Examples with CompleteRevocationRefsProperty xades4j.properties.CompleteRevocationRefsProperty used on opensource projects

Example 1 with CompleteRevocationRefsProperty

use of xades4j.properties.CompleteRevocationRefsProperty in project xades4j by luisgoncalves.

the class DefaultProductionBindingsModule method configure.

@Override
protected void configure() {
    // Defaults for configurable components.
    bind(SignaturePropertiesProvider.class).to(DefaultSignaturePropertiesProvider.class);
    bind(DataObjectPropertiesProvider.class).toInstance(new DataObjectPropertiesProvider() {

        @Override
        public void provideProperties(DataObjectDesc dataObj) {
        // By default no properties are specified for a data object.
        }
    });
    bind(AlgorithmsProviderEx.class).to(DefaultAlgorithmsProviderEx.class);
    // Will wrap the AlgorithmsProviderEx in use
    bind(AlgorithmsProvider.class).to(AlgorithmsProvider_ExToDeprecated_Adapter.class);
    bind(BasicSignatureOptionsProvider.class).to(DefaultBasicSignatureOptionsProvider.class);
    bind(MessageDigestEngineProvider.class).to(DefaultMessageDigestProvider.class);
    bind(TimeStampTokenProvider.class).to(HttpTimeStampTokenProvider.class);
    // Backwards compatibility
    bind(TSAHttpData.class).toInstance(new TSAHttpData("http://tss.accv.es:8318/tsa"));
    // PropertiesDataObjectsGenerator is not configurable but the individual
    // generators may have dependencies.
    bind(PropertiesDataObjectsGenerator.class).to(PropertiesDataObjectsGeneratorImpl.class);
    bind(PropertyDataGeneratorsMapper.class).to(PropertyDataGeneratorsMapperImpl.class);
    // Ensure empty set when no bindings are defined
    Multibinder.newSetBinder(binder(), CustomPropertiesDataObjsStructureVerifier.class);
    // PropertyDataGeneratorsMapperImpl relies on the injector to get
    // the individual generators, so they need to be bound.
    // - SignedSignatureProperties
    bind(new TypeLiteral<PropertyDataObjectGenerator<SigningTimeProperty>>() {
    }).to(DataGenSigningTime.class);
    bind(new TypeLiteral<PropertyDataObjectGenerator<SignerRoleProperty>>() {
    }).to(DataGenSignerRole.class);
    bind(new TypeLiteral<PropertyDataObjectGenerator<SigningCertificateProperty>>() {
    }).to(DataGenSigningCertificate.class);
    bind(new TypeLiteral<PropertyDataObjectGenerator<SignatureProductionPlaceProperty>>() {
    }).to(DataGenSigProdPlace.class);
    bind(new TypeLiteral<PropertyDataObjectGenerator<SignaturePolicyIdentifierProperty>>() {
    }).to(DataGenSigPolicy.class);
    bind(new TypeLiteral<PropertyDataObjectGenerator<SignaturePolicyImpliedProperty>>() {
    }).to(DataGenSigPolicyImplied.class);
    // - SignedDataObjectProperties
    bind(new TypeLiteral<PropertyDataObjectGenerator<DataObjectFormatProperty>>() {
    }).to(DataGenDataObjFormat.class);
    bind(new TypeLiteral<PropertyDataObjectGenerator<CommitmentTypeProperty>>() {
    }).to(DataGenCommitmentType.class);
    bind(new TypeLiteral<PropertyDataObjectGenerator<AllDataObjsCommitmentTypeProperty>>() {
    }).to(DataGenCommitmentTypeAllDataObjs.class);
    bind(new TypeLiteral<PropertyDataObjectGenerator<IndividualDataObjsTimeStampProperty>>() {
    }).to(DataGenIndivDataObjsTimeStamp.class);
    bind(new TypeLiteral<PropertyDataObjectGenerator<AllDataObjsTimeStampProperty>>() {
    }).to(DataGenAllDataObjsTimeStamp.class);
    // - UnsignedSignatureProperties
    bind(new TypeLiteral<PropertyDataObjectGenerator<CounterSignatureProperty>>() {
    }).to(DataGenCounterSig.class);
    bind(new TypeLiteral<PropertyDataObjectGenerator<SignatureTimeStampProperty>>() {
    }).to(DataGenSigTimeStamp.class);
    bind(new TypeLiteral<PropertyDataObjectGenerator<CompleteCertificateRefsProperty>>() {
    }).to(DataGenCompleteCertRefs.class);
    bind(new TypeLiteral<PropertyDataObjectGenerator<CompleteRevocationRefsProperty>>() {
    }).to(DataGenCompleteRevocRefs.class);
    bind(new TypeLiteral<PropertyDataObjectGenerator<SigAndRefsTimeStampProperty>>() {
    }).to(DataGenSigAndRefsTimeStamp.class);
    bind(new TypeLiteral<PropertyDataObjectGenerator<CertificateValuesProperty>>() {
    }).to(DataGenCertificateValues.class);
    bind(new TypeLiteral<PropertyDataObjectGenerator<RevocationValuesProperty>>() {
    }).to(DataGenRevocationValues.class);
    bind(new TypeLiteral<PropertyDataObjectGenerator<ArchiveTimeStampProperty>>() {
    }).to(DataGenArchiveTimeStamp.class);
}

Example 2 with CompleteRevocationRefsProperty

use of xades4j.properties.CompleteRevocationRefsProperty in project xades4j by luisgoncalves.

the class CompleteRevocRefsVerifier method verify.

@Override
public QualifyingProperty verify(CompleteRevocationRefsData propData, QualifyingPropertyVerificationContext ctx) throws InvalidPropertyException {
    Collection<X509CRL> crls = ctx.getCertChainData().getCrls();
    Collection<CRLRef> crlRefs = new ArrayList<CRLRef>(propData.getCrlRefs());
    if (crls.isEmpty())
        throw new CompleteRevocRefsCRLsNotAvailableException();
    for (X509CRL crl : crls) {
        CRLRef match = null;
        for (CRLRef crlRef : crlRefs) {
            // Check issuer and issue time.
            if (!crl.getIssuerX500Principal().equals(new X500Principal(crlRef.issuerDN)) || !crl.getThisUpdate().equals(crlRef.issueTime.getTime()))
                continue;
            try {
                // Check CRL number, if present.
                if (crlRef.serialNumber != null) {
                    BigInteger crlNum = CrlExtensionsUtils.getCrlNumber(crl);
                    if (crlNum != null && !crlRef.serialNumber.equals(crlNum))
                        continue;
                }
                // Check digest value.
                MessageDigest md = this.digestEngineProvider.getEngine(crlRef.digestAlgUri);
                if (Arrays.equals(md.digest(crl.getEncoded()), crlRef.digestValue)) {
                    match = crlRef;
                    break;
                }
            } catch (IOException ex) {
                throw new CompleteRevocRefsReferenceException(crl, ex.getMessage());
            } catch (CRLException ex) {
                throw new CompleteRevocRefsReferenceException(crl, ex.getMessage());
            } catch (UnsupportedAlgorithmException ex) {
                throw new CompleteRevocRefsReferenceException(crl, ex.getMessage());
            }
        }
        if (null == match)
            throw new CompleteRevocRefsReferenceException(crl, "no matching reference");
        crlRefs.remove(match);
    }
    return new CompleteRevocationRefsProperty(crls);
}

Example 3 with CompleteRevocationRefsProperty

use of xades4j.properties.CompleteRevocationRefsProperty in project xades4j by luisgoncalves.

the class PropertiesUtils method addXadesCProperties.

public static void addXadesCProperties(Collection<UnsignedSignatureProperty> usp, ValidationData vData) {
    // Remove the leaf certificate.
    List<X509Certificate> caCerts = vData.getCerts();
    caCerts = new ArrayList<X509Certificate>(caCerts.subList(1, caCerts.size()));
    usp.add(new CompleteCertificateRefsProperty(caCerts));
    usp.add(new CompleteRevocationRefsProperty(vData.getCrls()));
}