1 files changed, 79 insertions, 0 deletions
diff --git a/libraries/spongycastle/prov/src/main/java/org/spongycastle/jce/provider/X509StoreLDAPAttrCerts.java b/libraries/spongycastle/prov/src/main/java/org/spongycastle/jce/provider/X509StoreLDAPAttrCerts.java
new file mode 100644
index 000000000..45057c101
--- /dev/null
+++ b/libraries/spongycastle/prov/src/main/java/org/spongycastle/jce/provider/X509StoreLDAPAttrCerts.java
@@ -0,0 +1,79 @@
+package org.spongycastle.jce.provider;
+
+import java.util.Collection;
+import java.util.Collections;
+import java.util.HashSet;
+import java.util.Set;
+
+import org.spongycastle.jce.X509LDAPCertStoreParameters;
+import org.spongycastle.util.Selector;
+import org.spongycastle.util.StoreException;
+import org.spongycastle.x509.X509AttributeCertStoreSelector;
+import org.spongycastle.x509.X509StoreParameters;
+import org.spongycastle.x509.X509StoreSpi;
+import org.spongycastle.x509.util.LDAPStoreHelper;
+
+/**
+ * A SPI implementation of Bouncy Castle <code>X509Store</code> for getting
+ * attribute certificates from an LDAP directory.
+ *
+ * @see org.spongycastle.x509.X509Store
+ */
+public class X509StoreLDAPAttrCerts extends X509StoreSpi
+{
+
+    private LDAPStoreHelper helper;
+
+    public X509StoreLDAPAttrCerts()
+    {
+    }
+
+    /**
+     * Initializes this LDAP attribute cert store implementation.
+     *
+     * @param parameters <code>X509LDAPCertStoreParameters</code>.
+     * @throws IllegalArgumentException if <code>params</code> is not an instance of
+     *                                  <code>X509LDAPCertStoreParameters</code>.
+     */
+    public void engineInit(X509StoreParameters parameters)
+    {
+        if (!(parameters instanceof X509LDAPCertStoreParameters))
+        {
+            throw new IllegalArgumentException(
+                "Initialization parameters must be an instance of "
+                    + X509LDAPCertStoreParameters.class.getName() + ".");
+        }
+        helper = new LDAPStoreHelper((X509LDAPCertStoreParameters)parameters);
+    }
+
+    /**
+     * Returns a collection of matching attribute certificates from the LDAP
+     * location.
+     * <p/>
+     * The selector must be a of type
+     * <code>X509AttributeCertStoreSelector</code>. If it is not an empty
+     * collection is returned.
+     * <p/>
+     * <p/>
+     * The subject and the serial number should be reasonable criterias for a
+     * selector.
+     *
+     * @param selector The selector to use for finding.
+     * @return A collection with the matches.
+     * @throws StoreException if an exception occurs while searching.
+     */
+    public Collection engineGetMatches(Selector selector) throws StoreException
+    {
+        if (!(selector instanceof X509AttributeCertStoreSelector))
+        {
+            return Collections.EMPTY_SET;
+        }
+        X509AttributeCertStoreSelector xselector = (X509AttributeCertStoreSelector)selector;
+        Set set = new HashSet();
+        set.addAll(helper.getAACertificates(xselector));
+        set.addAll(helper.getAttributeCertificateAttributes(xselector));
+        set.addAll(helper.getAttributeDescriptorCertificates(xselector));
+        return set;
+    }
+
+}