如何使用二分搜索比较 x509 证书
我有一个列表，该列表有一个 x509certificate，我用它存储在 cms 包中。真是花花公子，直到我遇到了这个问题：我不能让同一个人签名两次。
所以，我知道如何平等地找到该证书，即线性搜索。
这听起来可能纯粹是虚荣心，但我宁愿使用二分搜索，显然使用可比较。
我怎么能这么做呢？ （java 或 bouncyCastle）。
谢谢
I have a list and that list has an x509certificate, which I use for storing in a cms package. All dandy, until I bump into the problem: I can't have the same person signing twice.
So, I know how to find that certificate by equals, so a linear search.
It may sound pure vanity, but I would rather use a binary search, using, obviously, comparable.
How in heavens could i do that? (java or bouncyCastle).
Thanks
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（2）
将证书存储在
TreeSet中，并使用Collections.binarySearch查找感兴趣的证书（您必须将Set转换为首先列出）。TreeSet的底层是一个TreeMap，因此如果您不喜欢该实现，您可以实现SortedSet并创建您自己的。如果不担心重复的证书，请将它们存储在List中，并在调用binarySearch之前对其进行排序。您是否有理由不想使用好的
Collection.contains？Store the certs in a
TreeSetand useCollections.binarySearchto look for the cert of interest (you'll have to turn yourSetinto aListfirst). Underlying aTreeSetis aTreeMapso if you don't like that implementation you can implementSortedSetand make your own. If duplicate certs aren't a concern then store them in aListand sort it before callingbinarySearch.Is there a reason you don't want to use good ol'
Collection.contains?我要感谢 Jens 和 dnault 引导我找到答案：
我将使用（bigInteger）序列号（所有证书都有）对证书进行排序和搜索，以进行比较，一旦找到类似的序列号，我就会在 DER 编码格式。
为什么我没有使用哈希码方法，你可能会问：
并非所有证书和签名都会保存在内存中。有时，有些会位于 PKCS7 (CMS) 或 XMLDSig 文件中。因此，对象的哈希码可能不同，因为物理上它们是不同的对象，但逻辑上它们引用相同的证书。
覆盖 getHashCode 只能给出一半的答案，因为有时序列号可能出现两次的情况并不常见，因为它取决于它所属的链以及其他因素。
感谢您提供的信息和帮助。
I want to thank Jens and dnault for guiding me to the answer:
I am going to sort and search the certificates using the (bigInteger) SerialNumber, which all certificates have, to compare and as soon as I find a similar serial, I am going to compare them in a DER encoded format.
Why did I not used the hash code approach, you may ask:
Not all the certificates and signatures will be in memory. Some, sometimes, will be in a PKCS7 (CMS), or a XMLDSig file. So The object's hashcode may differ, as physically they are different objects, but logically they refer to the same certificate.
Overriding getHashCode will only give half of the answer, as sometimes, not too often the serial number can occur twice, as it depends on the chain that it belongs to, among other factors.
Thank you for the info and the help.