Examples with SignatureValidationException org.nhindirect.stagent.SignatureValidationException used on opensource projects

Example 1 with SignatureValidationException

use of org.nhindirect.stagent.SignatureValidationException in project nhin-d by DirectProject.

the class CryptographerTest method testSignMimeEntity_MD5Digest_forceStrongDigest_assertRejectValidation.

public void testSignMimeEntity_MD5Digest_forceStrongDigest_assertRejectValidation() throws Exception {
    X509CertificateEx certex = TestUtils.getInternalCert("user1");
    SMIMECryptographerImpl cryptographer = new SMIMECryptographerImpl();
    cryptographer.setDigestAlgorithm(DigestAlgorithm.MD5);
    MimeEntity entity = new MimeEntity();
    entity.setText("Hello world.");
    entity.setHeader(MimeStandard.ContentTypeHeader, "text/plain");
    entity.setHeader(MimeStandard.ContentTransferEncodingHeader, "7bit");
    SignedEntity signedEnt = cryptographer.sign(entity, certex);
    assertNotNull(signedEnt);
    byte[] signedEntityBytes = EntitySerializer.Default.serializeToBytes(signedEnt.getContent());
    byte[] entityBytes = EntitySerializer.Default.serializeToBytes(entity);
    assertTrue(Arrays.equals(signedEntityBytes, entityBytes));
    assertNotNull(signedEnt.getSignature());
    X509Certificate cert = TestUtils.getExternalCert("user1");
    boolean exceptionOccured = false;
    try {
        cryptographer.checkSignature(signedEnt, cert, new ArrayList<X509Certificate>());
    } catch (SignatureValidationException e) {
        exceptionOccured = true;
    }
    assertTrue(exceptionOccured);
}

Example 2 with SignatureValidationException

use of org.nhindirect.stagent.SignatureValidationException in project nhin-d by DirectProject.

the class SMIMECryptographerImpl method checkSignature.

//-----------------------------------------------------
//
// Signature Validation
//
//-----------------------------------------------------
/**
     * Validates that a signed entity has a valid message and signature.  The signer's certificate is validated to ensure authenticity of the message.  Message
     * tampering is also checked with the message's digest and the signed digest in the message signature.
     * @param signedEntity The entity containing the original signed part and the message signature.
     * @param signerCertificate The certificate used to sign the message.
     * @param anchors A collection of certificate anchors used to determine if the certificates used in the signature can be validated as trusted certificates.
     */
public void checkSignature(SignedEntity signedEntity, X509Certificate signerCertificate, Collection<X509Certificate> anchors) throws SignatureValidationException {
    CMSSignedData signatureEnvelope = deserializeSignatureEnvelope(signedEntity);
    SignerInformation logSigInfo = null;
    try {
        // is verified with the signerCertificate
        for (SignerInformation sigInfo : (Collection<SignerInformation>) signatureEnvelope.getSignerInfos().getSigners()) {
            logSigInfo = sigInfo;
            // such as MD5
            if (!isAllowedDigestAlgorithm(sigInfo.getDigestAlgOID()))
                throw new SignatureValidationException("Digest algorithm " + sigInfo.getDigestAlgOID() + " is not allowed.");
            if (sigInfo.verify(signerCertificate, CryptoExtensions.getJCEProviderName())) {
                // verified... return
                return;
            }
        }
        // at this point the signerCertificate cannot be verified with one of the signing certificates....
        throw new SignatureValidationException("Signature validation failure.");
    } catch (SignatureValidationException sve) {
        throw sve;
    } catch (Exception e) {
        throw new SignatureValidationException("Signature validation failure.", e);
    } finally {
        logDigests(logSigInfo);
    }
}