/* * DSS - Digital Signature Services * * Copyright (C) 2013 European Commission, Directorate-General Internal Market and Services (DG MARKT), B-1049 Bruxelles/Brussel * * Developed by: 2013 ARHS Developments S.A. (rue Nicolas Bové 2B, L-1253 Luxembourg) http://www.arhs-developments.com * * This file is part of the "DSS - Digital Signature Services" project. * * "DSS - Digital Signature Services" is free software: you can redistribute it and/or modify it under the terms of * the GNU Lesser General Public License as published by the Free Software Foundation, either version 2.1 of the * License, or (at your option) any later version. * * DSS is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty * of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU Lesser General Public License for more details. * * You should have received a copy of the GNU Lesser General Public License along with * "DSS - Digital Signature Services". If not, see <http://www.gnu.org/licenses/>. */ package eu.europa.ec.markt.dss.signature.xades; import org.w3c.dom.Node; import org.w3c.dom.NodeList; import eu.europa.ec.markt.dss.DSSUtils; import eu.europa.ec.markt.dss.DigestAlgorithm; import eu.europa.ec.markt.dss.exception.DSSException; import eu.europa.ec.markt.dss.parameter.TimestampParameters; import eu.europa.ec.markt.dss.signature.SignatureLevel; import eu.europa.ec.markt.dss.validation102853.CertificateVerifier; import eu.europa.ec.markt.dss.validation102853.TimestampType; /** * This class represents the implementation of XAdES level -X extension. * * @version $Revision$ - $Date$ */ public class XAdESLevelX extends XAdESLevelC { private static final org.slf4j.Logger LOG = org.slf4j.LoggerFactory.getLogger(XAdESLevelX.class); /** * The default constructor for XAdESLevelX. */ public XAdESLevelX(CertificateVerifier certificateVerifier) { super(certificateVerifier); } /** * Adds <SigAndRefsTimeStamp> segment to <UnsignedSignatureProperties><br> * The time-stamp is placed on the the digital signature (ds:Signature element), the time-stamp(s) present in the * XAdES-T form, the certification path references and the revocation status references. * <p/> * A XAdES-X form MAY contain several SigAndRefsTimeStamp elements, obtained from different TSAs. * * @see XAdESLevelC#extendSignatureTag() */ @Override protected void extendSignatureTag() throws DSSException { /* Go up to -C */ super.extendSignatureTag(); final SignatureLevel signatureLevel = params.getSignatureLevel(); // for XAdES_XL the development is not conform with the standard if (!xadesSignature.hasXProfile() || SignatureLevel.XAdES_X.equals(signatureLevel) || SignatureLevel.XAdES_XL.equals(signatureLevel)) { if (SignatureLevel.XAdES_XL.equals(params.getSignatureLevel())) { final NodeList toRemoveList = xadesSignature.getSigAndRefsTimeStamp(); for (int index = 0; index < toRemoveList.getLength(); index++) { final Node item = toRemoveList.item(index); unsignedSignaturePropertiesDom.removeChild(item); } } final TimestampParameters signatureTimestampParameters = params.getSignatureTimestampParameters(); final String canonicalizationMethod = signatureTimestampParameters.getCanonicalizationMethod(); final byte[] timestampX1Data = xadesSignature.getTimestampX1Data(null, canonicalizationMethod); final DigestAlgorithm timestampDigestAlgorithm = signatureTimestampParameters.getDigestAlgorithm(); final byte[] digestValue = DSSUtils.digest(timestampDigestAlgorithm, timestampX1Data); createXAdESTimeStampType(TimestampType.VALIDATION_DATA_TIMESTAMP, canonicalizationMethod, digestValue); } } }