iaik.pdf.parameters

Class SignatureParameters

java.lang.Object

iaik.pdf.parameters.SignatureParameters

Direct Known Subclasses:

CMSSignatureParameters, PdfSignatureParameters

public abstract class SignatureParameters
extends java.lang.Object

Abstract parameter superclass.

Method Summary

Modifier and Type	Method and Description
java.lang.String	getDigestAlgorithm() Get digest algorithm, that will be used for pdf content digest
java.lang.String	getSignatureAlgorithm() Get signature algorithm, that will be used for content signing.
java.util.Vector<iaik.asn1.structures.Attribute>	getSignedSignerInfoAttributes(iaik.cms.SignedDataStream signedData, iaik.cms.SignerInfo signerInfo, iaik.x509.X509Certificate[] signerCertificateChain) Return all signed attributes as determined by the respective parameter class.
java.util.Vector<iaik.asn1.structures.Attribute>	getUnsignedSignerInfoAttributes(iaik.cms.SignedDataStream signedData, iaik.cms.SignerInfo signerInfo, iaik.x509.X509Certificate[] signerCertificateChain) Return all unsigned attributes as determined by the respective parameter class.
boolean	isSigningCertificateAttributeIncluded() Deprecated. handling of signed attributes is now done by each parameters class itself, see getSignedSignerInfoAttributes(SignedDataStream, SignerInfo, X509Certificate[]) .
void	setDigestAlgorithm(java.lang.String hashAlgorithm) Set digest algorithm used for content digest in signature.
void	setSignatureAlgorithm(java.lang.String signatureAlgorithm) Set the signature algorithm to be used for signing.

Methods inherited from class java.lang.Object

equals, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Method Detail

setDigestAlgorithm

public void setDigestAlgorithm(java.lang.String hashAlgorithm)

Set digest algorithm used for content digest in signature. If no digest algorithm is specified using this method, it will be derived from the given signing key according to NIST Special Publication SP 800-57 (Part 1, July 2012).

Parameters:

hashAlgorithm - digest algorithm for hashing the content

setSignatureAlgorithm

public void setSignatureAlgorithm(java.lang.String signatureAlgorithm)

Set the signature algorithm to be used for signing. If no signature algorithm is specified using this method, it will be derived from the signing key.

Parameters:

signatureAlgorithm - signature algorithm for signing the content

getDigestAlgorithm

public java.lang.String getDigestAlgorithm()

Get digest algorithm, that will be used for pdf content digest

Returns:

used digest algorithm

getSignatureAlgorithm

public java.lang.String getSignatureAlgorithm()

Get signature algorithm, that will be used for content signing. If null, the private key's algorithm will be used.

Returns:

used signature algorithm

isSigningCertificateAttributeIncluded

public boolean isSigningCertificateAttributeIncluded()

Deprecated. handling of signed attributes is now done by each parameters class itself, see getSignedSignerInfoAttributes(SignedDataStream, SignerInfo, X509Certificate[]) .

True, if the SigningCertificateAttribute will be included in the CMS signature as signed attribute. Automatically set to true for CAdES-BES and PAdES-BES signatures.

Returns:

true, if the SigningCertificateAttribute will be included

getSignedSignerInfoAttributes

public java.util.Vector<iaik.asn1.structures.Attribute> getSignedSignerInfoAttributes(iaik.cms.SignedDataStream signedData,
                                                                                      iaik.cms.SignerInfo signerInfo,
                                                                                      iaik.x509.X509Certificate[] signerCertificateChain)
                                                                               throws CmsCadesException

Return all signed attributes as determined by the respective parameter class. These attributes may be created automatically by the chosen class (e.g. SigningCertificate attribute for BES-signatures) or may be influenced by provided methods. The attributes are not added to the given SignerInfo object, as further attributes may be added by the user. Some details of the given SignedData object, SignerInfo object and certificates may be required for creating certain attributes. This method is internally used for creating CAdES signatures.

Parameters:

signedData - SignedData object containing the respective signer info

signerInfo - the corresponding SignerInfo object

signerCertificateChain - used certificate chain for the corresponding signer info

Returns:

the signed attributes as given by this parameter class

Throws:

CmsCadesException - if an attribute can't be created

getUnsignedSignerInfoAttributes

public java.util.Vector<iaik.asn1.structures.Attribute> getUnsignedSignerInfoAttributes(iaik.cms.SignedDataStream signedData,
                                                                                        iaik.cms.SignerInfo signerInfo,
                                                                                        iaik.x509.X509Certificate[] signerCertificateChain)
                                                                                 throws CmsCadesException

Return all unsigned attributes as determined by the respective parameter class. These attributes may be created automatically by the chosen class or may be influenced by provided methods (e.g. optional SignatureTimestamp for PAdES signatures). The attributes are not added to the given SignerInfo object, as further attributes may be added by the user. Some details of the given SignedData object, SignerInfo object and certificates may be required for creating certain attributes. This method is internally used for creating CAdES signatures.

Parameters:

signedData - SignedData object containing the respective signer info

signerInfo - the corresponding SignerInfo object

signerCertificateChain - used certificate chain for the corresponding signer info

Returns:

the unsigned attributes as given by this parameter class

Throws:

CmsCadesException - if an attribute can't be created