allow multple entries in the pem string

Often it is desirable to have a certificate chain and a key that you can
manage as one entity.
BouncyCastle already supports multiple PEM objects inside a give string,
so this is mostly a minor refactoring and exposure of this.

Author: jtnord

src/main/java/jenkins/bouncycastle/api/PEMEncodable.java

@@ -47,7 +47,9 @@
 import java.security.interfaces.RSAPrivateCrtKey;
 import java.security.spec.InvalidKeySpecException;
 import java.security.spec.RSAPublicKeySpec;
+import java.util.ArrayList;
 import java.util.Arrays;
+import java.util.List;
 import java.util.logging.Level;
 import java.util.logging.Logger;
 import java.util.stream.Collectors;
@@ -166,18 +168,46 @@ public static PEMEncodable decode(@NonNull String pem) throws IOException, Unrec
     @NonNull
     public static PEMEncodable decode(@NonNull String pem, @Nullable final char[] passphrase)
             throws IOException, UnrecoverableKeyException {
+        List<PEMEncodable> pems = decodeAll(pem, passphrase);
+        if (pems.isEmpty()) {
+            throw new IOException(
+                    "Could not parse PEM, only key pairs, private keys, public keys and certificates are supported");
+        }
+        if (pems.size() > 1) {
+            throw new IOException("Expected a single PEM entry, but got " + pems.size());
+        }
+        return pems.get(0);
+    }
 
-        try (PEMParser parser = new PEMParser(new StringReader(pem))) {
+    /**
+     * Creates a list of {@link PEMEncodable}s by decoding PEM formated data from a {@link String}
+     *
+     * @param pem {@link String} with the PEM data
+     * @param passphrase passphrase for the encrypted PEM data. {@code null} if PEM data is not passphrase protected.
+     * The caller is responsible for zeroing out the char[] after use to ensure the password does not stay in memory, e.g. with
+     * <code>Arrays.fill(passphrase, (char)0)</code>
+     * @return a list of {@link PEMEncodable} objects
+     * @throws IOException launched if a problem exists reading the PEM information
+     * @throws UnrecoverableKeyException in case PEM is passphrase protected and none or wrong is provided
+     */
+    @NonNull
+    public static List<PEMEncodable> decodeAll(@NonNull String pem, @Nullable final char[] passphrase)
+            throws IOException, UnrecoverableKeyException {
+        List<PEMEncodable> objects = new ArrayList<>();
 
-            Object object = parser.readObject();
+        try (PEMParser parser = new PEMParser(new StringReader(pem))) {
 
-            if (object == null) {
-                throw new IOException(
-                        "Could not parse PEM, only key pairs, private keys, public keys and certificates are supported");
+            for (Object object = parser.readObject(); object != null; object = parser.readObject()) {
+                objects.add(convertedPemToPemDecodable(object, passphrase));
             }
+        }
+        return objects;
+    }
 
+    private static final PEMEncodable convertedPemToPemDecodable(Object object, char[] passphrase)
+            throws UnrecoverableKeyException, IOException {
+        try {
             JcaPEMKeyConverter kConv = new JcaPEMKeyConverter().setProvider(BOUNCY_CASTLE_PROVIDER);
-
             // handle supported PEM formats.
             if (object instanceof PEMEncryptedKeyPair) {
                 if (passphrase != null) {
@@ -284,6 +314,36 @@ public static PEMEncodable read(@NonNull File pemFile, @Nullable char[] passphra
         return decode(FileUtils.readFileToString(pemFile, StandardCharsets.UTF_8), passphrase);
     }
 
+    /**
+     * Creates {@link PEMEncodable}s by reading a PEM file
+     *
+     * @param pemFile {@link File} pointing to the PEM file to read
+     * @return A list of {@link PEMEncodable} objects.
+     * @throws IOException launched if a problem exists reading the PEM information or the {@link File}
+     * @throws UnrecoverableKeyException in case PEM is passphrase protected
+     */
+    @NonNull
+    public static List<PEMEncodable> readAll(@NonNull File pemFile) throws IOException, UnrecoverableKeyException {
+        return readAll(pemFile, null);
+    }
+
+    /**
+     * Creates a {@link PEMEncodable}s by reading a PEM file
+     *
+     * @param pemFile {@link File} pointing to the PEM file to read
+     * @param passphrase passphrase for the encrypted PEM data. {@code null} if PEM data is not passphrase protected.
+     * The caller is responsible for zeroing out the char[] after use to ensure the password does not stay in memory, e.g. with
+     * <code>Arrays.fill(passphrase, (char)0)</code>
+     * @return a list of {@link PEMEncodable} objects
+     * @throws IOException launched if a problem exists reading the PEM information or the {@link File}
+     * @throws UnrecoverableKeyException in case PEM is passphrase protected and none or wrong is provided
+     */
+    @NonNull
+    public static List<PEMEncodable> readAll(@NonNull File pemFile, @Nullable char[] passphrase)
+            throws IOException, UnrecoverableKeyException {
+        return decodeAll(FileUtils.readFileToString(pemFile, StandardCharsets.UTF_8), passphrase);
+    }
+
     /**
      * Writes the current stored information in PEM formated {@link File}
      *

src/test/java/jenkins/bouncycastle/EncodingDecodingTest.java

@@ -35,10 +35,12 @@
 import java.io.IOException;
 import java.net.URISyntaxException;
 import java.nio.charset.StandardCharsets;
+import java.security.KeyPair;
 import java.security.PublicKey;
 import java.security.Security;
 import java.security.cert.Certificate;
 import java.util.Arrays;
+import java.util.List;
 import jenkins.bouncycastle.api.PEMEncodable;
 import org.apache.commons.io.FileUtils;
 import org.bouncycastle.jce.provider.BouncyCastleProvider;
@@ -73,6 +75,9 @@ public static void cleanupProvider() {
     private static File CERTIFICATE_PUBLIC_KEY_PEM;
     private static File CERTIFICATE_PW_PEM;
     private static File CERTIFICATE_PUBLIC_KEY_PW_PEM;
+    private static File CERTIFICATE_AND_PRIVATE_KEY_PEM;
+    private static File CERTIFICATE_AND_PRIVATE_KEY_PW_PEM;
+
     private static File PRIVATE_KEY_PW_PKCS8;
 
     private static final String PRIVATE_KEY_PW = "test";
@@ -90,6 +95,8 @@ public static void setUpClass() throws URISyntaxException {
         CERTIFICATE_PUBLIC_KEY_PEM = getResourceFile("test_cert_key.pem");
         CERTIFICATE_PW_PEM = getResourceFile("test_cert_cert_pass.pem");
         CERTIFICATE_PUBLIC_KEY_PW_PEM = getResourceFile("test_cert_key_pass.pem");
+        CERTIFICATE_AND_PRIVATE_KEY_PEM = getResourceFile("test_cert_and_key.pem");
+        CERTIFICATE_AND_PRIVATE_KEY_PW_PEM = getResourceFile("test_cert_and_key_pass.pem");
     }
 
     private static File getResourceFile(String resource) throws URISyntaxException {
@@ -128,7 +135,7 @@ public void testReadPrivateKeyWithPasswordPEM() throws Exception {
     @Test
     @Issue(value = "JENKINS-66394")
     public void testReadPrivateKeyWithPasswordPKCS8() throws Exception {
-        PEMEncodable pemEnc = PEMEncodable.read(PRIVATE_KEY_PW_PKCS8, "test".toCharArray());
+        PEMEncodable pemEnc = PEMEncodable.read(PRIVATE_KEY_PW_PKCS8, PRIVATE_KEY_PW.toCharArray());
 
         assertEquals(
                 new String(Base64.encode(pemEnc.toKeyPair().getPrivate().getEncoded()), StandardCharsets.UTF_8),
@@ -186,11 +193,7 @@ public void testReadCertificatePEM() throws Exception {
 
         Certificate certificate = pemEncCer.toCertificate();
         PublicKey publicKey = pemEncKey.toPublicKey();
-        assertNotNull(certificate);
-        assertNotNull(publicKey);
-        assertEquals(
-                new String(Base64.encode(certificate.getPublicKey().getEncoded()), StandardCharsets.UTF_8),
-                new String(Base64.encode(publicKey.getEncoded()), StandardCharsets.UTF_8));
+        assertCertificatePublicKeyMatches(certificate, publicKey);
     }
 
     @Test
@@ -200,11 +203,7 @@ public void testReadCertificateWithPasswordPEM() throws Exception {
 
         Certificate certificate = pemEncCer.toCertificate();
         PublicKey publicKey = pemEncKey.toPublicKey();
-        assertNotNull(certificate);
-        assertNotNull(publicKey);
-        assertEquals(
-                new String(Base64.encode(certificate.getPublicKey().getEncoded()), StandardCharsets.UTF_8),
-                new String(Base64.encode(publicKey.getEncoded()), StandardCharsets.UTF_8));
+        assertCertificatePublicKeyMatches(certificate, publicKey);
     }
 
     @Test
@@ -271,4 +270,37 @@ public void testReadKeyPairFromPCKS8PEM() throws Exception {
     public void testInvalidPEM() throws Exception {
         PEMEncodable.decode(FileUtils.readFileToString(getResourceFile("invalid.pem"), StandardCharsets.UTF_8));
     }
+
+    @Test
+    public void testReadingCertAndKeyPEM() throws Exception {
+        List<PEMEncodable> pems = PEMEncodable.readAll(CERTIFICATE_AND_PRIVATE_KEY_PEM);
+        assertThat(pems).hasSize(2);
+        assertCertPublicKeyMatches(pems.get(0).toCertificate(), pems.get(1).toKeyPair());
+    }
+
+    @Test
+    public void testReadingCertAndKeyPassPEM() throws Exception {
+        List<PEMEncodable> pems =
+                PEMEncodable.readAll(CERTIFICATE_AND_PRIVATE_KEY_PW_PEM, PRIVATE_KEY_PW.toCharArray());
+        assertThat(pems).hasSize(2);
+        assertCertPublicKeyMatches(pems.get(0).toCertificate(), pems.get(1).toKeyPair());
+    }
+
+    /**
+     * asserts that the given certificates public key corresponds to the provided KeyPair.
+     */
+    private static void assertCertPublicKeyMatches(Certificate cert, KeyPair kp) {
+        assertCertificatePublicKeyMatches(cert, kp != null ? kp.getPublic() : null);
+    }
+
+    /**
+     * asserts that the given certificates public key corresponds to the provided KeyPair.
+     */
+    private static void assertCertificatePublicKeyMatches(Certificate cert, PublicKey key) {
+        assertNotNull(cert);
+        assertNotNull(key);
+        assertEquals(
+                new String(Base64.encode(cert.getPublicKey().getEncoded()), StandardCharsets.UTF_8),
+                new String(Base64.encode(key.getEncoded()), StandardCharsets.UTF_8));
+    }
 }

src/test/resources/test_cert_and_key.pem

@@ -0,0 +1,52 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----

src/test/resources/test_cert_and_key_pass.pem

@@ -0,0 +1,55 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+-----BEGIN ENCRYPTED PRIVATE KEY-----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+-----END ENCRYPTED PRIVATE KEY-----