Examples of org.bouncycastle.cms.CMSSignedDataParser

org.bouncycastle.cms.CMSSignedDataParser

Parsing class for an CMS Signed Data object from an input stream.

Note: that because we are in a streaming mode only one signer can be tried and it is important that the methods on the parser are called in the appropriate order.

A simple example of usage for an encapsulated signature.

Two notes: first, in the example below the validity of the certificate isn't verified, just the fact that one of the certs matches the given signer, and, second, because we are in a streaming mode the order of the operations is important.

 CMSSignedDataParser     sp = new CMSSignedDataParser(encapSigData); sp.getSignedContent().drain(); CertStore               certs = sp.getCertificatesAndCRLs("Collection", "BC"); SignerInformationStore  signers = sp.getSignerInfos(); Collection              c = signers.getSigners(); Iterator                it = c.iterator(); while (it.hasNext()) { SignerInformation   signer = (SignerInformation)it.next(); Collection          certCollection = certs.getCertificates(signer.getSID()); Iterator        certIt = certCollection.iterator(); X509Certificate cert = (X509Certificate)certIt.next(); System.out.println("verify returns: " + signer.verify(cert, "BC")); }

Note also: this class does not introduce buffering - if you are processing large files you should create the parser with:

 CMSSignedDataParser     ep = new CMSSignedDataParser(new BufferedInputStream(encapSigData, bufSize));

where bufSize is a suitably large buffer size.

        ByteArrayInputStream original = new ByteArrayInputStream(bOut.toByteArray());
        ByteArrayOutputStream newOut = new ByteArrayOutputStream();


        CMSSignedDataParser.replaceCertificatesAndCRLs(original, certs, newOut);


        CMSSignedDataParser sp = new CMSSignedDataParser(newOut.toByteArray());


        sp.getSignedContent().drain();


        verifySignatures(sp);
    }

View Full Code Here


        sigOut.write(TEST_MESSAGE.getBytes());


        sigOut.close();


        CMSSignedDataParser sp = new CMSSignedDataParser(bOut.toByteArray());


        sp.getSignedContent().drain();
        certs = sp.getCertificatesAndCRLs("Collection", "BC");
        Iterator it = certs.getCertificates(null).iterator();


        assertEquals(_origCert, it.next());
        assertEquals(_signCert, it.next());
    }

View Full Code Here


        sigOut.write(TEST_MESSAGE.getBytes());


        sigOut.close();


        CMSSignedDataParser sp = new CMSSignedDataParser(bOut.toByteArray());


        sp.getSignedContent().drain();
        certs = sp.getCertificatesAndCRLs("Collection", "BC");
        Iterator it = certs.getCertificates(null).iterator();


        assertEquals(_signCert, it.next());
        assertEquals(_origCert, it.next());
    }

View Full Code Here


        assertEquals(CMSSignedDataGenerator.DIGEST_SHA224, signer.getDigestAlgOID());


        // we use a parser here as it requires the digests to be correct in the digest set, if it
        // isn't we'll get a NullPointerException
        CMSSignedDataParser sp = new CMSSignedDataParser(sd.getEncoded());


        sp.getSignedContent().drain();


        verifySignatures(sp);
    }

View Full Code Here


        sigOut.write(TEST_MESSAGE.getBytes());


        sigOut.close();


        CMSSignedDataParser sp = new CMSSignedDataParser(
                new CMSTypedStream(new ByteArrayInputStream(TEST_MESSAGE.getBytes())), bOut.toByteArray());


        sp.getSignedContent().drain();


        //
        // compute expected content digest
        //
        MessageDigest md = MessageDigest.getInstance("SHA1");


        byte[]                  contentDigest = md.digest(TEST_MESSAGE.getBytes());
        CertStore               certStore = sp.getCertificatesAndCRLs("Collection", null);
        SignerInformationStore  signers = sp.getSignerInfos();


        Collection              c = signers.getSigners();
        Iterator                it = c.iterator();


        while (it.hasNext())

View Full Code Here

  }


  private boolean verifyDetached(final byte[] data, final byte[] signature) throws CMSException, IOException, OperatorCreationException, GeneralSecurityException {
    InputStream inputStream = new ByteArrayInputStream(data);
    DigestCalculatorProvider digestCalculatorProvider = new BcDigestCalculatorProvider();
    CMSSignedDataParser signedDataParser = new CMSSignedDataParser(digestCalculatorProvider, new CMSTypedStream(inputStream), signature);
    CMSTypedStream signedContent = signedDataParser.getSignedContent();


    signedContent.drain();


    CollectionStore certificatesStore = (CollectionStore) signedDataParser.getCertificates();


    boolean verified = true;


    SignerInformationStore signerInformationStore = signedDataParser.getSignerInfos();
    for (Object o : signerInformationStore.getSigners()) {
      SignerInformation signerInformation = (SignerInformation) o;


      if (!BouncyCastleSignerHelper.verifySignature(signerInformation, certificatesStore, data, true)) {
        verified = false;

View Full Code Here

  }


  private boolean verifyDetached(final byte[] data, final byte[] signature) throws CMSException, IOException, OperatorCreationException, GeneralSecurityException {
    InputStream inputStream = new ByteArrayInputStream(data);
    DigestCalculatorProvider digestCalculatorProvider = new BcDigestCalculatorProvider();
    CMSSignedDataParser signedDataParser = new CMSSignedDataParser(digestCalculatorProvider, new CMSTypedStream(inputStream), signature);
    CMSTypedStream signedContent = signedDataParser.getSignedContent();


    signedContent.drain();


    CollectionStore certificatesStore = (CollectionStore) signedDataParser.getCertificates();


    boolean verified = true;


    SignerInformationStore signerInformationStore = signedDataParser.getSignerInfos();
    for (Object o : signerInformationStore.getSigners()) {
      SignerInformation signerInformation = (SignerInformation) o;


      if (!BouncyCastleSignerHelper.verifySignature(signerInformation, certificatesStore, data, true)) {
        verified = false;

View Full Code Here

    return verified;
  }


  private boolean verifyDetached(final byte[] data, final byte[] signature) throws CMSException, IOException, OperatorCreationException, GeneralSecurityException {
    InputStream inputStream = new ByteArrayInputStream(data);
    CMSSignedDataParser signedDataParser = new CMSSignedDataParser(new CMSTypedStream(inputStream), signature);
    CMSTypedStream signedContent = signedDataParser.getSignedContent();


    signedContent.drain();


    CollectionStore certificatesStore = (CollectionStore) signedDataParser.getCertificates();


    boolean verified = true;


    SignerInformationStore signerInformationStore = signedDataParser.getSignerInfos();
    for (Object o : signerInformationStore.getSigners()) {
      SignerInformation signerInformation = (SignerInformation) o;


      if (!BouncyCastleSignerHelper.verifySignature(signerInformation, certificatesStore, data, true)) {
        verified = false;

View Full Code Here

0 1 2

TOP

Related Classes of org.bouncycastle.cms.CMSSignedDataParser

br.net.woodstock.rockframework.security.sign.impl.BouncyCastlePKCS7Signer

org.apache.tika.parser.crypto.Pkcs7Parser

org.bouncycastle.asn1.ASN1EncodableVector

org.bouncycastle.asn1.ASN1InputStream

org.bouncycastle.asn1.ASN1OctetStringParser

org.bouncycastle.asn1.ASN1Set

org.bouncycastle.asn1.ASN1SetParser

org.bouncycastle.asn1.ASN1StreamParser

org.bouncycastle.asn1.ASN1TaggedObject

org.bouncycastle.asn1.BEROctetStringGenerator

All source code are property of their respective owners. Java is a trademark of Sun Microsystems, Inc and owned by ORACLE Inc. Contact coftware#gmail.com.