org.nhindirect.stagent.cryptography.activekeyops

Class DefaultDirectSignedDataGenerator

java.lang.Object

org.nhindirect.stagent.cryptography.activekeyops.DefaultDirectSignedDataGenerator

All Implemented Interfaces:

DirectSignedDataGenerator

public class DefaultDirectSignedDataGenerator
extends Object
implements DirectSignedDataGenerator

Default implementation of the DirectSignedDataGenerator that functions as a pass through to the BouncyCastle CMSSignedDataGenerator implementation.

Since:

2.1

Author:

Greg Meyer

Constructor Summary

Constructors

Constructor and Description
DefaultDirectSignedDataGenerator(String sigProvider) Constructor

Method Summary

Methods

Modifier and Type	Method and Description
void	addCertificatesAndCRLs(CertStore certStore) Adds signing certificates and CRLs to the message
void	addSigner(PrivateKey key, X509Certificate cert, String digestOID, org.bouncycastle.asn1.cms.AttributeTable signedAttr, org.bouncycastle.asn1.cms.AttributeTable unsignedAttr) Adds a message signer to the message.
org.bouncycastle.cms.CMSSignedData	generate(org.bouncycastle.cms.CMSProcessable content) Generates a CMSSignedData object that represents the content's digital signature.

Methods inherited from class java.lang.Object

equals, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

DefaultDirectSignedDataGenerator

public DefaultDirectSignedDataGenerator(String sigProvider)

Constructor

Parameters:

sigProvider - The name of the JCE provider used to perform the signing and digest operations. If this is null or empty, the CryptoExtensions.getJCESensitiveProviderName() value will be used.

Method Detail

addSigner

public void addSigner(PrivateKey key,
             X509Certificate cert,
             String digestOID,
             org.bouncycastle.asn1.cms.AttributeTable signedAttr,
             org.bouncycastle.asn1.cms.AttributeTable unsignedAttr)
               throws IllegalArgumentException

Adds a message signer to the message.

Specified by:

addSigner in interface DirectSignedDataGenerator

Parameters:

key - The private key used to digitally sign the message.

cert - The X.509 certificate whose public key matches up with the private key.

digestOID - The digest algorithm used to generate the message hash.

signedAttr - Signed attributes

unsignedAttr - Unsigned attributes.

Throws:

IllegalArgumentException

addCertificatesAndCRLs

public void addCertificatesAndCRLs(CertStore certStore)
                            throws CertStoreException,
                                   org.bouncycastle.cms.CMSException

Adds signing certificates and CRLs to the message

Specified by:

addCertificatesAndCRLs in interface DirectSignedDataGenerator

Parameters:

certStore - A store or messgae signers

Throws:

CertStoreException

org.bouncycastle.cms.CMSException

generate

public org.bouncycastle.cms.CMSSignedData generate(org.bouncycastle.cms.CMSProcessable content)
                                            throws NoSuchAlgorithmException,
                                                   NoSuchProviderException,
                                                   org.bouncycastle.cms.CMSException

Generates a CMSSignedData object that represents the content's digital signature.

Specified by:

generate in interface DirectSignedDataGenerator

Parameters:

content - The content to be signed.

Returns:

A CMSSignedData object that represents the content's digital signature.

Throws:

NoSuchAlgorithmException

NoSuchProviderException

org.bouncycastle.cms.CMSException