test.be.fedict.eid.applet.SignatureServiceImpl.java Source code

Introduction

Here is the source code for test.be.fedict.eid.applet.SignatureServiceImpl.java

Source

/*
 * eID Applet Project.
 * Copyright (C) 2008-2009 FedICT.
 *
 * This is free software; you can redistribute it and/or modify it
 * under the terms of the GNU Lesser General Public License version
 * 3.0 as published by the Free Software Foundation.
 *
 * This software is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
 * Lesser General Public License for more details.
 *
 * You should have received a copy of the GNU Lesser General Public
 * License along with this software; if not, see 
 * http://www.gnu.org/licenses/.
 */

package test.be.fedict.eid.applet;

import java.security.MessageDigest;
import java.security.NoSuchAlgorithmException;
import java.security.NoSuchProviderException;
import java.security.Security;
import java.security.Signature;
import java.security.cert.X509Certificate;
import java.util.HashMap;
import java.util.List;
import java.util.Map;

import javax.security.jacc.PolicyContext;
import javax.security.jacc.PolicyContextException;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpSession;

import org.apache.commons.codec.binary.Hex;
import org.apache.commons.logging.Log;
import org.apache.commons.logging.LogFactory;
import org.bouncycastle.jce.provider.BouncyCastleProvider;

import be.fedict.eid.applet.service.spi.DigestInfo;
import be.fedict.eid.applet.service.spi.SignatureService;

/**
 * Test for classname based service implementation.
 * 
 * @author Frank Cornelis
 * 
 */
public class SignatureServiceImpl implements SignatureService {

    private static final Log LOG = LogFactory.getLog(SignatureServiceImpl.class);

    private static Map<String, String> digestAlgoToSignAlgo;

    static {
        if (null == Security.getProvider(BouncyCastleProvider.PROVIDER_NAME)) {
            Security.addProvider(new BouncyCastleProvider());
        }
        digestAlgoToSignAlgo = new HashMap<String, String>();
        digestAlgoToSignAlgo.put("SHA-1", "SHA1withRSA");
        digestAlgoToSignAlgo.put("SHA-224", "SHA224withRSA");
        digestAlgoToSignAlgo.put("SHA-256", "SHA256withRSA");
        digestAlgoToSignAlgo.put("SHA-384", "SHA384withRSA");
        digestAlgoToSignAlgo.put("SHA-512", "SHA512withRSA");
        digestAlgoToSignAlgo.put("RIPEMD128", "RIPEMD128withRSA");
        digestAlgoToSignAlgo.put("RIPEMD160", "RIPEMD160withRSA");
        digestAlgoToSignAlgo.put("RIPEMD256", "RIPEMD256withRSA");
    }

    public void postSign(byte[] signatureValue, List<X509Certificate> signingCertificateChain) {
        LOG.debug("postSign");

        String signatureValueStr = new String(Hex.encodeHex(signatureValue));

        HttpSession session = getHttpSession();
        session.setAttribute("SignatureValue", signatureValueStr);
        session.setAttribute("SigningCertificateChain", signingCertificateChain);

        boolean signatureValid = false;
        String toBeSigned = (String) session.getAttribute("toBeSigned");
        LOG.debug("to be signed: " + toBeSigned);
        String digestAlgo = (String) session.getAttribute("digestAlgo");
        String signAlgo = digestAlgoToSignAlgo.get(digestAlgo);

        try {
            Signature signature = Signature.getInstance(signAlgo, BouncyCastleProvider.PROVIDER_NAME);
            signature.initVerify(signingCertificateChain.get(0).getPublicKey());
            signature.update(toBeSigned.getBytes());
            signatureValid = signature.verify(signatureValue);
        } catch (Exception e) {
            LOG.error("error validating the signature: " + e.getMessage(), e);
        }

        session.setAttribute("SignatureValid", signatureValid);
    }

    public DigestInfo preSign(List<DigestInfo> digestInfos, List<X509Certificate> signingCertificateChain)
            throws NoSuchAlgorithmException {
        LOG.debug("preSign");

        HttpSession session = getHttpSession();
        String toBeSigned = (String) session.getAttribute("toBeSigned");
        LOG.debug("to be signed: " + toBeSigned);
        String digestAlgo = (String) session.getAttribute("digestAlgo");
        LOG.debug("digest algo: " + digestAlgo);

        String javaDigestAlgo = digestAlgo;
        if (digestAlgo.endsWith("-PSS")) {
            LOG.debug("RSA/PSS detected");
            javaDigestAlgo = digestAlgo.substring(0, digestAlgo.indexOf("-PSS"));
            LOG.debug("java digest algo: " + javaDigestAlgo);
        }
        MessageDigest messageDigest;
        try {
            messageDigest = MessageDigest.getInstance(javaDigestAlgo, BouncyCastleProvider.PROVIDER_NAME);
        } catch (NoSuchProviderException e) {
            throw new RuntimeException("bouncycastle error: " + e.getMessage(), e);
        }
        byte[] digestValue = messageDigest.digest(toBeSigned.getBytes());

        String description = "Test Text Document";
        return new DigestInfo(digestValue, digestAlgo, description);
    }

    private HttpSession getHttpSession() {
        HttpServletRequest httpServletRequest;
        try {
            httpServletRequest = (HttpServletRequest) PolicyContext
                    .getContext("javax.servlet.http.HttpServletRequest");
        } catch (PolicyContextException e) {
            throw new RuntimeException("JACC error: " + e.getMessage());
        }

        HttpSession session = httpServletRequest.getSession();
        return session;
    }

    public String getFilesDigestAlgorithm() {
        /*
         * We don't need file digest values.
         */
        return null;
    }

    public void setHttpSessionObject(Object session) {

    }
}