Method: Ccrypto::Java::PKCS7Engine#decrypt

Defined in:

lib/ccrypto/java/engines/pkcs7_engine.rb

#decrypt(val, &block) ⇒ Object

Raises:

• (PKCS7EngineException)

# File 'lib/ccrypto/java/engines/pkcs7_engine.rb', line 342

def decrypt(val, &block)
  validate_input(val, "decrypt") 
  validate_key_must_exist("decrypt")

  raise PKCS7EngineException, "certForDecryption is required for PKCS7 decrypt operation" if is_empty?(@config.certForDecryption)
  raise PKCS7EngineException, "Given certForDecryption must be a Ccrypto::X509Cert object" if not @config.certForDecryption.is_a?(Ccrypto::X509Cert)

  case val
  when java.io.ByteArrayInputStream
    envp = org.bouncycastle.cms.CMSEnvelopedData.new(val)
  else
    if not val.nil?
      ba = to_java_bytes(val)
      case ba
      when ::Java::byte[]
        envp = org.bouncycastle.cms.CMSEnvelopedData.new(ba)
      else
        raise PKCS7EngineException, "Unknown input type '#{ba}' is given"
      end
    else
      raise PKCS7EngineException, "Null input is given"
    end
  end

  if block
    os = block.call(:output_stream)
    intBufSize = block.call(:int_buffer_size)
  end

  os = java.io.ByteArrayOutputStream.new if os.nil?
  intBufSize = 1024000 if is_empty?(intBufSize)

  kt = decryption_key_to_recipient(@config.private_key)

  lastEx = nil
  recipients = envp.getRecipientInfos.getRecipients
  recipients.each do |r|

    begin
      encIs = r.getContentStream(kt).getContentStream
    rescue Exception => ex
      lastEx = ex
      teLogger.debug "Got exception : #{ex.message}. Retry with another envelope"
      next
    end

    begin
      total = 0
      buf = ::Java::byte[intBufSize].new
      while((read = encIs.read(buf, 0, buf.length)) != -1)
        os.write(buf,0, read)
      end

      os.flush
    rescue Exception
    ensure
      begin
        encIs.close
      rescue Exception
      end
    end

    lastEx = nil
    break
  end

  if not lastEx.nil?
    raise PKCS7EngineException, lastEx
  end

  os.toByteArray if os.is_a?(java.io.ByteArrayOutputStream)

end