如何从 PKCS10 请求中提取 SubjectAlternativeNames

Question

我想从 JAVA 中的 PKCS10 请求中提取主题备用名称 (SAN)。

拳头，我使用 bouncycastle 获得 PKCS10CertificationRequest 如下：

PKCS10CertificationRequest certificationRequest = getPKCS10CertificationRequest(csr);

但是，我不知道是否有办法从certificationRequest 中提取SAN 值。

有什么帮助吗？

Answer 1

    byte[] der = Files.readAllBytes(Paths.get(args[0])); // for example
    // assuming all BouncyCastle classes imported as needed and 
    // given a CSR in der, to get the SAN extension as an object
    // (minimal error handling, you may want to improve)
    Attribute[] attrs = new PKCS10CertificationRequest(der).getAttributes(PKCSObjectIdentifiers.pkcs_9_at_extensionRequest);
    if( attrs.length != 1 ) throw new Exception("bad");
    ASN1Encodable[] valus = attrs[0].getAttributeValues();
    if( valus.length != 1 ) throw new Exception("bad");
    Extension extn = Extensions.getInstance(valus[0]).getExtension(Extension.subjectAlternativeName);
    if( extn == null ) throw new Exception("missing");
    // to get the _value_ of the extension, now extn.getExtnValus().getOctets()
    // to _use_ the _value_ of the extension, parse as GeneralNames:
    GeneralNames sanv = GeneralNames.getInstance(extn.getExtnValue().getOctets());
    for( GeneralName item : sanv.getNames() ){ // example of possible usage
        System.out.println (item.toString()); // you probably want something else
    }