must drop th first byte (which is the number of unused bits
! 				// in the BITSTRING)
! 				int n = subjectPublicKey.Length - 1;
! 				m_publickey = new byte [n];
! 				Array.Copy (subjectPublicKey.Value, 1, m_publickey, 0, n);
! 
! 				// signature processing
! 				byte[] bitstring = decoder [2].Value;
! 				// first byte contains unused bits in first byte
! 				signature = new byte [bitstring.Length - 1];
! 				Array.Copy (bitstring, 1, signature, 0, signature.Length);
! 
! 				algorithm = decoder [1];
! 				algo = algorithm.Element (0, 0x06);
! 				m_signaturealgo = ASN1Convert.ToOID (algo);
! 				parameters = algorithm [1];
! 				if (parameters != null)
! 					m_signaturealgoparams = parameters.GetBytes ();
! 				else
! 					m_signaturealgoparams = null;
! 
! 				// Certificate / TBSCertificate / issuerUniqueID
! 				ASN1 issuerUID = tbsCertificate.Element (tbs, 0xA1);
! 				if (issuerUID != null) {
! 					tbs++;
! 					issuerUniqueID = issuerUID.Value;
! 				}
! 
! 				// Certificate / TBSCertificate / subjectUniqueID
! 				ASN1 subjectUID = tbsCertificate.Element (tbs, 0xA2);
! 				if (subjectUID != null) {
! 					tbs++;
! 					subjectUniqueID = subjectUID.Value;
! 				}
! 
! 				// Certificate / TBSCertificate / Extensions
! 				ASN1 extns = tbsCertificate.Element (tbs, 0xA3);
! 				if ((extns != null) && (extns.Count == 1))
! 					extensions = new X509Extensions (extns [0]);
! 				else
! 					extensions = new X509Extensions (null);
! 
! 				// keep a copy of the original data
! 				m_encodedcert = (byte[]) data.Clone ();
! 			}
! 			catch {
! 				throw new CryptographicException (e);
! 			}
! 		}
! 
! 		// constructors
! 
! 		public X509Certificate (byte[] data) 
! 		{
! 			if (data != null)
! 				Parse (data);
! 		}
! 
! 		private byte[] GetUnsignedBigInteger (byte[] integer) 
! 		{
! 			if (integer [0] == 0x00) {
! 				// this first byte is added so we're sure it's an unsigned integer
! 				// however we can't feed it into RSAParameters or DSAParameters
! 				int length = integer.Length - 1;
! 				byte[] uinteger = new byte [length];
! 				Array.Copy (integer, 1, uinteger, 0, length);
! 				return uinteger;
! 			}
! 			else
! 				return integer;
! 		}
! 
! 		// public methods
! 
! 		public DSA DSA {
! 			get { 
! 				DSAParameters dsaParams = new DSAParameters ();
! 				// for DSA m_publickey contains 1 ASN.1 integer - Y
! 				ASN1 pubkey = new ASN1 (m_publickey);
! 				if ((pubkey == null) || (pubkey.Tag != 0x02))
! 					return null;
! 				dsaParams.Y = GetUnsignedBigInteger (pubkey.Value);
! 
! 				ASN1 param = new ASN1 (m_keyalgoparams);
! 				if ((param == null) || (param.Tag != 0x30) || (param.Count < 3))
! 					return null;
! 				if ((param [0].Tag != 0x02) || (param [1].Tag != 0x02) || (param [2].Tag != 0x02))
! 					return null;
! 				dsaParams.P = GetUnsignedBigInteger (param [0].Value);
! 				dsaParams.Q = GetUnsignedBigInteger (param [1].Value);
! 				dsaParams.G = GetUnsignedBigInteger (param [2].Value);
! 
! 				// BUG: MS BCL 1.0 can't import a key which 
! 				// isn't the same size as the one present in
! 				// the container.
! 				DSACryptoServiceProvider dsa = new DSACryptoServiceProvider (dsaParams.Y.Length << 3);
! 				dsa.ImportParameters (dsaParams);
! 				return (DSA) dsa; 
! 			}
! 		}
! 
! 		public X509Extensions Extensions {
! 			get { return extensions; }
! 		}
! 
! 		public byte[] Hash {
! 			get {
! 				HashAlgorithm hash = null;
! 				switch (m_signaturealgo) {
! 					case "1.2.840.113549.1.1.2":	// MD2 with RSA encryption 
! 						// maybe someone installed MD2 ?
! 						hash = HashAlgorithm.Create ("MD2");
! 						break;
! 					case "1.2.840.113549.1.1.4":	// MD5 with RSA encryption 
! 						hash = MD5.Create ();
! 						break;
! 					case "1.2.840.113549.1.1.5":	// SHA-1 with RSA Encryption 
! 					case "1.2.840.10040.4.3":	// SHA1-1 with DSA
! 						hash = SHA1.Create ();
! 						break;
! 					default:
! 						return null;
! 				}
! 				try {
! 					byte[] toBeSigned = decoder [0].GetBytes ();
! 					return hash.ComputeHash (toBeSigned, 0, toBeSigned.Length);
! 				}
! 				catch {
! 					return null;
! 				}
! 			}
! 		}
! 
! 		public virtual string IssuerName {
! 			get { return m_issuername; }
! 		}
! 
! 		public virtual string KeyAlgorithm {
! 			get { return m_keyalgo; }
! 		}
! 
! 		public virtual byte[] KeyAlgorithmParameters {
! 			get { return m_keyalgoparams; }
! 		}
! 
! 		public virtual byte[] PublicKey	{
! 			get { return m_publickey; }
! 		}
! 
! 		public virtual RSA RSA {
! 			get { 
! 				RSAParameters rsaParams = new RSAParameters ();
! 				// for RSA m_publickey contains 2 ASN.1 integers
! 				// the modulus and the public exponent
! 				ASN1 pubkey = new ASN1 (m_publickey);
! 				ASN1 modulus = pubkey [0];
! 				if ((modulus == null) || (modulus.Tag != 0x02))
! 					return null;
! 				ASN1 exponent = pubkey [1];
! 				if (exponent.Tag != 0x02)
! 					return null;
! 
! 				rsaParams.Modulus = GetUnsignedBigInteger (modulus.Value);
! 				rsaParams.Exponent = exponent.Value;
! 
! 				// BUG: MS BCL 1.0 can't import a key which 
! 				// isn't the same size as the one present in
! 				// the container.
! 				int keySize = (rsaParams.Modulus.Length << 3);
! 				RSACryptoServiceProvider rsa = new RSACryptoServiceProvider (keySize);
! 				rsa.ImportParameters (rsaParams);
! 				return (RSA)rsa; 
! 			}
! 		}
! 	        
! 		public virtual byte[] RawData {
! 			get { return (byte[]) m_encodedcert.Clone (); }
! 		}
! 
! 		public virtual byte[] SerialNumber {
! 			get { return serialnumber; }
! 		}
! 
! 		public virtual byte[] Signature {
! 			get { 
! 				switch (m_signaturealgo) {
! 					case "1.2.840.113549.1.1.2":	// MD2 with RSA encryption 
! 					case "1.2.840.113549.1.1.4":	// MD5 with RSA encryption 
! 					case "1.2.840.113549.1.1.5":	// SHA-1 with RSA Encryption 
! 						return signature;
! 					case "1.2.840.10040.4.3":	// SHA-1 with DSA
! 						ASN1 sign = new ASN1 (signature);
! 						if ((sign == null) || (sign.Count != 2))
! 							return null;
! 						// parts may be less than 20 bytes (i.e. first bytes were 0x00)
! 						byte[] part1 = sign [0].Value;
! 						byte[] part2 = sign [1].Value;
! 						byte[] sig = new byte [40];
! 						Array.Copy (part1, 0, sig, (20 - part1.Length), part1.Length);
! 						Array.Copy (part2, 0, sig, (40 - part2.Length), part2.Length);
! 						return sig;
! 					default:
! 						throw new CryptographicException ("Unsupported hash algorithm: " + m_signaturealgo);
! 				}
! 			}
! 		}
! 
! 		public virtual string SignatureAlgorithm {
! 			get { return m_signaturealgo; }
! 		}
! 
! 		public virtual byte[] SignatureAlgorithmParameters {
! 			get { return m_signaturealgoparams; }
! 		}
! 
! 		public virtual string SubjectName {
! 			get { return m_subject; }
! 		}
! 
! 		public virtual DateTime ValidFrom {
! 			get { return m_from; }
! 		}
! 
! 		public virtual DateTime ValidUntil {
! 			get { return m_until; }
! 		}
! 
! 		public int Version {
! 			get { return version; }
! 		}
! 
! 		public bool IsCurrent {
! 			get { return WasCurrent (DateTime.UtcNow); }
! 		}
! 
! 		public bool WasCurrent (DateTime date) 
! 		{
! 			return ((date > ValidFrom) && (date <= ValidUntil));
! 		}
! 
! 		private byte[] GetHash (string hashName) 
! 		{
! 			byte[] toBeSigned = decoder [0].GetBytes ();
! 			HashAlgorithm ha = HashAlgorithm.Create (hashName);
! 			return ha.ComputeHash (toBeSigned);
! 		}
! 
! 		public bool VerifySignature (DSA dsa) 
! 		{
! 			// signatureOID is check by both this.Hash and this.Signature
! 			DSASignatureDeformatter v = new DSASignatureDeformatter (dsa);
! 			// only SHA-1 is supported
! 			v.SetHashAlgorithm ("SHA1");
! 			return v.VerifySignature (this.Hash, this.Signature);
! 		}
! 
! 		internal bool VerifySignature (RSA rsa) 
! 		{
! 			RSAPKCS1SignatureDeformatter v = new RSAPKCS1SignatureDeformatter (rsa);
! 			switch (m_signaturealgo) {
! 				// MD2 with RSA encryption 
! 				case "1.2.840.113549.1.1.2":
! 					// maybe someone installed MD2 ?
! 					v.SetHashAlgorithm ("MD2");
! 					break;
! 				// MD5 with RSA encryption 
! 				case "1.2.840.113549.1.1.4":
! 					v.SetHashAlgorithm ("MD5");
! 					break;
! 				// SHA-1 with RSA Encryption 
! 				case "1.2.840.113549.1.1.5":
! 					v.SetHashAlgorithm ("SHA1");
! 					break;
! 				default:
! 					throw new CryptographicException ("Unsupported hash algorithm: " + m_signaturealgo);
! 			}
! 			return v.VerifySignature (this.Hash, this.Signature);
! 		}
! 
! 		public bool VerifySignature (AsymmetricAlgorithm aa) 
! 		{
! 			if (aa is RSA)
! 				return VerifySignature (aa as RSA);
! 			else if (aa is DSA)
! 				return VerifySignature (aa as DSA);
! 			else 
! 				throw new NotSupportedException ("Unknown Asymmetric Algorithm " + aa.ToString ());
! 		}
! 
! 		public bool CheckSignature (byte[] hash, string hashAlgorithm, byte[] signature) 
! 		{
! 			RSACryptoServiceProvider r = (RSACryptoServiceProvider) RSA;
! 			return r.VerifyHash (hash, hashAlgorithm, signature);
! 		}
! 
! 		public bool IsSelfSigned {
! 			get { 
! 				if (m_issuername == m_subject)
! 					return VerifySignature (RSA); 
! 				else
! 					return false;
! 			}
! 		}
! 	}
  }
--- 1,429 ----
! //
! // X509Certificates.cs: Handles X.509 certificates.
! //
! // Author:
! //	Sebastien Pouliot (spo...@mo...)
! //
! // (C) 2002, 2003 Motus Technologies Inc. (http://www.motus.com)
! //
! 
! using System;
! using System.Security.Cryptography;
! using SSCX = System.Security.Cryptography.X509Certificates;
! using System.Text;
! 
! namespace Mono.Security.X509 {
! 
! 	// References:
! 	// a.	Internet X.509 Public Key Infrastructure Certificate and CRL Profile
! 	//	http://www.ietf.org/rfc/rfc3280.txt
! 	// b.	ITU ASN.1 standards (free download)
! 	//	http://www.itu.int/ITU-T/studygroups/com17/languages/
! 
! 	internal class X509Certificate {
! 
! 		private ASN1 decoder;
! 
! 		private byte[] m_encodedcert;
! 		private DateTime m_from;
! 		private DateTime m_until;
! 		private string m_issuername;
! 		private string m_keyalgo;
! 		private byte[] m_keyalgoparams;
! 		private string m_subject;
! 		private byte[] m_publickey;
! 		private byte[] signature;
! 		private string m_signaturealgo;
! 		private byte[] m_signaturealgoparams;
! 		
! 		// from http://www.ietf.org/rfc/rfc2459.txt
! 		//
! 		//Certificate  ::=  SEQUENCE  {
! 		//     tbsCertificate       TBSCertificate,
! 		//     signatureAlgorithm   AlgorithmIdentifier,
! 		//     signature            BIT STRING  }
! 		//
! 		//TBSCertificate  ::=  SEQUENCE  {
! 		//     version         [0]  Version DEFAULT v1,
! 		//     serialNumber         CertificateSerialNumber,
! 		//     signature            AlgorithmIdentifier,
! 		//     issuer               Name,
! 		//     validity             Validity,
! 		//     subject              Name,
! 		//     subjectPublicKeyInfo SubjectPublicKeyInfo,
! 		//     issuerUniqueID  [1]  IMPLICIT UniqueIdentifier OPTIONAL,
! 		//                          -- If present, version shall be v2 or v3
! 		//     subjectUniqueID [2]  IMPLICIT UniqueIdentifier OPTIONAL,
! 		//                          -- If present, version shall be v2 or v3
! 		//     extensions      [3]  Extensions OPTIONAL
! 		//                          -- If present, version shall be v3 --  }
! 		private int version;
! 		private byte[] serialnumber;
! 
! 		private byte[] issuerUniqueID;
! 		private byte[] subjectUniqueID;
! 		private X509Extensions extensions;
! 
! 		// that's were the real job is!
! 		private void Parse (byte[] data) 
! 		{
! 			string e = "Input data cannot be coded as a valid certificate.";
! 			try {
! 				decoder = new ASN1 (data);
! 				// Certificate 
! 				if (decoder.Tag != 0x30)
! 					throw new CryptographicException (e);
! 				// Certificate / TBSCertificate
! 				if (decoder [0].Tag != 0x30)
! 					throw new CryptographicException (e);
! 
! 				ASN1 tbsCertificate = decoder [0];
! 
! 				int tbs = 0;
! 				// Certificate / TBSCertificate / Version
! 				ASN1 v = decoder [0][tbs];
! 				version = 1;			// DEFAULT v1
! 				if (v.Tag == 0xA0) {
! 					// version (optional) is present only in v2+ certs
! 					version += v.Value [0];	// zero based
! 					tbs++;
! 				}
! 
! 				// Certificate / TBSCertificate / CertificateSerialNumber
! 				ASN1 sn = decoder [0][tbs++];
! 				if (sn.Tag != 0x02) 
! 					throw new CryptographicException (e);
! 				serialnumber = sn.Value;
! 				Array.Reverse (serialnumber, 0, serialnumber.Length);
! 		
! 				// Certificate / TBSCertificate / AlgorithmIdentifier
! 				ASN1 signatureAlgo = tbsCertificate.Element (tbs++, 0x30); 
! 		
! 				ASN1 issuer = tbsCertificate.Element (tbs++, 0x30); 
! 				m_issuername = X501.ToString (issuer);
! 		
! 				ASN1 validity = tbsCertificate.Element (tbs++, 0x30);
! 				ASN1 notBefore = validity [0];
! 				m_from = ASN1Convert.ToDateTime (notBefore);
! 				ASN1 notAfter = validity [1];
! 				m_until = ASN1Convert.ToDateTime (notAfter);
! 		
! 				ASN1 subject = tbsCertificate.Element (tbs++, 0x30);
! 				m_subject = X501.ToString (subject);
! 		
! 				ASN1 subjectPublicKeyInfo = tbsCertificate.Element (tbs++, 0x30);
! 		
! 				ASN1 algorithm = subjectPublicKeyInfo.Element (0, 0x30);
! 				ASN1 algo = algorithm.Element (0, 0x06);
! 				m_keyalgo = ASN1Convert.ToOID (algo);
! 				// parameters ANY DEFINED BY algorithm OPTIONAL
! 				// so we dont ask for a specific (Element) type and return DER
! 				ASN1 parameters = algorithm [1];
! 				m_keyalgoparams = parameters.GetBytes ();
! 		
! 				ASN1 subjectPublicKey = subjectPublicKeyInfo.Element (1, 0x03); 
! 				// we must drop th first byte (which is the number of unused bits
! 				// in the BITSTRING)
! 				int n = subjectPublicKey.Length - 1;
! 				m_publickey = new byte [n];
! 				Array.Copy (subjectPublicKey.Value, 1, m_publickey, 0, n);
! 
! 				// signature processing
! 				byte[] bitstring = decoder [2].Value;
! 				// first byte contains unused bits in first byte
! 				signature = new byte [bitstring.Length - 1];
! 				Array.Copy (bitstring, 1, signature, 0, signature.Length);
! 
! 				algorithm = decoder [1];
! 				algo = algorithm.Element (0, 0x06);
! 				m_signaturealgo = ASN1Convert.ToOID (algo);
! 				parameters = algorithm [1];
! 				if (parameters != null)
! 					m_signaturealgoparams = parameters.GetBytes ();
! 				else
! 					m_signaturealgoparams = null;
! 
! 				// Certificate / TBSCertificate / issuerUniqueID
! 				ASN1 issuerUID = tbsCertificate.Element (tbs, 0xA1);
! 				if (issuerUID != null) {
! 					tbs++;
! 					issuerUniqueID = issuerUID.Value;
! 				}
! 
! 				// Certificate / TBSCertificate / subjectUniqueID
! 				ASN1 subjectUID = tbsCertificate.Element (tbs, 0xA2);
! 				if (subjectUID != null) {
! 					tbs++;
! 					subjectUniqueID = subjectUID.Value;
! 				}
! 
! 				// Certificate / TBSCertificate / Extensions
! 				ASN1 extns = tbsCertificate.Element (tbs, 0xA3);
! 				if ((extns != null) && (extns.Count == 1))
! 					extensions = new X509Extensions (extns [0]);
! 				else
! 					extensions = new X509Extensions (null);
! 
! 				// keep a copy of the original data
! 				m_encodedcert = (byte[]) data.Clone ();
! 			}
! 			catch {
! 				throw new CryptographicException (e);
! 			}
! 		}
! 
! 		// constructors
! 
! 		public X509Certificate (byte[] data) 
! 		{
! 			if (data != null)
! 				Parse (data);
! 		}
! 
! 		private byte[] GetUnsignedBigInteger (byte[] integer) 
! 		{
! 			if (integer [0] == 0x00) {
! 				// this first byte is added so we're sure it's an unsigned integer
! 				// however we can't feed it into RSAParameters or DSAParameters
! 				int length = integer.Length - 1;
! 				byte[] uinteger = new byte [length];
! 				Array.Copy (integer, 1, uinteger, 0, length);
! 				return uinteger;
! 			}
! 			else
! 				return integer;
! 		}
! 
! 		// public methods
! 
! 		public DSA DSA {
! 			get { 
! 				DSAParameters dsaParams = new DSAParameters ();
! 				// for DSA m_publickey contains 1 ASN.1 integer - Y
! 				ASN1 pubkey = new ASN1 (m_publickey);
! 				if ((pubkey == null) || (pubkey.Tag != 0x02))
! 					return null;
! 				dsaParams.Y = GetUnsignedBigInteger (pubkey.Value);
! 
! 				ASN1 param = new ASN1 (m_keyalgoparams);
! 				if ((param == null) || (param.Tag != 0x30) || (param.Count < 3))
! 					return null;
! 				if ((param [0].Tag != 0x02) || (param [1].Tag != 0x02) || (param [2].Tag != 0x02))
! 					return null;
! 				dsaParams.P = GetUnsignedBigInteger (param [0].Value);
! 				dsaParams.Q = GetUnsignedBigInteger (param [1].Value);
! 				dsaParams.G = GetUnsignedBigInteger (param [2].Value);
! 
! 				// BUG: MS BCL 1.0 can't import a key which 
! 				// isn't the same size as the one present in
! 				// the container.
! 				DSACryptoServiceProvider dsa = new DSACryptoServiceProvider (dsaParams.Y.Length << 3);
! 				dsa.ImportParameters (dsaParams);
! 				return (DSA) dsa; 
! 			}
! 		}
! 
! 		public X509Extensions Extensions {
! 			get { return extensions; }
! 		}
! 
! 		public byte[] Hash {
! 			get {
! 				HashAlgorithm hash = null;
! 				switch (m_signaturealgo) {
! 					case "1.2.840.113549.1.1.2":	// MD2 with RSA encryption 
! 						// maybe someone installed MD2 ?
! 						hash = HashAlgorithm.Create ("MD2");
! 						break;
! 					case "1.2.840.113549.1.1.4":	// MD5 with RSA encryption 
! 						hash = MD5.Create ();
! 						break;
! 					case "1.2.840.113549.1.1.5":	// SHA-1 with RSA Encryption 
! 					case "1.2.840.10040.4.3":	// SHA1-1 with DSA
! 						hash = SHA1.Create ();
! 						break;
! 					default:
! 						return null;
! 				}
! 				try {
! 					byte[] toBeSigned = decoder [0].GetBytes ();
! 					return hash.ComputeHash (toBeSigned, 0, toBeSigned.Length);
! 				}
! 				catch {
! 					return null;
! 				}
! 			}
! 		}
! 
! 		public virtual string IssuerName {
! 			get { return m_issuername; }
! 		}
! 
! 		public virtual string KeyAlgorithm {
! 			get { return m_keyalgo; }
! 		}
! 
! 		public virtual byte[] KeyAlgorithmParameters {
! 			get { return m_keyalgoparams; }
! 		}
! 
! 		public virtual byte[] PublicKey	{
! 			get { return m_publickey; }
! 		}
! 
! 		public virtual RSA RSA {
! 			get { 
! 				RSAParameters rsaParams = new RSAParameters ();
! 				// for RSA m_publickey contains 2 ASN.1 integers
! 				// the modulus and the public exponent
! 				ASN1 pubkey = new ASN1 (m_publickey);
! 				ASN1 modulus = pubkey [0];
! 				if ((modulus == null) || (modulus.Tag != 0x02))
! 					return null;
! 				ASN1 exponent = pubkey [1];
! 				if (exponent.Tag != 0x02)
! 					return null;
! 
! 				rsaParams.Modulus = GetUnsignedBigInteger (modulus.Value);
! 				rsaParams.Exponent = exponent.Value;
! 
! 				// BUG: MS BCL 1.0 can't import a key which 
! 				// isn't the same size as the one present in
! 				// the container.
! 				int keySize = (rsaParams.Modulus.Length << 3);
! 				RSACryptoServiceProvider rsa = new RSACryptoServiceProvider (keySize);
! 				rsa.ImportParameters (rsaParams);
! 				return (RSA)rsa; 
! 			}
! 		}
! 	        
! 		public virtual byte[] RawData {
! 			get { return (byte[]) m_encodedcert.Clone (); }
! 		}
! 
! 		public virtual byte[] SerialNumber {
! 			get { return serialnumber; }
! 		}
! 
! 		public virtual byte[] Signature {
! 			get { 
! 				switch (m_signaturealgo) {
! 					case "1.2.840.113549.1.1.2":	// MD2 with RSA encryption 
! 					case "1.2.840.113549.1.1.4":	// MD5 with RSA encryption 
! 					case "1.2.840.113549.1.1.5":	// SHA-1 with RSA Encryption 
! 						return signature;
! 					case "1.2.840.10040.4.3":	// SHA-1 with DSA
! 						ASN1 sign = new ASN1 (signature);
! 						if ((sign == null) || (sign.Count != 2))
! 							return null;
! 						// parts may be less than 20 bytes (i.e. first bytes were 0x00)
! 						byte[] part1 = sign [0].Value;
! 						byte[] part2 = sign [1].Value;
! 						byte[] sig = new byte [40];
! 						Array.Copy (part1, 0, sig, (20 - part1.Length), part1.Length);
! 						Array.Copy (part2, 0, sig, (40 - part2.Length), part2.Length);
! 						return sig;
! 					default:
! 						throw new CryptographicException ("Unsupported hash algorithm: " + m_signaturealgo);
! 				}
! 			}
! 		}
! 
! 		public virtual string SignatureAlgorithm {
! 			get { return m_signaturealgo; }
! 		}
! 
! 		public virtual byte[] SignatureAlgorithmParameters {
! 			get { return m_signaturealgoparams; }
! 		}
! 
! 		public virtual string SubjectName {
! 			get { return m_subject; }
! 		}
! 
! 		public virtual DateTime ValidFrom {
! 			get { return m_from; }
! 		}
! 
! 		public virtual DateTime ValidUntil {
! 			get { return m_until; }
! 		}
! 
! 		public int Version {
! 			get { return version; }
! 		}
! 
! 		public bool IsCurrent {
! 			get { return WasCurrent (DateTime.UtcNow); }
! 		}
! 
! 		public bool WasCurrent (DateTime date) 
! 		{
! 			return ((date > ValidFrom) && (date <= ValidUntil));
! 		}
! 
! 		private byte[] GetHash (string hashName) 
! 		{
! 			byte[] toBeSigned = decoder [0].GetBytes ();
! 			HashAlgorithm ha = HashAlgorithm.Create (hashName);
! 			return ha.ComputeHash (toBeSigned);
! 		}
! 
! 		public bool VerifySignature (DSA dsa) 
! 		{
! 			// signatureOID is check by both this.Hash and this.Signature
! 			DSASignatureDeformatter v = new DSASignatureDeformatter (dsa);
! 			// only SHA-1 is supported
! 			v.SetHashAlgorithm ("SHA1");
! 			return v.VerifySignature (this.Hash, this.Signature);
! 		}
! 
! 		internal bool VerifySignature (RSA rsa) 
! 		{
! 			RSAPKCS1SignatureDeformatter v = new RSAPKCS1SignatureDeformatter (rsa);
! 			switch (m_signaturealgo) {
! 				// MD2 with RSA encryption 
! 				case "1.2.840.113549.1.1.2":
! 					// maybe someone installed MD2 ?
! 					v.SetHashAlgorithm ("MD2");
! 					break;
! 				// MD5 with RSA encryption 
! 				case "1.2.840.113549.1.1.4":
! 					v.SetHashAlgorithm ("MD5");
! 					break;
! 				// SHA-1 with RSA Encryption 
! 				case "1.2.840.113549.1.1.5":
! 					v.SetHashAlgorithm ("SHA1");
! 					break;
! 				default:
! 					throw new CryptographicException ("Unsupported hash algorithm: " + m_signaturealgo);
! 			}
! 			return v.VerifySignature (this.Hash, this.Signature);
! 		}
! 
! 		public bool VerifySignature (AsymmetricAlgorithm aa) 
! 		{
! 			if (aa is RSA)
! 				return VerifySignature (aa as RSA);
! 			else if (aa is DSA)
! 				return VerifySignature (aa as DSA);
! 			else 
! 				throw new NotSupportedException ("Unknown Asymmetric Algorithm " + aa.ToString ());
! 		}
! 
! 		public bool CheckSignature (byte[] hash, string hashAlgorithm, byte[] signature) 
! 		{
! 			RSACryptoServiceProvider r = (RSACryptoServiceProvider) RSA;
! 			return r.VerifyHash (hash, hashAlgorithm, signature);
! 		}
! 
! 		public bool IsSelfSigned {
! 			get { 
! 				if (m_issuername == m_subject)
! 					return VerifySignature (RSA); 
! 				else
! 					return false;
! 			}
! 		}
! 	}
  }