es.gob.afirma.signature.xades

Class XadesSigner

java.lang.Object

es.gob.afirma.signature.xades.XadesSigner

All Implemented Interfaces:

Signer

public final class XadesSigner
extends java.lang.Object
implements Signer

Class for create XAdES signatures.

Project:

Library for the integration with the services of @Firma, eVisor and TS@.

Version:

1.10, 18/04/2022.

Constructor Summary

Constructors

Constructor and Description
XadesSigner() Constructor method for the class XadesSigner.java.

Method Summary

Modifier and Type	Method and Description
byte[]	coSign(byte[] signature, byte[] document, java.lang.String algorithm, java.security.KeyStore.PrivateKeyEntry privateKey, java.util.Properties extraParams, boolean includeTimestamp, java.lang.String signatureForm, java.lang.String signaturePolicyID) Method that generates a basic co-signature (signature with signers on parallel).
byte[]	coSign(byte[] signature, byte[] document, java.lang.String algorithm, java.security.KeyStore.PrivateKeyEntry privateKey, java.util.Properties extraParams, boolean includeTimestamp, java.lang.String signatureForm, java.lang.String signaturePolicyID, java.lang.String idClient) Method that generates a basic co-signature (signature with signers on parallel).
byte[]	counterSign(byte[] signature, java.lang.String algorithm, java.security.KeyStore.PrivateKeyEntry privateKey, java.util.Properties optionalParams, boolean includeTimestamp, java.lang.String signatureForm, java.lang.String signaturePolicyID) Method that generates a basic counter-signature (signature with signers on serial).
byte[]	counterSign(byte[] signature, java.lang.String algorithm, java.security.KeyStore.PrivateKeyEntry privateKey, java.util.Properties optionalParams, boolean includeTimestamp, java.lang.String signatureForm, java.lang.String signaturePolicyID, java.lang.String idClient) Method that generates a basic counter-signature (signature with signers on serial).
OriginalSignedData	getSignedData(byte[] data) Method that obtains the data originally signed from a signature.
byte[]	sign(byte[] data, java.lang.String algorithm, java.lang.String signatureFormat, java.security.KeyStore.PrivateKeyEntry privateKey, java.util.Properties extraParams, boolean includeTimestamp, java.lang.String signatureForm, java.lang.String signaturePolicyID) Method that generates a basic signature.
byte[]	sign(byte[] data, java.lang.String algorithm, java.lang.String signatureFormat, java.security.KeyStore.PrivateKeyEntry privateKey, java.util.Properties extraParams, boolean includeTimestamp, java.lang.String signatureForm, java.lang.String signaturePolicyID, java.lang.String idClient) Method that generates a basic signature.
byte[]	upgrade(byte[] signature, java.util.List<java.security.cert.X509Certificate> listSignersToUpdate) Method that upgrades a signature adding a timestamp to all of the signers indicated.
byte[]	upgrade(byte[] signature, java.util.List<java.security.cert.X509Certificate> listSignersToUpdate, java.lang.String idClient) Method that upgrades a signature adding a timestamp to all of the signers indicated.
SignerValidationResult	validateSigner(java.lang.String signingMode, XAdESSignerInfo signerInfo, ValidationResult validationResult, java.lang.String idClient, java.lang.String signerFormat, boolean isCounterSignature) Method that validates a signer/counter-signer of a XML signature.
ValidationResult	verifySignature(byte[] xmlDocument) Method that validates the signers of a XAdES signature.
ValidationResult	verifySignature(byte[] xmlDocument, java.lang.String idClient) Method that validates a signed XML document.

Methods inherited from class java.lang.Object

equals, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

XadesSigner

public XadesSigner()

Constructor method for the class XadesSigner.java.

Method Detail

verifySignature

public ValidationResult verifySignature(byte[] xmlDocument)

Method that validates the signers of a XAdES signature.

Parameters:

xmlDocument - Parameter that represents the XAdES signature.

Returns:

an object that contains the information about the validation result.

counterSign

public byte[] counterSign(byte[] signature,
                          java.lang.String algorithm,
                          java.security.KeyStore.PrivateKeyEntry privateKey,
                          java.util.Properties optionalParams,
                          boolean includeTimestamp,
                          java.lang.String signatureForm,
                          java.lang.String signaturePolicyID,
                          java.lang.String idClient)
                   throws SigningException

Method that generates a basic counter-signature (signature with signers on serial). This functionality is unsupported for PAdES (Baseline or not) signatures.

Specified by:

counterSign in interface Signer

Parameters:

signature - Parameter that represents the original signature.

algorithm - Parameter that represents the signature algorithm.

privateKey - Parameter that represents the private key of the signing certificate.

optionalParams - Set of extra configuration parameters. The allowed parameters are:

• SignatureProperties.CADES_POLICY_QUALIFIER_PROP. This property is only allowed for CAdES (Baseline or not) signatures.
• SignatureProperties.XADES_CLAIMED_ROLE_PROP. This property is only allowed for XAdES (Baseline or not) signatures.
• SignatureProperties.XADES_POLICY_QUALIFIER_PROP. This property is only allowed for XAdES (Baseline or not) signatures.
• SignatureProperties.XADES_DATA_FORMAT_DESCRIPTION_PROP. This property is only allowed for XAdES (Baseline or not) signatures.
• SignatureProperties.XADES_DATA_FORMAT_MIME_PROP. This property is only allowed for XAdES (Baseline or not) signatures.
• SignatureProperties.XADES_DATA_FORMAT_ENCODING_PROP. This property is only allowed for XAdES (Baseline or not) signatures.
• SignatureProperties.PADES_CERTIFICATION_LEVEL. This property is only allowed for PAdES (Baseline or not) signatures.
• SignatureProperties.PADES_CONTACT_PROP. This property is only allowed for PAdES (Baseline or not) signatures.
• SignatureProperties.PADES_LOCATION_PROP. This property is only allowed for PAdES (Baseline or not) signatures.
• SignatureProperties.PADES_REASON_PROP. This property is only allowed for PAdES (Baseline or not) signatures.
• SignatureProperties.PADES_LOWER_LEFT_X. This property is only allowed for PAdES (Baseline or not) signatures.
• SignatureProperties.PADES_LOWER_LEFT_Y. This property is only allowed for PAdES (Baseline or not) signatures.
• SignatureProperties.PADES_UPPER_RIGHT_X. This property is only allowed for PAdES (Baseline or not) signatures.
• SignatureProperties.PADES_UPPER_RIGHT_Y. This property is only allowed for PAdES (Baseline or not) signatures.
• SignatureProperties.PADES_IMAGE. This property is only allowed for PAdES (Baseline or not) signatures.
• SignatureProperties.PADES_IMAGE_PAGE. This property is only allowed for PAdES (Baseline or not) signatures.

includeTimestamp - Parameter that indicates if the signature will include a timestamp (true) or not (false).

signatureForm - Parameter that represents the signature form. The allowed values for CAdES signature are:

• ISignatureFormatDetector.FORMAT_CADES_BES
• ISignatureFormatDetector.FORMAT_CADES_EPES

The allowed values for CAdES Baseline signature are:

• ISignatureFormatDetector.FORMAT_CADES_B_LEVEL

The allowed values for XAdES signature are:

• ISignatureFormatDetector.FORMAT_XADES_BES
• ISignatureFormatDetector.FORMAT_XADES_EPES

The allowed values for XAdES Baseline signature are:

• ISignatureFormatDetector.FORMAT_XADES_B_LEVEL

signaturePolicyID - Parameter that represents the identifier of the signature policy used for generate the signature with signature policies. The identifier must be defined on the properties file where to configure the validation and generation of signatures with signature policies.

idClient - Parameter that represents the client application identifier.

Returns:

an object that represents the generated counter-signature.

Throws:

SigningException - If the method fails.

See Also:

Signer.counterSign(byte[], java.lang.String, java.security.KeyStore.PrivateKeyEntry, java.util.Properties, boolean, java.lang.String, java.lang.String, java.lang.String)

counterSign

public byte[] counterSign(byte[] signature,
                          java.lang.String algorithm,
                          java.security.KeyStore.PrivateKeyEntry privateKey,
                          java.util.Properties optionalParams,
                          boolean includeTimestamp,
                          java.lang.String signatureForm,
                          java.lang.String signaturePolicyID)
                   throws SigningException

Method that generates a basic counter-signature (signature with signers on serial). This functionality is unsupported for PAdES (Baseline or not) signatures.

Specified by:

counterSign in interface Signer

Parameters:

signature - Parameter that represents the original signature.

algorithm - Parameter that represents the signature algorithm.

privateKey - Parameter that represents the private key of the signing certificate.

optionalParams - Set of extra configuration parameters. The allowed parameters are:

• SignatureProperties.CADES_POLICY_QUALIFIER_PROP. This property is only allowed for CAdES (Baseline or not) signatures.
• SignatureProperties.XADES_CLAIMED_ROLE_PROP. This property is only allowed for XAdES (Baseline or not) signatures.
• SignatureProperties.XADES_POLICY_QUALIFIER_PROP. This property is only allowed for XAdES (Baseline or not) signatures.
• SignatureProperties.XADES_DATA_FORMAT_DESCRIPTION_PROP. This property is only allowed for XAdES (Baseline or not) signatures.
• SignatureProperties.XADES_DATA_FORMAT_MIME_PROP. This property is only allowed for XAdES (Baseline or not) signatures.
• SignatureProperties.XADES_DATA_FORMAT_ENCODING_PROP. This property is only allowed for XAdES (Baseline or not) signatures.
• SignatureProperties.PADES_CERTIFICATION_LEVEL. This property is only allowed for PAdES (Baseline or not) signatures.
• SignatureProperties.PADES_CONTACT_PROP. This property is only allowed for PAdES (Baseline or not) signatures.
• SignatureProperties.PADES_LOCATION_PROP. This property is only allowed for PAdES (Baseline or not) signatures.
• SignatureProperties.PADES_REASON_PROP. This property is only allowed for PAdES (Baseline or not) signatures.
• SignatureProperties.PADES_LOWER_LEFT_X. This property is only allowed for PAdES (Baseline or not) signatures.
• SignatureProperties.PADES_LOWER_LEFT_Y. This property is only allowed for PAdES (Baseline or not) signatures.
• SignatureProperties.PADES_UPPER_RIGHT_X. This property is only allowed for PAdES (Baseline or not) signatures.
• SignatureProperties.PADES_UPPER_RIGHT_Y. This property is only allowed for PAdES (Baseline or not) signatures.
• SignatureProperties.PADES_IMAGE. This property is only allowed for PAdES (Baseline or not) signatures.
• SignatureProperties.PADES_IMAGE_PAGE. This property is only allowed for PAdES (Baseline or not) signatures.

includeTimestamp - Parameter that indicates if the signature will include a timestamp (true) or not (false).

signatureForm - Parameter that represents the signature form. The allowed values for CAdES signature are:

• ISignatureFormatDetector.FORMAT_CADES_BES
• ISignatureFormatDetector.FORMAT_CADES_EPES

The allowed values for CAdES Baseline signature are:

• ISignatureFormatDetector.FORMAT_CADES_B_LEVEL

The allowed values for XAdES signature are:

• ISignatureFormatDetector.FORMAT_XADES_BES
• ISignatureFormatDetector.FORMAT_XADES_EPES

The allowed values for XAdES Baseline signature are:

• ISignatureFormatDetector.FORMAT_XADES_B_LEVEL

signaturePolicyID - Parameter that represents the identifier of the signature policy used for generate the signature with signature policies. The identifier must be defined on the properties file where to configure the validation and generation of signatures with signature policies.

Returns:

an object that represents the generated counter-signature.

Throws:

SigningException - If the method fails.

See Also:

Signer.counterSign(byte[], java.lang.String, java.security.KeyStore.PrivateKeyEntry, java.util.Properties, boolean, java.lang.String, java.lang.String)

upgrade

public byte[] upgrade(byte[] signature,
                      java.util.List<java.security.cert.X509Certificate> listSignersToUpdate,
                      java.lang.String idClient)
               throws SigningException

Method that upgrades a signature adding a timestamp to all of the signers indicated. If the list of signers is null or empty, the timestamp will be added to all of the signers of the signature. The timestamp will be added only to those signers that don't have a previous timestamp. If the signature has a PDF format this method will add a Document Time-stamp dictionary. If the signature has ASiC-S format the method will upgrade the CAdES or XAdES signature contained inside it.

Specified by:

upgrade in interface Signer

Parameters:

signature - Parameter that represents the signature to upgrade.

listSignersToUpdate - Parameter that represents the list of signers of the signature to upgrade with a timestamp. Only for ASN.1 and XML signatures.

idClient - Parameter that represents the client application identifier.

Returns:

the upgraded signature.

Throws:

SigningException - If the method fails.

See Also:

Signer.upgrade(byte[], java.util.List, java.lang.String)

upgrade

public byte[] upgrade(byte[] signature,
                      java.util.List<java.security.cert.X509Certificate> listSignersToUpdate)
               throws SigningException

Method that upgrades a signature adding a timestamp to all of the signers indicated. If the list of signers is null or empty, the timestamp will be added to all of the signers of the signature. The timestamp will be added only to those signers that don't have a previous timestamp. If the signature has a PDF format this method will add a Document Time-stamp dictionary. If the signature has ASiC-S format the method will upgrade the CAdES or XAdES signature contained inside it.

Specified by:

upgrade in interface Signer

Parameters:

signature - Parameter that represents the signature to upgrade.

listSignersToUpdate - Parameter that represents the list of signers of the signature to upgrade with a timestamp. Only for ASN.1 and XML signatures.

Returns:

the upgraded signature.

Throws:

SigningException - If the method fails.

See Also:

Signer.upgrade(byte[], java.util.List)

sign

public byte[] sign(byte[] data,
                   java.lang.String algorithm,
                   java.lang.String signatureFormat,
                   java.security.KeyStore.PrivateKeyEntry privateKey,
                   java.util.Properties extraParams,
                   boolean includeTimestamp,
                   java.lang.String signatureForm,
                   java.lang.String signaturePolicyID,
                   java.lang.String idClient)
            throws SigningException

Method that generates a basic signature.

Specified by:

sign in interface Signer

Parameters:

data - Parameter that represents the data to sign.

algorithm - Parameter that represents the signature algorithm.

signatureFormat - Parameter that represents the signing mode. The allowed values for a CAdES (Baseline or not) signature are:

• SignatureConstants.SIGN_MODE_EXPLICIT
• SignatureConstants.SIGN_MODE_IMPLICIT

The allowed values for a XAdES (Baseline or not) signature are:

• SignatureConstants.SIGN_FORMAT_XADES_DETACHED
• SignatureConstants.SIGN_FORMAT_XADES_EXTERNALLY_DETACHED
• SignatureConstants.SIGN_FORMAT_XADES_ENVELOPED
• SignatureConstants.SIGN_FORMAT_XADES_ENVELOPING

The allowed values for PAdES (Baseline or not) signature are:

• SignatureConstants.SIGN_MODE_IMPLICIT

privateKey - Parameter that represents the private key of the signing certificate.

extraParams - Set of extra configuration parameters. The allowed parameters are:

• SignatureProperties.CADES_POLICY_QUALIFIER_PROP. This property is only allowed for CAdES (Baseline or not) signatures.
• SignatureProperties.XADES_CLAIMED_ROLE_PROP. This property is only allowed for XAdES (Baseline or not) signatures.
• SignatureProperties.XADES_POLICY_QUALIFIER_PROP. This property is only allowed for XAdES (Baseline or not) signatures.
• SignatureProperties.XADES_DATA_FORMAT_DESCRIPTION_PROP. This property is only allowed for XAdES (Baseline or not) signatures.
• SignatureProperties.XADES_DATA_FORMAT_MIME_PROP. This property is only allowed for XAdES (Baseline or not) signatures.
• SignatureProperties.XADES_DATA_FORMAT_ENCODING_PROP. This property is only allowed for XAdES (Baseline or not) signatures.
• SignatureProperties.PADES_CERTIFICATION_LEVEL. This property is only allowed for PAdES (Baseline or not) signatures.
• SignatureProperties.PADES_CONTACT_PROP. This property is only allowed for PAdES (Baseline or not) signatures.
• SignatureProperties.PADES_LOCATION_PROP. This property is only allowed for PAdES (Baseline or not) signatures.
• SignatureProperties.PADES_REASON_PROP. This property is only allowed for PAdES (Baseline or not) signatures.
• SignatureProperties.PADES_LOWER_LEFT_X. This property is only allowed for PAdES (Baseline or not) signatures.
• SignatureProperties.PADES_LOWER_LEFT_Y. This property is only allowed for PAdES (Baseline or not) signatures.
• SignatureProperties.PADES_UPPER_RIGHT_X. This property is only allowed for PAdES (Baseline or not) signatures.
• SignatureProperties.PADES_UPPER_RIGHT_Y. This property is only allowed for PAdES (Baseline or not) signatures.
• SignatureProperties.PADES_IMAGE. This property is only allowed for PAdES (Baseline or not) signatures.
• SignatureProperties.PADES_IMAGE_PAGE. This property is only allowed for PAdES (Baseline or not) signatures.

includeTimestamp - Parameter that indicates if the signature will include a timestamp (true) or not (false).

signatureForm - Parameter that represents the signature form. The allowed values for CAdES signature are:

• ISignatureFormatDetector.FORMAT_CADES_BES
• ISignatureFormatDetector.FORMAT_CADES_EPES

The allowed values for CAdES Baseline signature are:

• ISignatureFormatDetector.FORMAT_CADES_B_LEVEL

The allowed values for XAdES signature are:

• ISignatureFormatDetector.FORMAT_XADES_BES
• ISignatureFormatDetector.FORMAT_XADES_EPES

The allowed values for XAdES Baseline signature are:

• ISignatureFormatDetector.FORMAT_XADES_B_LEVEL

The allowed values for PAdES signature are:

• ISignatureFormatDetector.FORMAT_PADES_BASIC
• ISignatureFormatDetector.FORMAT_PADES_BES
• ISignatureFormatDetector.FORMAT_PADES_EPES

The allowed values for PAdES Baseline signature are:

• ISignatureFormatDetector.FORMAT_PADES_B_LEVEL

signaturePolicyID - Parameter that represents the identifier of the signature policy used for generate the signature with signature policies. The identifier must be defined on the properties file where to configure the validation and generation of signatures with signature policies.

idClient - Parameter that represents the client application identifier.

Returns:

an object that represents the generated signature.

Throws:

SigningException - If the method fails.

See Also:

Signer.sign(byte[], java.lang.String, java.lang.String, java.security.KeyStore.PrivateKeyEntry, java.util.Properties, boolean, java.lang.String, java.lang.String, java.lang.String)

sign

public byte[] sign(byte[] data,
                   java.lang.String algorithm,
                   java.lang.String signatureFormat,
                   java.security.KeyStore.PrivateKeyEntry privateKey,
                   java.util.Properties extraParams,
                   boolean includeTimestamp,
                   java.lang.String signatureForm,
                   java.lang.String signaturePolicyID)
            throws SigningException

Method that generates a basic signature.

Specified by:

sign in interface Signer

Parameters:

data - Parameter that represents the data to sign.

algorithm - Parameter that represents the signature algorithm.

signatureFormat - Parameter that represents the signing mode. The allowed values for a CAdES (Baseline or not) signature are:

• SignatureConstants.SIGN_MODE_EXPLICIT
• SignatureConstants.SIGN_MODE_IMPLICIT

The allowed values for a XAdES (Baseline or not) signature are:

• SignatureConstants.SIGN_FORMAT_XADES_DETACHED
• SignatureConstants.SIGN_FORMAT_XADES_EXTERNALLY_DETACHED
• SignatureConstants.SIGN_FORMAT_XADES_ENVELOPED
• SignatureConstants.SIGN_FORMAT_XADES_ENVELOPING

The allowed values for PAdES (Baseline or not) signature are:

• SignatureConstants.SIGN_MODE_IMPLICIT

privateKey - Parameter that represents the private key of the signing certificate.

extraParams - Set of extra configuration parameters. The allowed parameters are:

• SignatureProperties.CADES_POLICY_QUALIFIER_PROP. This property is only allowed for CAdES (Baseline or not) signatures.
• SignatureProperties.XADES_CLAIMED_ROLE_PROP. This property is only allowed for XAdES (Baseline or not) signatures.
• SignatureProperties.XADES_POLICY_QUALIFIER_PROP. This property is only allowed for XAdES (Baseline or not) signatures.
• SignatureProperties.XADES_DATA_FORMAT_DESCRIPTION_PROP. This property is only allowed for XAdES (Baseline or not) signatures.
• SignatureProperties.XADES_DATA_FORMAT_MIME_PROP. This property is only allowed for XAdES (Baseline or not) signatures.
• SignatureProperties.XADES_DATA_FORMAT_ENCODING_PROP. This property is only allowed for XAdES (Baseline or not) signatures.
• SignatureProperties.PADES_CERTIFICATION_LEVEL. This property is only allowed for PAdES (Baseline or not) signatures.
• SignatureProperties.PADES_CONTACT_PROP. This property is only allowed for PAdES (Baseline or not) signatures.
• SignatureProperties.PADES_LOCATION_PROP. This property is only allowed for PAdES (Baseline or not) signatures.
• SignatureProperties.PADES_REASON_PROP. This property is only allowed for PAdES (Baseline or not) signatures.
• SignatureProperties.PADES_LOWER_LEFT_X. This property is only allowed for PAdES (Baseline or not) signatures.
• SignatureProperties.PADES_LOWER_LEFT_Y. This property is only allowed for PAdES (Baseline or not) signatures.
• SignatureProperties.PADES_UPPER_RIGHT_X. This property is only allowed for PAdES (Baseline or not) signatures.
• SignatureProperties.PADES_UPPER_RIGHT_Y. This property is only allowed for PAdES (Baseline or not) signatures.
• SignatureProperties.PADES_IMAGE. This property is only allowed for PAdES (Baseline or not) signatures.
• SignatureProperties.PADES_IMAGE_PAGE. This property is only allowed for PAdES (Baseline or not) signatures.

includeTimestamp - Parameter that indicates if the signature will include a timestamp (true) or not (false).

signatureForm - Parameter that represents the signature form. The allowed values for CAdES signature are:

• ISignatureFormatDetector.FORMAT_CADES_BES
• ISignatureFormatDetector.FORMAT_CADES_EPES

The allowed values for CAdES Baseline signature are:

• ISignatureFormatDetector.FORMAT_CADES_B_LEVEL

The allowed values for XAdES signature are:

• ISignatureFormatDetector.FORMAT_XADES_BES
• ISignatureFormatDetector.FORMAT_XADES_EPES

The allowed values for XAdES Baseline signature are:

• ISignatureFormatDetector.FORMAT_XADES_B_LEVEL

The allowed values for PAdES signature are:

• ISignatureFormatDetector.FORMAT_PADES_BASIC
• ISignatureFormatDetector.FORMAT_PADES_BES
• ISignatureFormatDetector.FORMAT_PADES_EPES

The allowed values for PAdES Baseline signature are:

• ISignatureFormatDetector.FORMAT_PADES_B_LEVEL

signaturePolicyID - Parameter that represents the identifier of the signature policy used for generate the signature with signature policies. The identifier must be defined on the properties file where to configure the validation and generation of signatures with signature policies.

Returns:

an object that represents the generated signature.

Throws:

SigningException - If the method fails.

See Also:

Signer.sign(byte[], java.lang.String, java.lang.String, java.security.KeyStore.PrivateKeyEntry, java.util.Properties, boolean, java.lang.String, java.lang.String)

coSign

public byte[] coSign(byte[] signature,
                     byte[] document,
                     java.lang.String algorithm,
                     java.security.KeyStore.PrivateKeyEntry privateKey,
                     java.util.Properties extraParams,
                     boolean includeTimestamp,
                     java.lang.String signatureForm,
                     java.lang.String signaturePolicyID,
                     java.lang.String idClient)
              throws SigningException

Method that generates a basic co-signature (signature with signers on parallel). This functionality is unsupported for PAdES (Baseline or not) signatures.

Specified by:

coSign in interface Signer

Parameters:

signature - Parameter that represents the original signature.

document - Parameter that represents the data used to generate the original signature.

algorithm - Parameter that represents the signature algorithm.

privateKey - Parameter that represents the private key of the signing certificate.

extraParams - Set of extra configuration parameters. The allowed parameters are:

• SignatureProperties.CADES_POLICY_QUALIFIER_PROP. This property is only allowed for CAdES (Baseline or not) signatures.
• SignatureProperties.XADES_CLAIMED_ROLE_PROP. This property is only allowed for XAdES (Baseline or not) signatures.
• SignatureProperties.XADES_POLICY_QUALIFIER_PROP. This property is only allowed for XAdES (Baseline or not) signatures.
• SignatureProperties.XADES_DATA_FORMAT_DESCRIPTION_PROP. This property is only allowed for XAdES (Baseline or not) signatures.
• SignatureProperties.XADES_DATA_FORMAT_MIME_PROP. This property is only allowed for XAdES (Baseline or not) signatures.
• SignatureProperties.XADES_DATA_FORMAT_ENCODING_PROP. This property is only allowed for XAdES (Baseline or not) signatures.
• SignatureProperties.PADES_CERTIFICATION_LEVEL. This property is only allowed for PAdES (Baseline or not) signatures.
• SignatureProperties.PADES_CONTACT_PROP. This property is only allowed for PAdES (Baseline or not) signatures.
• SignatureProperties.PADES_LOCATION_PROP. This property is only allowed for PAdES (Baseline or not) signatures.
• SignatureProperties.PADES_REASON_PROP. This property is only allowed for PAdES (Baseline or not) signatures.
• SignatureProperties.PADES_LOWER_LEFT_X. This property is only allowed for PAdES (Baseline or not) signatures.
• SignatureProperties.PADES_LOWER_LEFT_Y. This property is only allowed for PAdES (Baseline or not) signatures.
• SignatureProperties.PADES_UPPER_RIGHT_X. This property is only allowed for PAdES (Baseline or not) signatures.
• SignatureProperties.PADES_UPPER_RIGHT_Y. This property is only allowed for PAdES (Baseline or not) signatures.
• SignatureProperties.PADES_IMAGE. This property is only allowed for PAdES (Baseline or not) signatures.
• SignatureProperties.PADES_IMAGE_PAGE. This property is only allowed for PAdES (Baseline or not) signatures.

includeTimestamp - Parameter that indicates if the signature will include a timestamp (true) or not (false).

signatureForm - Parameter that represents the signature form. The allowed values for CAdES signature are:

• ISignatureFormatDetector.FORMAT_CADES_BES
• ISignatureFormatDetector.FORMAT_CADES_EPES

The allowed values for CAdES Baseline signature are:

• ISignatureFormatDetector.FORMAT_CADES_B_LEVEL

The allowed values for XAdES signature are:

• ISignatureFormatDetector.FORMAT_XADES_BES
• ISignatureFormatDetector.FORMAT_XADES_EPES

The allowed values for XAdES Baseline signature are:

• ISignatureFormatDetector.FORMAT_XADES_B_LEVEL

signaturePolicyID - Parameter that represents the identifier of the signature policy used for generate the signature with signature policies. The identifier must be defined on the properties file where to configure the validation and generation of signatures with signature policies.

idClient - Parameter that represents the client application identifier.

Returns:

an object that represents the generated co-signature.

Throws:

SigningException - If the method fails.

See Also:

Signer.coSign(byte[], byte[], java.lang.String, java.security.KeyStore.PrivateKeyEntry, java.util.Properties, boolean, java.lang.String, java.lang.String, java.lang.String)

coSign

public byte[] coSign(byte[] signature,
                     byte[] document,
                     java.lang.String algorithm,
                     java.security.KeyStore.PrivateKeyEntry privateKey,
                     java.util.Properties extraParams,
                     boolean includeTimestamp,
                     java.lang.String signatureForm,
                     java.lang.String signaturePolicyID)
              throws SigningException

Method that generates a basic co-signature (signature with signers on parallel). This functionality is unsupported for PAdES (Baseline or not) signatures.

Specified by:

coSign in interface Signer

Parameters:

signature - Parameter that represents the original signature.

document - Parameter that represents the data used to generate the original signature.

algorithm - Parameter that represents the signature algorithm.

privateKey - Parameter that represents the private key of the signing certificate.

extraParams - Set of extra configuration parameters. The allowed parameters are:

• SignatureProperties.CADES_POLICY_QUALIFIER_PROP. This property is only allowed for CAdES (Baseline or not) signatures.
• SignatureProperties.XADES_CLAIMED_ROLE_PROP. This property is only allowed for XAdES (Baseline or not) signatures.
• SignatureProperties.XADES_POLICY_QUALIFIER_PROP. This property is only allowed for XAdES (Baseline or not) signatures.
• SignatureProperties.XADES_DATA_FORMAT_DESCRIPTION_PROP. This property is only allowed for XAdES (Baseline or not) signatures.
• SignatureProperties.XADES_DATA_FORMAT_MIME_PROP. This property is only allowed for XAdES (Baseline or not) signatures.
• SignatureProperties.XADES_DATA_FORMAT_ENCODING_PROP. This property is only allowed for XAdES (Baseline or not) signatures.
• SignatureProperties.PADES_CERTIFICATION_LEVEL. This property is only allowed for PAdES (Baseline or not) signatures.
• SignatureProperties.PADES_CONTACT_PROP. This property is only allowed for PAdES (Baseline or not) signatures.
• SignatureProperties.PADES_LOCATION_PROP. This property is only allowed for PAdES (Baseline or not) signatures.
• SignatureProperties.PADES_REASON_PROP. This property is only allowed for PAdES (Baseline or not) signatures.
• SignatureProperties.PADES_LOWER_LEFT_X. This property is only allowed for PAdES (Baseline or not) signatures.
• SignatureProperties.PADES_LOWER_LEFT_Y. This property is only allowed for PAdES (Baseline or not) signatures.
• SignatureProperties.PADES_UPPER_RIGHT_X. This property is only allowed for PAdES (Baseline or not) signatures.
• SignatureProperties.PADES_UPPER_RIGHT_Y. This property is only allowed for PAdES (Baseline or not) signatures.
• SignatureProperties.PADES_IMAGE. This property is only allowed for PAdES (Baseline or not) signatures.
• SignatureProperties.PADES_IMAGE_PAGE. This property is only allowed for PAdES (Baseline or not) signatures.

includeTimestamp - Parameter that indicates if the signature will include a timestamp (true) or not (false).

signatureForm - Parameter that represents the signature form. The allowed values for CAdES signature are:

• ISignatureFormatDetector.FORMAT_CADES_BES
• ISignatureFormatDetector.FORMAT_CADES_EPES

The allowed values for CAdES Baseline signature are:

• ISignatureFormatDetector.FORMAT_CADES_B_LEVEL

The allowed values for XAdES signature are:

• ISignatureFormatDetector.FORMAT_XADES_BES
• ISignatureFormatDetector.FORMAT_XADES_EPES

The allowed values for XAdES Baseline signature are:

• ISignatureFormatDetector.FORMAT_XADES_B_LEVEL

signaturePolicyID - Parameter that represents the identifier of the signature policy used for generate the signature with signature policies. The identifier must be defined on the properties file where to configure the validation and generation of signatures with signature policies.

Returns:

an object that represents the generated co-signature.

Throws:

SigningException - If the method fails.

See Also:

Signer.coSign(byte[], byte[], java.lang.String, java.security.KeyStore.PrivateKeyEntry, java.util.Properties, boolean, java.lang.String, java.lang.String)

getSignedData

public OriginalSignedData getSignedData(byte[] data)
                                 throws SigningException

Description copied from interface: Signer

Method that obtains the data originally signed from a signature.

Specified by:

getSignedData in interface Signer

Parameters:

data - Parameter that represents the signature of which is to obtain the data.

Returns:

Information about data originally signed.

Throws:

SigningException - If the metod fails.

verifySignature

public ValidationResult verifySignature(byte[] xmlDocument,
                                        java.lang.String idClient)

Method that validates a signed XML document.

Parameters:

xmlDocument - Parameter that represents the signed XML document.

idClient - Parameter that represents the client application identifier.

Returns:

an object that contains information about the validation of the signed XML document, including all the signers and counter-signers contained inside it.

validateSigner

public SignerValidationResult validateSigner(java.lang.String signingMode,
                                             XAdESSignerInfo signerInfo,
                                             ValidationResult validationResult,
                                             java.lang.String idClient,
                                             java.lang.String signerFormat,
                                             boolean isCounterSignature)

Method that validates a signer/counter-signer of a XML signature.

Parameters:

signingMode - Parameter that represents the signing mode of the signed XML document. The possible values are:

• IUtilsSignature.DETACHED_SIGNATURE_MODE
• IUtilsSignature##ENVELOPED_SIGNATURE_MODE
• IUtilsSignature##ENVELOPING_SIGNATURE_MODE

signerInfo - Parameter that represents the information about the signer.

validationResult - Parameter that represents the information about the validation of the signed XML document.

idClient - Parameter that represents the client application identifier.

signerFormat - Parameter that represents the format associated to the signer/counter-signer.

isCounterSignature - Parameter that indicates if the element to validate is a signer (false) or a counter-signer (true).

Returns:

an object that represents the validation information about the signer/counter-signer.