init commit

output/Libraries/BouncyCastle.Crypto/Org/BouncyCastle/Crypto/Tls/DefaultTlsSignerCredentials.cs

@@ -0,0 +1,88 @@
+using System;
+using Org.BouncyCastle.Crypto.Parameters;
+using Org.BouncyCastle.Utilities;
+
+namespace Org.BouncyCastle.Crypto.Tls;
+
+public class DefaultTlsSignerCredentials : AbstractTlsSignerCredentials
+{
+	protected readonly TlsContext mContext;
+
+	protected readonly Certificate mCertificate;
+
+	protected readonly AsymmetricKeyParameter mPrivateKey;
+
+	protected readonly SignatureAndHashAlgorithm mSignatureAndHashAlgorithm;
+
+	protected readonly TlsSigner mSigner;
+
+	public override Certificate Certificate => mCertificate;
+
+	public override SignatureAndHashAlgorithm SignatureAndHashAlgorithm => mSignatureAndHashAlgorithm;
+
+	public DefaultTlsSignerCredentials(TlsContext context, Certificate certificate, AsymmetricKeyParameter privateKey)
+		: this(context, certificate, privateKey, null)
+	{
+	}
+
+	public DefaultTlsSignerCredentials(TlsContext context, Certificate certificate, AsymmetricKeyParameter privateKey, SignatureAndHashAlgorithm signatureAndHashAlgorithm)
+	{
+		if (certificate == null)
+		{
+			throw new ArgumentNullException("certificate");
+		}
+		if (certificate.IsEmpty)
+		{
+			throw new ArgumentException("cannot be empty", "clientCertificate");
+		}
+		if (privateKey == null)
+		{
+			throw new ArgumentNullException("privateKey");
+		}
+		if (!privateKey.IsPrivate)
+		{
+			throw new ArgumentException("must be private", "privateKey");
+		}
+		if (TlsUtilities.IsTlsV12(context) && signatureAndHashAlgorithm == null)
+		{
+			throw new ArgumentException("cannot be null for (D)TLS 1.2+", "signatureAndHashAlgorithm");
+		}
+		if (privateKey is RsaKeyParameters)
+		{
+			mSigner = new TlsRsaSigner();
+		}
+		else if (privateKey is DsaPrivateKeyParameters)
+		{
+			mSigner = new TlsDssSigner();
+		}
+		else
+		{
+			if (!(privateKey is ECPrivateKeyParameters))
+			{
+				throw new ArgumentException("type not supported: " + Platform.GetTypeName(privateKey), "privateKey");
+			}
+			mSigner = new TlsECDsaSigner();
+		}
+		mSigner.Init(context);
+		mContext = context;
+		mCertificate = certificate;
+		mPrivateKey = privateKey;
+		mSignatureAndHashAlgorithm = signatureAndHashAlgorithm;
+	}
+
+	public override byte[] GenerateCertificateSignature(byte[] hash)
+	{
+		try
+		{
+			if (TlsUtilities.IsTlsV12(mContext))
+			{
+				return mSigner.GenerateRawSignature(mSignatureAndHashAlgorithm, mPrivateKey, hash);
+			}
+			return mSigner.GenerateRawSignature(mPrivateKey, hash);
+		}
+		catch (CryptoException alertCause)
+		{
+			throw new TlsFatalAlert(80, alertCause);
+		}
+	}
+}