|
44 | 44 | import org.bouncycastle.mail.smime.SMIMESigned; |
45 | 45 | import org.bouncycastle.mail.smime.SMIMESignedGenerator; |
46 | 46 | import org.bouncycastle.mail.smime.SMIMEToolkit; |
| 47 | +import org.bouncycastle.openssl.jcajce.JcaPEMKeyConverter; |
47 | 48 | import org.bouncycastle.openssl.jcajce.JcaPKIXIdentityBuilder; |
48 | 49 | import org.bouncycastle.operator.OperatorCreationException; |
49 | 50 | import org.bouncycastle.operator.bc.BcDigestCalculatorProvider; |
@@ -261,12 +262,14 @@ public void testSignedMessageVerificationEncapsulatedWithPKIXIdentity() |
261 | 262 |
|
262 | 263 | MimeBodyPart res = gen.generateEncapsulated(msg); |
263 | 264 |
|
264 | | - Assert.assertTrue(toolkit.isValidSignature(res, new JcaSimpleSignerInfoVerifierBuilder().setProvider(BC).build(identity.getCertificate()))); |
| 265 | + // TODO: certificate has expired |
| 266 | + JcaPEMKeyConverter keyConverter = new JcaPEMKeyConverter(); |
| 267 | + Assert.assertTrue(toolkit.isValidSignature(res, new JcaSimpleSignerInfoVerifierBuilder().setProvider(BC).build(keyConverter.getPublicKey(identity.getCertificate().getSubjectPublicKeyInfo())))); |
265 | 268 |
|
266 | 269 | MimeMessage body = makeMimeMessage(res); |
267 | 270 |
|
268 | | - Assert.assertTrue(toolkit.isValidSignature(body, new JcaSimpleSignerInfoVerifierBuilder().setProvider(BC).build(identity.getCertificate()))); |
269 | | - Assert.assertTrue(toolkit.isValidSignature(body, new JcaSimpleSignerInfoVerifierBuilder().setProvider(BC).build(identity.getX509Certificate()))); |
| 271 | + Assert.assertTrue(toolkit.isValidSignature(body, new JcaSimpleSignerInfoVerifierBuilder().setProvider(BC).build(keyConverter.getPublicKey(identity.getCertificate().getSubjectPublicKeyInfo())))); |
| 272 | + Assert.assertTrue(toolkit.isValidSignature(body, new JcaSimpleSignerInfoVerifierBuilder().setProvider(BC).build(identity.getX509Certificate().getPublicKey()))); |
270 | 273 | } |
271 | 274 |
|
272 | 275 | public void testEncryptedMimeBodyPart() |
|
0 commit comments