/*
* eID Applet Project.
* Copyright (C) 2008-2009 FedICT.
* Copyright (C) 2014 e-Contract.be BVBA.
*
* This is free software; you can redistribute it and/or modify it
* under the terms of the GNU Lesser General Public License version
* 3.0 as published by the Free Software Foundation.
*
* This software is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
* Lesser General Public License for more details.
*
* You should have received a copy of the GNU Lesser General Public
* License along with this software; if not, see
* http://www.gnu.org/licenses/.
*/
package test.be.fedict.eid.applet;
import java.security.MessageDigest;
import java.security.NoSuchAlgorithmException;
import java.security.NoSuchProviderException;
import java.security.Security;
import java.security.Signature;
import java.security.cert.X509Certificate;
import java.util.HashMap;
import java.util.List;
import java.util.Map;
import javax.security.jacc.PolicyContext;
import javax.security.jacc.PolicyContextException;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpSession;
import org.apache.commons.codec.binary.Hex;
import org.apache.commons.logging.Log;
import org.apache.commons.logging.LogFactory;
import org.bouncycastle.jce.provider.BouncyCastleProvider;
import be.fedict.eid.applet.service.spi.AddressDTO;
import be.fedict.eid.applet.service.spi.DigestInfo;
import be.fedict.eid.applet.service.spi.IdentityDTO;
import be.fedict.eid.applet.service.spi.SignatureService;
/**
* Test for classname based service implementation.
*
* @author Frank Cornelis
*
*/
public class SignatureServiceImpl implements SignatureService {
private static final Log LOG = LogFactory.getLog(SignatureServiceImpl.class);
private static Map<String, String> digestAlgoToSignAlgo;
static {
if (null == Security.getProvider(BouncyCastleProvider.PROVIDER_NAME)) {
Security.addProvider(new BouncyCastleProvider());
}
digestAlgoToSignAlgo = new HashMap<String, String>();
digestAlgoToSignAlgo.put("SHA-1", "SHA1withRSA");
digestAlgoToSignAlgo.put("SHA-224", "SHA224withRSA");
digestAlgoToSignAlgo.put("SHA-256", "SHA256withRSA");
digestAlgoToSignAlgo.put("SHA-384", "SHA384withRSA");
digestAlgoToSignAlgo.put("SHA-512", "SHA512withRSA");
digestAlgoToSignAlgo.put("RIPEMD128", "RIPEMD128withRSA");
digestAlgoToSignAlgo.put("RIPEMD160", "RIPEMD160withRSA");
digestAlgoToSignAlgo.put("RIPEMD256", "RIPEMD256withRSA");
}
public void postSign(byte[] signatureValue, List<X509Certificate> signingCertificateChain) {
LOG.debug("postSign");
String signatureValueStr = new String(Hex.encodeHex(signatureValue));
HttpSession session = getHttpSession();
session.setAttribute("SignatureValue", signatureValueStr);
session.setAttribute("SigningCertificateChain", signingCertificateChain);
boolean signatureValid = false;
String toBeSigned = (String) session.getAttribute("toBeSigned");
LOG.debug("to be signed: " + toBeSigned);
String digestAlgo = (String) session.getAttribute("digestAlgo");
String signAlgo = digestAlgoToSignAlgo.get(digestAlgo);
try {
Signature signature = Signature.getInstance(signAlgo, BouncyCastleProvider.PROVIDER_NAME);
signature.initVerify(signingCertificateChain.get(0).getPublicKey());
signature.update(toBeSigned.getBytes());
signatureValid = signature.verify(signatureValue);
} catch (Exception e) {
LOG.error("error validating the signature: " + e.getMessage(), e);
}
session.setAttribute("SignatureValid", signatureValid);
}
public DigestInfo preSign(List<DigestInfo> digestInfos, List<X509Certificate> signingCertificateChain,
IdentityDTO identity, AddressDTO address, byte[] photo) throws NoSuchAlgorithmException {
LOG.debug("preSign");
HttpSession session = getHttpSession();
String toBeSigned = (String) session.getAttribute("toBeSigned");
LOG.debug("to be signed: " + toBeSigned);
String digestAlgo = (String) session.getAttribute("digestAlgo");
LOG.debug("digest algo: " + digestAlgo);
String javaDigestAlgo = digestAlgo;
if (digestAlgo.endsWith("-PSS")) {
LOG.debug("RSA/PSS detected");
javaDigestAlgo = digestAlgo.substring(0, digestAlgo.indexOf("-PSS"));
LOG.debug("java digest algo: " + javaDigestAlgo);
}
MessageDigest messageDigest;
try {
messageDigest = MessageDigest.getInstance(javaDigestAlgo, BouncyCastleProvider.PROVIDER_NAME);
} catch (NoSuchProviderException e) {
throw new RuntimeException("bouncycastle error: " + e.getMessage(), e);
}
byte[] digestValue = messageDigest.digest(toBeSigned.getBytes());
String description = "Test Text Document";
return new DigestInfo(digestValue, digestAlgo, description);
}
private HttpSession getHttpSession() {
HttpServletRequest httpServletRequest;
try {
httpServletRequest = (HttpServletRequest) PolicyContext.getContext("javax.servlet.http.HttpServletRequest");
} catch (PolicyContextException e) {
throw new RuntimeException("JACC error: " + e.getMessage());
}
HttpSession session = httpServletRequest.getSession();
return session;
}
public String getFilesDigestAlgorithm() {
/*
* We don't need file digest values.
*/
return null;
}
}