iaik.xml.crypto.xades

Interface CertIDV2

All Superinterfaces:

XMLStructure

All Known Implementing Classes:

CertIDV2Impl

public interface CertIDV2
extends XMLStructure

A representation of the CertIDV2 type as defined in ETSI ETSI EN 319 132-1.

The XML Schema Definition is defined as:

 <xsd:complexType name="CertIDTypeV2">
   <xsd:sequence>
     <xsd:element name="CertDigest" type="DigestAlgAndValueType"/>
     <xsd:element name="IssuerSerialV2" type="xsd:base64Binary" minOccurs="0"/>
   </xsd:sequence>
   <xsd:attribute name="URI" type="xsd:anyURI" use="optional"/>
 </xsd:complexType>
 

A CertID may be created by invoking one of the newCertID methods of the QualifyingPropertiesFactory class; for example

 XMLSignatureFactory sfac = XMLSignatureFactory.getInstance("DOM");
 QualifyingPropertiesFactory qfac = QualifyingPropertiesFactory.getInstance("DOM");

 CertificateFactory cfac = CertificateFactory.getInstance("X509");
 X509Certificate cert = (X509Certificate) cfac.generateCertificate(certIS);
 CertID certId = qfac.newCertID(null, cert, sfac.newDigestMethod(DigestMethod.SHA1, null));
 

See Also:

DigestAlgAndValue, CertIDV2, QualifyingPropertiesFactory.newSigningCertificateV2(List), QualifyingPropertiesFactory.newCertIDV2(String, X509Certificate, DigestMethod, boolean), QualifyingPropertiesFactory.newCertIDV2(String, DigestMethod, byte[]), QualifyingPropertiesFactory.newCertIDV2(String, DigestMethod, InputStream), QualifyingPropertiesFactory.newCertIDV2(String, DigestMethod, byte[], IssuerSerialV2), QualifyingPropertiesFactory.newCertIDV2(String, IssuerSerialV2, DigestMethod, InputStream)

Field Summary

Fields

Modifier and Type	Field and Description
static String	LOCAL_NAME The local name of this element.
static String	REGISTER_NAME The name this class is registered with.

Method Summary

Modifier and Type	Method and Description
DigestAlgAndValue	getCertDigest() Returns the CertDigest.
IssuerSerialV2	getIssuerSerialV2() Returns the IssuerSerialV2.
String	getURI() Returns the URI reference.
boolean	validate(XMLCryptoContext context, Data digestInput) Validates the digest value.

Methods inherited from interface javax.xml.crypto.XMLStructure

isFeatureSupported

Field Detail

LOCAL_NAME

static final String LOCAL_NAME

The local name of this element.

See Also:

Constant Field Values

REGISTER_NAME

static final String REGISTER_NAME

The name this class is registered with.

See Also:

Constant Field Values

Method Detail

getURI

String getURI()

Returns the URI reference.

Returns:

the URI reference.

getIssuerSerialV2

IssuerSerialV2 getIssuerSerialV2()

Returns the IssuerSerialV2.

Returns:

the IssuerSerialV2. Maybe null.

getCertDigest

DigestAlgAndValue getCertDigest()

Returns the CertDigest.

Returns:

the CertDigest

validate

boolean validate(XMLCryptoContext context,
                 Data digestInput)
          throws XMLSignatureException

Validates the digest value. This method performs a cryptographic validation of the digest value computed over the referenced certificate.

The input for the digest computation is obtained from the given digestInput if present, or alternatively from the dereferenced URI reference of the CertID. If no digestInput is given or no URI reference is present or could be dereferenced successfully an XMLSignatureException is thrown. If no digestInput is given the method only validates the reference the first time it is invoked. On subsequent invocations, it returns a cached result unless a digestinput is provided.

Parameters:

context - the validation context

digestInput - the input for the digest computation

Returns:

true if the digest value validated successfully; false otherwise

Throws:

NullPointerException - if context is null

XMLSignatureException - if an unexpected exception occurs while validating the digest value