Java Pkcs12SignatureToken类代码示例

import eu.europa.esig.dss.token.Pkcs12SignatureToken; //导入依赖的package包/类
@Test
public void generate() throws Exception {
	CertificateService service = new CertificateService();
	MockPrivateKeyEntry entry = service.generateCertificateChain(SignatureAlgorithm.RSA_SHA256);

	KeyStore keystore = createKeyStore();
	addCertificate(keystore, "certificate", entry.getCertificate(), entry);

	OutputStream fos = new FileOutputStream(KEYSTORE_FILEPATH);
	keystore.store(fos, KEYSTORE_PASSWORD.toCharArray());

	AbstractSignatureTokenConnection signingToken = new Pkcs12SignatureToken(KEYSTORE_PASSWORD, KEYSTORE_FILEPATH);
	Assert.assertEquals(1, signingToken.getKeys().size());
	DSSPrivateKeyEntry privateEntry = signingToken.getKeys().get(0);
	Assert.assertNotNull(privateEntry);
}
 

import eu.europa.esig.dss.token.Pkcs12SignatureToken; //导入依赖的package包/类
private SignatureTokenConnection getToken(SignatureModel model) throws IOException {
	switch (model.getTokenType()) {
	case PKCS11:
		return new Pkcs11SignatureToken(model.getPkcsFile().getAbsolutePath(), model.getPassword().toCharArray());
	case PKCS12:
		return new Pkcs12SignatureToken(model.getPkcsFile(), model.getPassword());
	case MSCAPI:
		return new MSCAPISignatureToken();
	default:
		throw new IllegalArgumentException("Unsupported token type " + model.getTokenType());
	}
}
 

import eu.europa.esig.dss.token.Pkcs12SignatureToken; //导入依赖的package包/类
/**
 * Constructs PKCS12 signer object. If more than one key is provided only first is used
 *
 * @param fileName .p12 file name and path
 * @param password keystore password as char array
 */
//TODO new Constructor with password AS String
public PKCS12SignatureToken(String fileName, char[] password){
  logger.info("Using PKCS#12 signature token from file: " + fileName);
  try {
    signatureTokenConnection = new Pkcs12SignatureToken(fileName, String.valueOf(password));
  } catch (IOException e) {
    throw new DigiDoc4JException(e.getMessage());
  }
  keyEntry = signatureTokenConnection.getKeys().get(0);
}
 

import eu.europa.esig.dss.token.Pkcs12SignatureToken; //导入依赖的package包/类
@Before
public void setUp() throws IOException {
	this.documentationFilter = document("{method-name}", preprocessRequest(prettyPrint()), preprocessResponse(prettyPrint()));
	this.spec = new RequestSpecBuilder().addFilter(documentationConfiguration(this.restDocumentation)).addFilter(this.documentationFilter).build();
	this.token = new Pkcs12SignatureToken(new FileInputStream("src/test/resources/user_a_rsa.p12"), "password");
}
 

import eu.europa.esig.dss.token.Pkcs12SignatureToken; //导入依赖的package包/类
public static void main(String[] args) throws IOException {

		// GET document to be signed -
		// Return DSSDocument toSignDocument
		prepareXmlDoc();

		// Create token connection base on a self sign certificate
		String pkcs12TokenFile = getPathFromResource("/rca.p12");
		signingToken = new Pkcs12SignatureToken("password", pkcs12TokenFile);
		privateKey = signingToken.getKeys().get(0);

		// Preparing parameters for the XAdES signature
		XAdESSignatureParameters parameters = new XAdESSignatureParameters();
		// We choose the level of the signature (-B, -T, -LT, -LTA).
		parameters.setSignatureLevel(SignatureLevel.XAdES_BASELINE_B);
		// We choose the type of the signature packaging (ENVELOPED, ENVELOPING, DETACHED).
		parameters.setSignaturePackaging(SignaturePackaging.ENVELOPED);
		// We set the digest algorithm to use with the signature algorithm. You must use the
		// same parameter when you invoke the method sign on the token. The default value is
		// SHA256
		parameters.setDigestAlgorithm(DigestAlgorithm.SHA256);

		// We set the signing certificate
		parameters.setSigningCertificate(privateKey.getCertificate());
		// We set the certificate chain
		parameters.setCertificateChain(privateKey.getCertificateChain());

		// Create common certificate verifier
		CommonCertificateVerifier commonCertificateVerifier = new CommonCertificateVerifier();
		// Create XAdES xadesService for signature
		XAdESService service = new XAdESService(commonCertificateVerifier);

		// Get the SignedInfo XML segment that need to be signed.
		ToBeSigned dataToSign = service.getDataToSign(toSignDocument, parameters);

		// This function obtains the signature value for signed information using the
		// private key and specified algorithm
		DigestAlgorithm digestAlgorithm = parameters.getDigestAlgorithm();
		SignatureValue signatureValue = signingToken.sign(dataToSign, digestAlgorithm, privateKey);

		// We invoke the xadesService to sign the document with the signature value obtained in
		// the previous step.
		DSSDocument signedDocument = service.signDocument(toSignDocument, parameters, signatureValue);

		signedDocument.save("target/signedXmlXadesB_WithSelfSignedCertificate.xml");
	}
 

import eu.europa.esig.dss.token.Pkcs12SignatureToken; //导入依赖的package包/类
/**
 * This method sets the common parameters.
 * 
 * @throws IOException
 */
protected static void preparePKCS12TokenAndKey() throws IOException {
	String pkcs12TokenFile = getPathFromResource("/user_a_rsa.p12");
	signingToken = new Pkcs12SignatureToken(pkcs12TokenFile, "password");
	privateKey = signingToken.getKeys().get(0);
}
 

import eu.europa.esig.dss.token.Pkcs12SignatureToken; //导入依赖的package包/类
public static void main(String[] args) throws IOException {

		// tag::demo[]

		SignatureTokenConnection token = new Pkcs12SignatureToken("src/main/resources/user_a_rsa.p12", "password");

		List<DSSPrivateKeyEntry> keys = token.getKeys();
		for (DSSPrivateKeyEntry entry : keys) {
			System.out.println(entry.getCertificate().getCertificate());
		}

		ToBeSigned toBeSigned = new ToBeSigned("Hello world".getBytes());
		SignatureValue signatureValue = token.sign(toBeSigned, DigestAlgorithm.SHA256, keys.get(0));

		System.out.println("Signature value : " + Utils.toBase64(signatureValue.getValue()));

		// end::demo[]

	}
 

import eu.europa.esig.dss.token.Pkcs12SignatureToken; //导入依赖的package包/类
private DSSPrivateKeyEntry getOCSPAccessCertificatePrivateKey() throws IOException {
  Pkcs12SignatureToken signatureTokenConnection = new Pkcs12SignatureToken(configuration.getOCSPAccessCertificateFileName(), configuration.getOCSPAccessCertificatePasswordAsString());
  return signatureTokenConnection.getKeys().get(0);
}
 

import eu.europa.esig.dss.token.Pkcs12SignatureToken; //导入依赖的package包/类
/**
 * This method sets the common parameters.
 * 
 * @throws IOException
 */
protected static void preparePKCS12TokenAndKey() throws IOException {
	signingToken = new Pkcs12SignatureToken("src/main/resources/user_a_rsa.p12", "password");
	privateKey = signingToken.getKeys().get(0);
}