in proxy/core/src/main/java/com/amazon/aws/pix/core/xml/X509IssuerSerialKeySelector.java [38:53]
private PublicKey getPublicKey(X509IssuerSerial x509IssuerSerial) {
X509CertSelector x509CertSelector = new X509CertSelector();
x509CertSelector.setSerialNumber(x509IssuerSerial.getSerialNumber());
x509CertSelector.setIssuer(new X500Principal(x509IssuerSerial.getIssuerName()).getName());
Enumeration<String> aliases = keyStore.aliases();
while (aliases.hasMoreElements()) {
Certificate certificate = keyStore.getCertificate(aliases.nextElement());
if (certificate != null && x509CertSelector.match(certificate)) {
((X509Certificate) certificate).checkValidity();
return certificate.getPublicKey();
}
}
throw new KeyStoreException("Certificate is not present in KeyStore");
}