Examples with DigestMethod javax.xml.crypto.dsig.DigestMethod used on opensource projects

Example 1 with DigestMethod

use of javax.xml.crypto.dsig.DigestMethod in project poi by apache.

the class SignatureFacet method newReference.

public static Reference newReference(String uri, List<Transform> transforms, String type, String id, byte[] digestValue, SignatureConfig signatureConfig) throws XMLSignatureException {
    // the references appear in the package signature or the package object
    // so we can use the default digest algorithm
    String digestMethodUri = signatureConfig.getDigestMethodUri();
    XMLSignatureFactory sigFac = signatureConfig.getSignatureFactory();
    DigestMethod digestMethod;
    try {
        digestMethod = sigFac.newDigestMethod(digestMethodUri, null);
    } catch (GeneralSecurityException e) {
        throw new XMLSignatureException("unknown digest method uri: " + digestMethodUri, e);
    }
    Reference reference;
    if (digestValue == null) {
        reference = sigFac.newReference(uri, digestMethod, transforms, type, id);
    } else {
        reference = sigFac.newReference(uri, digestMethod, transforms, type, id, digestValue);
    }
    brokenJvmWorkaround(reference);
    return reference;
}

Example 2 with DigestMethod

use of javax.xml.crypto.dsig.DigestMethod in project poi by apache.

the class SignatureFacet method brokenJvmWorkaround.

// helper method ... will be removed soon
public static void brokenJvmWorkaround(final Reference reference) {
    final DigestMethod digestMethod = reference.getDigestMethod();
    final String digestMethodUri = digestMethod.getAlgorithm();
    final Provider bcProv = Security.getProvider("BC");
    if (bcProv != null && !DigestMethod.SHA1.equals(digestMethodUri)) {
        // workaround for https://bugzilla.redhat.com/show_bug.cgi?id=1155012
        // overwrite standard message digest, if a digest <> SHA1 is used
        AccessController.doPrivileged(new PrivilegedAction<Void>() {

            @Override
            @SuppressForbidden("Workaround for a bug, needs access to private JDK members (may fail in Java 9): https://bugzilla.redhat.com/show_bug.cgi?id=1155012")
            public Void run() {
                try {
                    Method m = DOMDigestMethod.class.getDeclaredMethod("getMessageDigestAlgorithm");
                    m.setAccessible(true);
                    String mdAlgo = (String) m.invoke(digestMethod);
                    MessageDigest md = MessageDigest.getInstance(mdAlgo, bcProv);
                    Field f = DOMReference.class.getDeclaredField("md");
                    f.setAccessible(true);
                    f.set(reference, md);
                } catch (Exception e) {
                    LOG.log(POILogger.WARN, "Can't overwrite message digest (workaround for https://bugzilla.redhat.com/show_bug.cgi?id=1155012)", e);
                }
                // Void
                return null;
            }
        });
    }
}