es.gob.afirma.signature.asic

Class ASiCSBaselineSigner

java.lang.Object

es.gob.afirma.signature.asic.ASiCSBaselineSigner

All Implemented Interfaces:

Signer

public final class ASiCSBaselineSigner
extends java.lang.Object
implements Signer

Class that manages the generation, validation and upgrade of ASiC-S Baseline signatures.

Project:

Library for the integration with the services of @Firma, eVisor and TS@.

Version:

1.4, 18/04/2022.

Constructor Summary

Constructors

Constructor and Description
ASiCSBaselineSigner() Constructor method for the class ASiCSBaselineSigner.java.

Method Summary

Modifier and Type	Method and Description
byte[]	coSign(byte[] signature, byte[] document, java.lang.String algorithm, java.security.KeyStore.PrivateKeyEntry privateKey, java.util.Properties extraParams, boolean includeTimestamp, java.lang.String signatureForm, java.lang.String signaturePolicyID) Method that generates a basic co-signature (signature with signers on parallel).
byte[]	coSign(byte[] signature, byte[] document, java.lang.String algorithm, java.security.KeyStore.PrivateKeyEntry privateKey, java.util.Properties extraParams, boolean includeTimestamp, java.lang.String signatureForm, java.lang.String signaturePolicyID, java.lang.String idClient) Method that generates a basic co-signature (signature with signers on parallel).
byte[]	counterSign(byte[] signature, java.lang.String algorithm, java.security.KeyStore.PrivateKeyEntry privateKey, java.util.Properties extraParams, boolean includeTimestamp, java.lang.String signatureForm, java.lang.String signaturePolicyID) Method that generates a basic counter-signature (signature with signers on serial).
byte[]	counterSign(byte[] signature, java.lang.String algorithm, java.security.KeyStore.PrivateKeyEntry privateKey, java.util.Properties extraParams, boolean includeTimestamp, java.lang.String signatureForm, java.lang.String signaturePolicyID, java.lang.String idClient) Method that generates a basic counter-signature (signature with signers on serial).
OriginalSignedData	getSignedData(byte[] asicSSignature) Method that obtains the data originally signed from a signature.
byte[]	sign(byte[] data, java.lang.String algorithm, java.lang.String signatureFormat, java.security.KeyStore.PrivateKeyEntry privateKey, java.util.Properties extraParams, boolean includeTimestamp, java.lang.String signatureForm, java.lang.String signaturePolicyID) Method that generates a basic signature.
byte[]	sign(byte[] data, java.lang.String algorithm, java.lang.String signatureFormat, java.security.KeyStore.PrivateKeyEntry privateKey, java.util.Properties extraParams, boolean includeTimestamp, java.lang.String signatureForm, java.lang.String signaturePolicyID, java.lang.String idClient) Method that generates a basic signature.
byte[]	upgrade(byte[] signature, java.util.List<java.security.cert.X509Certificate> listSigners) Method that upgrades a signature adding a timestamp to all of the signers indicated.
byte[]	upgrade(byte[] signature, java.util.List<java.security.cert.X509Certificate> listSigners, java.lang.String idClient) Method that upgrades a signature adding a timestamp to all of the signers indicated.
ValidationResult	verifySignature(byte[] asicSSignature) Method that validates the structure of an ASiC-S signature and the signers of the XML or ASN.1 signature contained inside it.

Methods inherited from class java.lang.Object

equals, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

ASiCSBaselineSigner

public ASiCSBaselineSigner()

Constructor method for the class ASiCSBaselineSigner.java.

Method Detail

sign

public byte[] sign(byte[] data,
                   java.lang.String algorithm,
                   java.lang.String signatureFormat,
                   java.security.KeyStore.PrivateKeyEntry privateKey,
                   java.util.Properties extraParams,
                   boolean includeTimestamp,
                   java.lang.String signatureForm,
                   java.lang.String signaturePolicyID,
                   java.lang.String idClient)
            throws SigningException

Method that generates a basic signature.

Specified by:

sign in interface Signer

Parameters:

data - Parameter that represents the data to sign.

algorithm - Parameter that represents the signature algorithm.

signatureFormat - Parameter that represents the signing mode. The allowed values for a CAdES (Baseline or not) signature are:

• SignatureConstants.SIGN_MODE_EXPLICIT
• SignatureConstants.SIGN_MODE_IMPLICIT

The allowed values for a XAdES (Baseline or not) signature are:

• SignatureConstants.SIGN_FORMAT_XADES_DETACHED
• SignatureConstants.SIGN_FORMAT_XADES_EXTERNALLY_DETACHED
• SignatureConstants.SIGN_FORMAT_XADES_ENVELOPED
• SignatureConstants.SIGN_FORMAT_XADES_ENVELOPING

The allowed values for PAdES (Baseline or not) signature are:

• SignatureConstants.SIGN_MODE_IMPLICIT

privateKey - Parameter that represents the private key of the signing certificate.

extraParams - Set of extra configuration parameters. The allowed parameters are:

• SignatureProperties.CADES_POLICY_QUALIFIER_PROP. This property is only allowed for CAdES (Baseline or not) signatures.
• SignatureProperties.XADES_CLAIMED_ROLE_PROP. This property is only allowed for XAdES (Baseline or not) signatures.
• SignatureProperties.XADES_POLICY_QUALIFIER_PROP. This property is only allowed for XAdES (Baseline or not) signatures.
• SignatureProperties.XADES_DATA_FORMAT_DESCRIPTION_PROP. This property is only allowed for XAdES (Baseline or not) signatures.
• SignatureProperties.XADES_DATA_FORMAT_MIME_PROP. This property is only allowed for XAdES (Baseline or not) signatures.
• SignatureProperties.XADES_DATA_FORMAT_ENCODING_PROP. This property is only allowed for XAdES (Baseline or not) signatures.
• SignatureProperties.PADES_CERTIFICATION_LEVEL. This property is only allowed for PAdES (Baseline or not) signatures.
• SignatureProperties.PADES_CONTACT_PROP. This property is only allowed for PAdES (Baseline or not) signatures.
• SignatureProperties.PADES_LOCATION_PROP. This property is only allowed for PAdES (Baseline or not) signatures.
• SignatureProperties.PADES_REASON_PROP. This property is only allowed for PAdES (Baseline or not) signatures.
• SignatureProperties.PADES_LOWER_LEFT_X. This property is only allowed for PAdES (Baseline or not) signatures.
• SignatureProperties.PADES_LOWER_LEFT_Y. This property is only allowed for PAdES (Baseline or not) signatures.
• SignatureProperties.PADES_UPPER_RIGHT_X. This property is only allowed for PAdES (Baseline or not) signatures.
• SignatureProperties.PADES_UPPER_RIGHT_Y. This property is only allowed for PAdES (Baseline or not) signatures.
• SignatureProperties.PADES_IMAGE. This property is only allowed for PAdES (Baseline or not) signatures.
• SignatureProperties.PADES_IMAGE_PAGE. This property is only allowed for PAdES (Baseline or not) signatures.

includeTimestamp - Parameter that indicates if the signature will include a timestamp (true) or not (false).

signatureForm - Parameter that represents the signature form. The allowed values for CAdES signature are:

• ISignatureFormatDetector.FORMAT_CADES_BES
• ISignatureFormatDetector.FORMAT_CADES_EPES

The allowed values for CAdES Baseline signature are:

• ISignatureFormatDetector.FORMAT_CADES_B_LEVEL

The allowed values for XAdES signature are:

• ISignatureFormatDetector.FORMAT_XADES_BES
• ISignatureFormatDetector.FORMAT_XADES_EPES

The allowed values for XAdES Baseline signature are:

• ISignatureFormatDetector.FORMAT_XADES_B_LEVEL

The allowed values for PAdES signature are:

• ISignatureFormatDetector.FORMAT_PADES_BASIC
• ISignatureFormatDetector.FORMAT_PADES_BES
• ISignatureFormatDetector.FORMAT_PADES_EPES

The allowed values for PAdES Baseline signature are:

• ISignatureFormatDetector.FORMAT_PADES_B_LEVEL

signaturePolicyID - Parameter that represents the identifier of the signature policy used for generate the signature with signature policies. The identifier must be defined on the properties file where to configure the validation and generation of signatures with signature policies.

idClient - Parameter that represents the client application identifier.

Returns:

an object that represents the generated signature.

Throws:

SigningException - If the method fails.

See Also:

Signer.sign(byte[], java.lang.String, java.lang.String, java.security.KeyStore.PrivateKeyEntry, java.util.Properties, boolean, java.lang.String, java.lang.String, java.lang.String)

coSign

public byte[] coSign(byte[] signature,
                     byte[] document,
                     java.lang.String algorithm,
                     java.security.KeyStore.PrivateKeyEntry privateKey,
                     java.util.Properties extraParams,
                     boolean includeTimestamp,
                     java.lang.String signatureForm,
                     java.lang.String signaturePolicyID,
                     java.lang.String idClient)
              throws SigningException

Method that generates a basic co-signature (signature with signers on parallel). This functionality is unsupported for PAdES (Baseline or not) signatures.

Specified by:

coSign in interface Signer

Parameters:

signature - Parameter that represents the original signature.

document - Parameter that represents the data used to generate the original signature.

algorithm - Parameter that represents the signature algorithm.

privateKey - Parameter that represents the private key of the signing certificate.

extraParams - Set of extra configuration parameters. The allowed parameters are:

• SignatureProperties.CADES_POLICY_QUALIFIER_PROP. This property is only allowed for CAdES (Baseline or not) signatures.
• SignatureProperties.XADES_CLAIMED_ROLE_PROP. This property is only allowed for XAdES (Baseline or not) signatures.
• SignatureProperties.XADES_POLICY_QUALIFIER_PROP. This property is only allowed for XAdES (Baseline or not) signatures.
• SignatureProperties.XADES_DATA_FORMAT_DESCRIPTION_PROP. This property is only allowed for XAdES (Baseline or not) signatures.
• SignatureProperties.XADES_DATA_FORMAT_MIME_PROP. This property is only allowed for XAdES (Baseline or not) signatures.
• SignatureProperties.XADES_DATA_FORMAT_ENCODING_PROP. This property is only allowed for XAdES (Baseline or not) signatures.
• SignatureProperties.PADES_CERTIFICATION_LEVEL. This property is only allowed for PAdES (Baseline or not) signatures.
• SignatureProperties.PADES_CONTACT_PROP. This property is only allowed for PAdES (Baseline or not) signatures.
• SignatureProperties.PADES_LOCATION_PROP. This property is only allowed for PAdES (Baseline or not) signatures.
• SignatureProperties.PADES_REASON_PROP. This property is only allowed for PAdES (Baseline or not) signatures.
• SignatureProperties.PADES_LOWER_LEFT_X. This property is only allowed for PAdES (Baseline or not) signatures.
• SignatureProperties.PADES_LOWER_LEFT_Y. This property is only allowed for PAdES (Baseline or not) signatures.
• SignatureProperties.PADES_UPPER_RIGHT_X. This property is only allowed for PAdES (Baseline or not) signatures.
• SignatureProperties.PADES_UPPER_RIGHT_Y. This property is only allowed for PAdES (Baseline or not) signatures.
• SignatureProperties.PADES_IMAGE. This property is only allowed for PAdES (Baseline or not) signatures.
• SignatureProperties.PADES_IMAGE_PAGE. This property is only allowed for PAdES (Baseline or not) signatures.

includeTimestamp - Parameter that indicates if the signature will include a timestamp (true) or not (false).

signatureForm - Parameter that represents the signature form. The allowed values for CAdES signature are:

• ISignatureFormatDetector.FORMAT_CADES_BES
• ISignatureFormatDetector.FORMAT_CADES_EPES

The allowed values for CAdES Baseline signature are:

• ISignatureFormatDetector.FORMAT_CADES_B_LEVEL

The allowed values for XAdES signature are:

• ISignatureFormatDetector.FORMAT_XADES_BES
• ISignatureFormatDetector.FORMAT_XADES_EPES

The allowed values for XAdES Baseline signature are:

• ISignatureFormatDetector.FORMAT_XADES_B_LEVEL

signaturePolicyID - Parameter that represents the identifier of the signature policy used for generate the signature with signature policies. The identifier must be defined on the properties file where to configure the validation and generation of signatures with signature policies.

idClient - Parameter that represents the client application identifier.

Returns:

an object that represents the generated co-signature.

Throws:

SigningException - If the method fails.

See Also:

Signer.coSign(byte[], byte[], java.lang.String, java.security.KeyStore.PrivateKeyEntry, java.util.Properties, boolean, java.lang.String, java.lang.String, java.lang.String)

counterSign

public byte[] counterSign(byte[] signature,
                          java.lang.String algorithm,
                          java.security.KeyStore.PrivateKeyEntry privateKey,
                          java.util.Properties extraParams,
                          boolean includeTimestamp,
                          java.lang.String signatureForm,
                          java.lang.String signaturePolicyID,
                          java.lang.String idClient)
                   throws SigningException

Method that generates a basic counter-signature (signature with signers on serial). This functionality is unsupported for PAdES (Baseline or not) signatures.

Specified by:

counterSign in interface Signer

Parameters:

signature - Parameter that represents the original signature.

algorithm - Parameter that represents the signature algorithm.

privateKey - Parameter that represents the private key of the signing certificate.

extraParams - Set of extra configuration parameters. The allowed parameters are:

• SignatureProperties.CADES_POLICY_QUALIFIER_PROP. This property is only allowed for CAdES (Baseline or not) signatures.
• SignatureProperties.XADES_CLAIMED_ROLE_PROP. This property is only allowed for XAdES (Baseline or not) signatures.
• SignatureProperties.XADES_POLICY_QUALIFIER_PROP. This property is only allowed for XAdES (Baseline or not) signatures.
• SignatureProperties.XADES_DATA_FORMAT_DESCRIPTION_PROP. This property is only allowed for XAdES (Baseline or not) signatures.
• SignatureProperties.XADES_DATA_FORMAT_MIME_PROP. This property is only allowed for XAdES (Baseline or not) signatures.
• SignatureProperties.XADES_DATA_FORMAT_ENCODING_PROP. This property is only allowed for XAdES (Baseline or not) signatures.
• SignatureProperties.PADES_CERTIFICATION_LEVEL. This property is only allowed for PAdES (Baseline or not) signatures.
• SignatureProperties.PADES_CONTACT_PROP. This property is only allowed for PAdES (Baseline or not) signatures.
• SignatureProperties.PADES_LOCATION_PROP. This property is only allowed for PAdES (Baseline or not) signatures.
• SignatureProperties.PADES_REASON_PROP. This property is only allowed for PAdES (Baseline or not) signatures.
• SignatureProperties.PADES_LOWER_LEFT_X. This property is only allowed for PAdES (Baseline or not) signatures.
• SignatureProperties.PADES_LOWER_LEFT_Y. This property is only allowed for PAdES (Baseline or not) signatures.
• SignatureProperties.PADES_UPPER_RIGHT_X. This property is only allowed for PAdES (Baseline or not) signatures.
• SignatureProperties.PADES_UPPER_RIGHT_Y. This property is only allowed for PAdES (Baseline or not) signatures.
• SignatureProperties.PADES_IMAGE. This property is only allowed for PAdES (Baseline or not) signatures.
• SignatureProperties.PADES_IMAGE_PAGE. This property is only allowed for PAdES (Baseline or not) signatures.

includeTimestamp - Parameter that indicates if the signature will include a timestamp (true) or not (false).

signatureForm - Parameter that represents the signature form. The allowed values for CAdES signature are:

• ISignatureFormatDetector.FORMAT_CADES_BES
• ISignatureFormatDetector.FORMAT_CADES_EPES

The allowed values for CAdES Baseline signature are:

• ISignatureFormatDetector.FORMAT_CADES_B_LEVEL

The allowed values for XAdES signature are:

• ISignatureFormatDetector.FORMAT_XADES_BES
• ISignatureFormatDetector.FORMAT_XADES_EPES

The allowed values for XAdES Baseline signature are:

• ISignatureFormatDetector.FORMAT_XADES_B_LEVEL

signaturePolicyID - Parameter that represents the identifier of the signature policy used for generate the signature with signature policies. The identifier must be defined on the properties file where to configure the validation and generation of signatures with signature policies.

idClient - Parameter that represents the client application identifier.

Returns:

an object that represents the generated counter-signature.

Throws:

SigningException - If the method fails.

See Also:

Signer.counterSign(byte[], java.lang.String, java.security.KeyStore.PrivateKeyEntry, java.util.Properties, boolean, java.lang.String, java.lang.String, java.lang.String)

sign

public byte[] sign(byte[] data,
                   java.lang.String algorithm,
                   java.lang.String signatureFormat,
                   java.security.KeyStore.PrivateKeyEntry privateKey,
                   java.util.Properties extraParams,
                   boolean includeTimestamp,
                   java.lang.String signatureForm,
                   java.lang.String signaturePolicyID)
            throws SigningException

Method that generates a basic signature.

Specified by:

sign in interface Signer

Parameters:

data - Parameter that represents the data to sign.

algorithm - Parameter that represents the signature algorithm.

signatureFormat - Parameter that represents the signing mode. The allowed values for a CAdES (Baseline or not) signature are:

• SignatureConstants.SIGN_MODE_EXPLICIT
• SignatureConstants.SIGN_MODE_IMPLICIT

The allowed values for a XAdES (Baseline or not) signature are:

• SignatureConstants.SIGN_FORMAT_XADES_DETACHED
• SignatureConstants.SIGN_FORMAT_XADES_EXTERNALLY_DETACHED
• SignatureConstants.SIGN_FORMAT_XADES_ENVELOPED
• SignatureConstants.SIGN_FORMAT_XADES_ENVELOPING

The allowed values for PAdES (Baseline or not) signature are:

• SignatureConstants.SIGN_MODE_IMPLICIT

privateKey - Parameter that represents the private key of the signing certificate.

extraParams - Set of extra configuration parameters. The allowed parameters are:

• SignatureProperties.CADES_POLICY_QUALIFIER_PROP. This property is only allowed for CAdES (Baseline or not) signatures.
• SignatureProperties.XADES_CLAIMED_ROLE_PROP. This property is only allowed for XAdES (Baseline or not) signatures.
• SignatureProperties.XADES_POLICY_QUALIFIER_PROP. This property is only allowed for XAdES (Baseline or not) signatures.
• SignatureProperties.XADES_DATA_FORMAT_DESCRIPTION_PROP. This property is only allowed for XAdES (Baseline or not) signatures.
• SignatureProperties.XADES_DATA_FORMAT_MIME_PROP. This property is only allowed for XAdES (Baseline or not) signatures.
• SignatureProperties.XADES_DATA_FORMAT_ENCODING_PROP. This property is only allowed for XAdES (Baseline or not) signatures.
• SignatureProperties.PADES_CERTIFICATION_LEVEL. This property is only allowed for PAdES (Baseline or not) signatures.
• SignatureProperties.PADES_CONTACT_PROP. This property is only allowed for PAdES (Baseline or not) signatures.
• SignatureProperties.PADES_LOCATION_PROP. This property is only allowed for PAdES (Baseline or not) signatures.
• SignatureProperties.PADES_REASON_PROP. This property is only allowed for PAdES (Baseline or not) signatures.
• SignatureProperties.PADES_LOWER_LEFT_X. This property is only allowed for PAdES (Baseline or not) signatures.
• SignatureProperties.PADES_LOWER_LEFT_Y. This property is only allowed for PAdES (Baseline or not) signatures.
• SignatureProperties.PADES_UPPER_RIGHT_X. This property is only allowed for PAdES (Baseline or not) signatures.
• SignatureProperties.PADES_UPPER_RIGHT_Y. This property is only allowed for PAdES (Baseline or not) signatures.
• SignatureProperties.PADES_IMAGE. This property is only allowed for PAdES (Baseline or not) signatures.
• SignatureProperties.PADES_IMAGE_PAGE. This property is only allowed for PAdES (Baseline or not) signatures.

includeTimestamp - Parameter that indicates if the signature will include a timestamp (true) or not (false).

signatureForm - Parameter that represents the signature form. The allowed values for CAdES signature are:

• ISignatureFormatDetector.FORMAT_CADES_BES
• ISignatureFormatDetector.FORMAT_CADES_EPES

The allowed values for CAdES Baseline signature are:

• ISignatureFormatDetector.FORMAT_CADES_B_LEVEL

The allowed values for XAdES signature are:

• ISignatureFormatDetector.FORMAT_XADES_BES
• ISignatureFormatDetector.FORMAT_XADES_EPES

The allowed values for XAdES Baseline signature are:

• ISignatureFormatDetector.FORMAT_XADES_B_LEVEL

The allowed values for PAdES signature are:

• ISignatureFormatDetector.FORMAT_PADES_BASIC
• ISignatureFormatDetector.FORMAT_PADES_BES
• ISignatureFormatDetector.FORMAT_PADES_EPES

The allowed values for PAdES Baseline signature are:

• ISignatureFormatDetector.FORMAT_PADES_B_LEVEL

signaturePolicyID - Parameter that represents the identifier of the signature policy used for generate the signature with signature policies. The identifier must be defined on the properties file where to configure the validation and generation of signatures with signature policies.

Returns:

an object that represents the generated signature.

Throws:

SigningException - If the method fails.

See Also:

Signer.sign(byte[], java.lang.String, java.lang.String, java.security.KeyStore.PrivateKeyEntry, java.util.Properties, boolean, java.lang.String, java.lang.String)

coSign

public byte[] coSign(byte[] signature,
                     byte[] document,
                     java.lang.String algorithm,
                     java.security.KeyStore.PrivateKeyEntry privateKey,
                     java.util.Properties extraParams,
                     boolean includeTimestamp,
                     java.lang.String signatureForm,
                     java.lang.String signaturePolicyID)
              throws SigningException

Method that generates a basic co-signature (signature with signers on parallel). This functionality is unsupported for PAdES (Baseline or not) signatures.

Specified by:

coSign in interface Signer

Parameters:

signature - Parameter that represents the original signature.

document - Parameter that represents the data used to generate the original signature.

algorithm - Parameter that represents the signature algorithm.

privateKey - Parameter that represents the private key of the signing certificate.

extraParams - Set of extra configuration parameters. The allowed parameters are:

• SignatureProperties.CADES_POLICY_QUALIFIER_PROP. This property is only allowed for CAdES (Baseline or not) signatures.
• SignatureProperties.XADES_CLAIMED_ROLE_PROP. This property is only allowed for XAdES (Baseline or not) signatures.
• SignatureProperties.XADES_POLICY_QUALIFIER_PROP. This property is only allowed for XAdES (Baseline or not) signatures.
• SignatureProperties.XADES_DATA_FORMAT_DESCRIPTION_PROP. This property is only allowed for XAdES (Baseline or not) signatures.
• SignatureProperties.XADES_DATA_FORMAT_MIME_PROP. This property is only allowed for XAdES (Baseline or not) signatures.
• SignatureProperties.XADES_DATA_FORMAT_ENCODING_PROP. This property is only allowed for XAdES (Baseline or not) signatures.
• SignatureProperties.PADES_CERTIFICATION_LEVEL. This property is only allowed for PAdES (Baseline or not) signatures.
• SignatureProperties.PADES_CONTACT_PROP. This property is only allowed for PAdES (Baseline or not) signatures.
• SignatureProperties.PADES_LOCATION_PROP. This property is only allowed for PAdES (Baseline or not) signatures.
• SignatureProperties.PADES_REASON_PROP. This property is only allowed for PAdES (Baseline or not) signatures.
• SignatureProperties.PADES_LOWER_LEFT_X. This property is only allowed for PAdES (Baseline or not) signatures.
• SignatureProperties.PADES_LOWER_LEFT_Y. This property is only allowed for PAdES (Baseline or not) signatures.
• SignatureProperties.PADES_UPPER_RIGHT_X. This property is only allowed for PAdES (Baseline or not) signatures.
• SignatureProperties.PADES_UPPER_RIGHT_Y. This property is only allowed for PAdES (Baseline or not) signatures.
• SignatureProperties.PADES_IMAGE. This property is only allowed for PAdES (Baseline or not) signatures.
• SignatureProperties.PADES_IMAGE_PAGE. This property is only allowed for PAdES (Baseline or not) signatures.

includeTimestamp - Parameter that indicates if the signature will include a timestamp (true) or not (false).

signatureForm - Parameter that represents the signature form. The allowed values for CAdES signature are:

• ISignatureFormatDetector.FORMAT_CADES_BES
• ISignatureFormatDetector.FORMAT_CADES_EPES

The allowed values for CAdES Baseline signature are:

• ISignatureFormatDetector.FORMAT_CADES_B_LEVEL

The allowed values for XAdES signature are:

• ISignatureFormatDetector.FORMAT_XADES_BES
• ISignatureFormatDetector.FORMAT_XADES_EPES

The allowed values for XAdES Baseline signature are:

• ISignatureFormatDetector.FORMAT_XADES_B_LEVEL

signaturePolicyID - Parameter that represents the identifier of the signature policy used for generate the signature with signature policies. The identifier must be defined on the properties file where to configure the validation and generation of signatures with signature policies.

Returns:

an object that represents the generated co-signature.

Throws:

SigningException - If the method fails.

See Also:

Signer.coSign(byte[], byte[], java.lang.String, java.security.KeyStore.PrivateKeyEntry, java.util.Properties, boolean, java.lang.String, java.lang.String)

counterSign

public byte[] counterSign(byte[] signature,
                          java.lang.String algorithm,
                          java.security.KeyStore.PrivateKeyEntry privateKey,
                          java.util.Properties extraParams,
                          boolean includeTimestamp,
                          java.lang.String signatureForm,
                          java.lang.String signaturePolicyID)
                   throws SigningException

Method that generates a basic counter-signature (signature with signers on serial). This functionality is unsupported for PAdES (Baseline or not) signatures.

Specified by:

counterSign in interface Signer

Parameters:

signature - Parameter that represents the original signature.

algorithm - Parameter that represents the signature algorithm.

privateKey - Parameter that represents the private key of the signing certificate.

extraParams - Set of extra configuration parameters. The allowed parameters are:

• SignatureProperties.CADES_POLICY_QUALIFIER_PROP. This property is only allowed for CAdES (Baseline or not) signatures.
• SignatureProperties.XADES_CLAIMED_ROLE_PROP. This property is only allowed for XAdES (Baseline or not) signatures.
• SignatureProperties.XADES_POLICY_QUALIFIER_PROP. This property is only allowed for XAdES (Baseline or not) signatures.
• SignatureProperties.XADES_DATA_FORMAT_DESCRIPTION_PROP. This property is only allowed for XAdES (Baseline or not) signatures.
• SignatureProperties.XADES_DATA_FORMAT_MIME_PROP. This property is only allowed for XAdES (Baseline or not) signatures.
• SignatureProperties.XADES_DATA_FORMAT_ENCODING_PROP. This property is only allowed for XAdES (Baseline or not) signatures.
• SignatureProperties.PADES_CERTIFICATION_LEVEL. This property is only allowed for PAdES (Baseline or not) signatures.
• SignatureProperties.PADES_CONTACT_PROP. This property is only allowed for PAdES (Baseline or not) signatures.
• SignatureProperties.PADES_LOCATION_PROP. This property is only allowed for PAdES (Baseline or not) signatures.
• SignatureProperties.PADES_REASON_PROP. This property is only allowed for PAdES (Baseline or not) signatures.
• SignatureProperties.PADES_LOWER_LEFT_X. This property is only allowed for PAdES (Baseline or not) signatures.
• SignatureProperties.PADES_LOWER_LEFT_Y. This property is only allowed for PAdES (Baseline or not) signatures.
• SignatureProperties.PADES_UPPER_RIGHT_X. This property is only allowed for PAdES (Baseline or not) signatures.
• SignatureProperties.PADES_UPPER_RIGHT_Y. This property is only allowed for PAdES (Baseline or not) signatures.
• SignatureProperties.PADES_IMAGE. This property is only allowed for PAdES (Baseline or not) signatures.
• SignatureProperties.PADES_IMAGE_PAGE. This property is only allowed for PAdES (Baseline or not) signatures.

includeTimestamp - Parameter that indicates if the signature will include a timestamp (true) or not (false).

signatureForm - Parameter that represents the signature form. The allowed values for CAdES signature are:

• ISignatureFormatDetector.FORMAT_CADES_BES
• ISignatureFormatDetector.FORMAT_CADES_EPES

The allowed values for CAdES Baseline signature are:

• ISignatureFormatDetector.FORMAT_CADES_B_LEVEL

The allowed values for XAdES signature are:

• ISignatureFormatDetector.FORMAT_XADES_BES
• ISignatureFormatDetector.FORMAT_XADES_EPES

The allowed values for XAdES Baseline signature are:

• ISignatureFormatDetector.FORMAT_XADES_B_LEVEL

signaturePolicyID - Parameter that represents the identifier of the signature policy used for generate the signature with signature policies. The identifier must be defined on the properties file where to configure the validation and generation of signatures with signature policies.

Returns:

an object that represents the generated counter-signature.

Throws:

SigningException - If the method fails.

See Also:

Signer.counterSign(byte[], java.lang.String, java.security.KeyStore.PrivateKeyEntry, java.util.Properties, boolean, java.lang.String, java.lang.String)

upgrade

public byte[] upgrade(byte[] signature,
                      java.util.List<java.security.cert.X509Certificate> listSigners,
                      java.lang.String idClient)
               throws SigningException

Method that upgrades a signature adding a timestamp to all of the signers indicated. If the list of signers is null or empty, the timestamp will be added to all of the signers of the signature. The timestamp will be added only to those signers that don't have a previous timestamp. If the signature has a PDF format this method will add a Document Time-stamp dictionary. If the signature has ASiC-S format the method will upgrade the CAdES or XAdES signature contained inside it.

Specified by:

upgrade in interface Signer

Parameters:

signature - Parameter that represents the signature to upgrade.

listSigners - Parameter that represents the list of signers of the signature to upgrade with a timestamp. Only for ASN.1 and XML signatures.

idClient - Parameter that represents the client application identifier.

Returns:

the upgraded signature.

Throws:

SigningException - If the method fails.

See Also:

Signer.upgrade(byte[], java.util.List, java.lang.String)

upgrade

public byte[] upgrade(byte[] signature,
                      java.util.List<java.security.cert.X509Certificate> listSigners)
               throws SigningException

Method that upgrades a signature adding a timestamp to all of the signers indicated. If the list of signers is null or empty, the timestamp will be added to all of the signers of the signature. The timestamp will be added only to those signers that don't have a previous timestamp. If the signature has a PDF format this method will add a Document Time-stamp dictionary. If the signature has ASiC-S format the method will upgrade the CAdES or XAdES signature contained inside it.

Specified by:

upgrade in interface Signer

Parameters:

signature - Parameter that represents the signature to upgrade.

listSigners - Parameter that represents the list of signers of the signature to upgrade with a timestamp. Only for ASN.1 and XML signatures.

Returns:

the upgraded signature.

Throws:

SigningException - If the method fails.

See Also:

Signer.upgrade(byte[], java.util.List)

verifySignature

public ValidationResult verifySignature(byte[] asicSSignature)

Method that validates the structure of an ASiC-S signature and the signers of the XML or ASN.1 signature contained inside it.

Parameters:

asicSSignature - Parameter that represents the XAdES signature.

Returns:

an object that contains the information about the validation result.

getSignedData

public OriginalSignedData getSignedData(byte[] asicSSignature)
                                 throws SigningException

Method that obtains the data originally signed from a signature.

Specified by:

getSignedData in interface Signer

Parameters:

asicSSignature - Parameter that represents the signature of which is to obtain the data.

Returns:

Information about data originally signed.

Throws:

SigningException - If the metod fails.

See Also:

Signer.getSignedData(byte[])