Many resources are needed to download a project. Please understand that we have to compensate our server costs. Thank you in advance.
Project price only 1 $
You can buy this project and download/modify it how often you want.
java.ee.sk.test.jdigidoc Maven / Gradle / Ivy
/*
* jdigidoc.java
* PROJECT: JDigiDoc
* DESCRIPTION: Generic test programm for JDigiDoc library.
* Provides a command-line interface to most features of the library.
* AUTHOR: Veiko Sinivee, S|E|B IT Partner Estonia
*==================================================
* Copyright (C) AS Sertifitseerimiskeskus
* This library is free software; you can redistribute it and/or
* modify it under the terms of the GNU Lesser General Public
* License as published by the Free Software Foundation; either
* version 2.1 of the License, or (at your option) any later version.
* This library is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
* Lesser General Public License for more details.
* GNU Lesser General Public Licence is available at
* http://www.gnu.org/copyleft/lesser.html
*==================================================
*/
package ee.sk.test;
import ee.sk.digidoc.*;
import ee.sk.xmlenc.*;
import ee.sk.xmlenc.factory.*;
import java.io.*;
import java.net.InetAddress;
import java.net.NetworkInterface;
import ee.sk.digidoc.factory.*;
import ee.sk.utils.*;
import java.util.*;
import java.security.cert.X509Certificate;
/**
* jdigidoc is a small command-line programm providing
* an interface to most of the librarys functionality and
* also documenting the library and serving as sample
* code for other developers.
* @author Veiko Sinivee
* @version 1.0
*/
public class jdigidoc {
/** signed doc object if used */
private SignedDoc m_sdoc;
/** encrypted data object if used */
private EncryptedData m_cdoc;
String sFilIn, sFilOut;
/**
* Constructor for jdigidoc
*/
public jdigidoc()
{
m_sdoc = null;
m_cdoc = null;
}
/**
* Checks for commands related to
* creating signed documents
* @param args command line arguments
* @return success flag
*/
private boolean runNewSignedDocCmds(String[] args)
{
boolean bFound = false, bOk = true;
String format = SignedDoc.FORMAT_DIGIDOC_XML;
String version = null, ver = null, profile = null;
for(int i = 0; (args != null) && (i < args.length); i++) {
if(args[i].equals("-ddoc-new")) {
bFound = true;
if(i < args.length - 1 && !args[i+1].startsWith("-")) {
format = args[i+1];
i++;
}
if(i < args.length - 1 && !args[i+1].startsWith("-")) {
version = args[i+1];
i++;
}
}
}
if(bFound) {
try {
// this profile & version logic is really done in DigiDocGenFactory.createSignedDoc()
profile = version;
//ver = version;
if(format != null && format.equals(SignedDoc.FORMAT_BDOC)) {
if(ver == null)
ver = SignedDoc.BDOC_VERSION_2_1;
if(profile != null && profile.equals("TS")) {
System.out.println("TS profile is currently not supported!");
return false;
}
if(profile != null && version.equals(SignedDoc.BDOC_VERSION_2_1)) {
profile = SignedDoc.BDOC_PROFILE_TM;
}
// if profile is not set then lookup default profile from config
// if not set in config use TM as default
if(profile == null || profile.trim().length() == 0)
profile = ConfigManager.instance().getStringProperty("DIGIDOC_DEFAULT_PROFILE", SignedDoc.BDOC_PROFILE_TM);
}
if(format != null && (format.equals(SignedDoc.FORMAT_SK_XML) || format.equals(SignedDoc.FORMAT_DIGIDOC_XML))) {
if(ver == null)
ver = SignedDoc.VERSION_1_3;
profile = SignedDoc.BDOC_PROFILE_TM; // in ddoc format we used only TM
}
System.out.println("Creating digidoc: " + format + " / " + ver + " / " + profile);
m_sdoc = new SignedDoc(format, ver);
m_sdoc.setProfile(profile);
//m_sdoc = DigiDocGenFactory.createSignedDoc(format, version, version);
} catch(Exception ex) {
bOk = false;
System.err.println("ERROR: creating digidoc format: " + format + " / " + version + " - " + ex);
ex.printStackTrace(System.err);
}
}
return bOk; // nothing to do?
}
/**
* Checks for commands related to
* writing signed documents
* @param args command line arguments
* @return success flag
*/
private boolean runWriteSignedDocCmds(String[] args)
{
boolean bOk = true, bFound = false, bStream = false, bOStream = false;
String outFile = null;
for(int i = 0; (args != null) && (i < args.length); i++) {
if(args[i].equals("-ddoc-out") || args[i].equals("-ddoc-out-stream") || args[i].equals("-ddoc-out-ostream")) {
bFound = true;
if(args[i].equals("-ddoc-out-stream"))
bStream = true;
if(args[i].equals("-ddoc-out-ostream"))
bOStream = true;
if(i < args.length - 1 && !args[i+1].startsWith("-")) {
sFilOut = outFile = args[i+1];
i++;
} else {
bOk = false;
System.err.println("Missing output file of -ddoc-out command");
}
}
}
//System.out.println("Out: " + outFile + " found: " + bFound);
if(bFound && outFile != null) {
try {
if(m_sdoc == null) {
System.err.println("No signed document to sign. Use -ddoc-in or -ddoc-new commands!");
return false;
}
if(bOStream) {
ObjectOutputStream oos = new ObjectOutputStream(new FileOutputStream(outFile));
oos.writeObject(m_sdoc);
oos.close();
} else if(bStream) {
FileOutputStream fos = new FileOutputStream(outFile);
m_sdoc.writeToStream(fos);
fos.close();
} else {
//System.out.println("write: " + outFile);
m_sdoc.writeToFile(new File(outFile));
}
bOk = true;
} catch(Exception ex) {
bOk = false;
System.err.println("ERROR: writing digidoc: " + ex);
ex.printStackTrace(System.err);
}
}
return bOk; // nothing to do?
}
/**
* Checks for commands related to
* signing signed documents
* @param args command line arguments
* @return success flag
*/
private boolean runSignSignedDocCmds(String[] args)
{
boolean bOk = true;
String sImpl = null;
for(int i = 0; (args != null) && (i < args.length); i++) {
if(args[i].equals("-ddoc-sign")) {
String pin = null;
String rollReso = null;
String country = null;
String city = null;
String state = null;
String zip = null;
String profile = null;
String keystoreFile = null;
int nSlot = 0;
if(i < args.length - 1 && !args[i+1].startsWith("-")) {
pin = args[i+1];
i++;
}
if(i < args.length - 1 && !args[i+1].startsWith("-")) {
rollReso = args[i+1];
i++;
}
if(i < args.length - 1 && !args[i+1].startsWith("-")) {
country = args[i+1];
i++;
}
if(i < args.length - 1 && !args[i+1].startsWith("-")) {
state = args[i+1];
i++;
}
if(i < args.length - 1 && !args[i+1].startsWith("-")) {
city = args[i+1];
i++;
}
if(i < args.length - 1 && !args[i+1].startsWith("-")) {
zip = args[i+1];
i++;
}
if(i < args.length - 1 && !args[i+1].startsWith("-")) {
nSlot = Integer.parseInt(args[i+1]);
i++;
}
if(i < args.length - 1 && !args[i+1].startsWith("-")) {
profile = args[i+1];
i++;
}
if(i < args.length - 1 && !args[i+1].startsWith("-")) {
sImpl = args[i+1];
i++;
}
if(i < args.length - 1 && !args[i+1].startsWith("-")) {
keystoreFile = args[i+1];
i++;
}
if(pin != null) {
try {
if(m_sdoc == null) {
System.err.println("No signed document to sign. Use -ddoc-in or -ddoc-new commands!");
return false;
}
// roll/resolutsioon
String[] roles = null;
if(rollReso != null && rollReso.trim().length() > 0) {
roles = new String[1];
roles[0] = rollReso;
}
// address
SignatureProductionPlace adr = null;
if(country != null || state != null || city != null || zip != null)
adr = new SignatureProductionPlace(city, state, country, zip);
System.out.println("Signing digidoc");
ConfigManager cfg = ConfigManager.instance();
System.err.println("Signing of type: " + sImpl);
SignatureFactory sigFac = null;
ArrayList lerrs = null;
// check old vers
DigiDocException ex1 = m_sdoc.validateFormatAndVersion();
if(ex1 != null) {
System.err.println("Validation error: " + ex1 + ". Signing cancelled!");
return false;
}
if(sImpl != null) {
if(sImpl.equals(SignatureFactory.SIGFAC_TYPE_PKCS11)) {
sigFac = cfg.getSignatureFactoryOfType(sImpl);
// default pkcs11 has no additional params
} else if(sImpl.equals(SignatureFactory.SIGFAC_TYPE_PKCS12)) {
sigFac = cfg.getSignatureFactoryOfType(sImpl);
Pkcs12SignatureFactory p12sfac = (Pkcs12SignatureFactory)sigFac;
if(keystoreFile == null || keystoreFile.trim().length() == 0)
keystoreFile = cfg.getProperty("DIGIDOC_KEYSTORE_FILE");
if(pin == null || pin.trim().length() == 0)
pin = cfg.getProperty("DIGIDOC_KEYSTORE_PASSWD");
if(p12sfac != null)
bOk = p12sfac.load(keystoreFile, SignatureFactory.SIGFAC_TYPE_PKCS12, pin);
} else {
System.err.println("No signature factory of type: " + sImpl);
return false;
}
} else {
sigFac = cfg.getSignatureFactory();
if(sigFac != null && sigFac.getType().equals(SignatureFactory.SIGFAC_TYPE_PKCS12)) {
Pkcs12SignatureFactory p12sfac = (Pkcs12SignatureFactory)sigFac;
if(keystoreFile == null || keystoreFile.trim().length() == 0)
keystoreFile = cfg.getProperty("DIGIDOC_KEYSTORE_FILE");
if(pin == null || pin.trim().length() == 0)
pin = cfg.getProperty("DIGIDOC_KEYSTORE_PASSWD");
bOk = p12sfac.load(keystoreFile, SignatureFactory.SIGFAC_TYPE_PKCS12, pin);
}
}
if(!bOk) {
System.out.println("Failed to load signature token!");
return bOk;
}
System.out.println("GET Cert in slot: " + nSlot + " cmd-profile: " + profile);
X509Certificate cert = null;
if(sigFac != null)
cert = sigFac.getCertificate(nSlot, pin);
if(cert == null) {
System.out.println("Failed to load signers certificate!");
return bOk;
}
if(profile == null)
profile = m_sdoc.getProfile();
if(profile != null && (m_sdoc.getProfile() == null || !m_sdoc.getProfile().equals(profile))) {
if(profile.equals("TM.v21")) {
m_sdoc.setProfile(SignedDoc.BDOC_PROFILE_TM);
m_sdoc.setVersion(SignedDoc.BDOC_VERSION_2_1);
} else {
if(m_sdoc.getProfile() == null || m_sdoc.getProfile().trim().length() == 0 || m_sdoc.getProfile().trim().equalsIgnoreCase("BES"))
m_sdoc.setProfile(profile);
}
}
//System.out.println("Prepare signature, cert: " + ((cert != null) ? "OK" : "NULL") + " status: " + bOk + " container-profile: " + profile);
Signature sig = m_sdoc.prepareSignature(cert, roles, adr);
if(profile == null || profile.trim().length() == 0 || profile.trim().equalsIgnoreCase("BES"))
profile = ConfigManager.instance().getStringProperty("DIGIDOC_DEFAULT_PROFILE", "TM");
System.out.println("Prepare signature, cert: " + ((cert != null) ? "OK" : "NULL") + " status: " + bOk + " cfg-profile: " + profile + " sig-profile: " + sig.getProfile());
if(profile != null && (sig.getProfile() == null || !profile.startsWith(sig.getProfile()))) {
sig.setProfile(profile);
if(m_sdoc.getProfile() == null || m_sdoc.getProfile().trim().length() == 0 || m_sdoc.getProfile().trim().equalsIgnoreCase("BES"))
m_sdoc.setProfile(profile);
}
if(profile != null && profile.trim().equals("TS")) {
System.out.println("TS profile is currently not supported!");
return false;
}
byte[] sidigest = null;
if(sigFac.getType().equals(SignatureFactory.SIGFAC_TYPE_PKCS11))
sidigest = sig.calculateSignedInfoDigest();
if(sigFac.getType().equals(SignatureFactory.SIGFAC_TYPE_PKCS12))
sidigest = sig.calculateSignedInfoXML();
System.out.println("Create signature, cert: " + ((cert != null) ? "OK" : "NULL") + " status: " + bOk + " sig-profile: " + sig.getProfile());
byte[] sigval = ((sidigest != null) ? sigFac.sign(sidigest, nSlot, pin, sig) : null);
// finalize signature up to default profile
System.out.println("Finalize signature: " + sig.getId() + " profile: " + sig.getProfile() + " sig-len: " + ((sigval != null) ? sigval.length : 0));
sig.setSignatureValue(sigval);
// set HTTP_FROM to some value
sig.setHttpFrom(composeHttpFrom());
if(sig.getProfile().trim().equals(SignedDoc.BDOC_PROFILE_TM) ||
sig.getProfile().equals(SignedDoc.BDOC_PROFILE_TS) ||
sig.getProfile().equals(SignedDoc.BDOC_PROFILE_TSA) ||
sig.getProfile().equals(SignedDoc.BDOC_PROFILE_T) ||
sig.getProfile().equals(SignedDoc.BDOC_PROFILE_CL) ||
sig.getProfile().equals(SignedDoc.BDOC_PROFILE_TMA))
sig.getConfirmation();
} catch(Exception ex) {
bOk = false;
System.err.println("ERROR signing: " + ex);
ex.printStackTrace(System.err);
}
} else {
bOk = false;
System.err.println("Missing pin of -ddoc-sign command");
}
}
}
return bOk; // nothing to do?
}
/**
* Checks for commands related to
* calculating signature value for later signing in online plugin etc.
* @param args command line arguments
* @return success flag
*/
private boolean runCalcSignCmds(String[] args)
{
boolean bOk = true;
for(int i = 0; (args != null) && (i < args.length); i++) {
if(args[i].equals("-ddoc-calc-sign")) {
String certFile = null;
String rollReso = null;
String country = null;
String city = null;
String state = null;
String zip = null;
String profile = null;
if(i < args.length - 1 && !args[i+1].startsWith("-")) {
certFile = args[i+1];
i++;
}
if(i < args.length - 1 && !args[i+1].startsWith("-")) {
rollReso = args[i+1];
i++;
}
if(i < args.length - 1 && !args[i+1].startsWith("-")) {
country = args[i+1];
i++;
}
if(i < args.length - 1 && !args[i+1].startsWith("-")) {
state = args[i+1];
i++;
}
if(i < args.length - 1 && !args[i+1].startsWith("-")) {
city = args[i+1];
i++;
}
if(i < args.length - 1 && !args[i+1].startsWith("-")) {
zip = args[i+1];
i++;
}
if(i < args.length - 1 && !args[i+1].startsWith("-")) {
profile = args[i+1];
i++;
}
if(certFile != null) {
try {
if(m_sdoc == null) {
System.err.println("No signed document to calc-sign. Use -ddoc-in or -ddoc-new commands!");
return false;
}
// roll/resolutsioon
String[] roles = null;
if(rollReso != null && rollReso.trim().length() > 0) {
roles = new String[1];
roles[0] = rollReso;
}
// address
SignatureProductionPlace adr = null;
if(country != null || state != null || city != null || zip != null)
adr = new SignatureProductionPlace(city, state, country, zip);
System.out.println("Calculating signature");
ConfigManager cfg = ConfigManager.instance();
ArrayList lerrs = null;
// check old vers
DigiDocException ex1 = m_sdoc.validateFormatAndVersion();
if(ex1 != null) {
System.err.println("Validation error: " + ex1 + ". Signing cancelled!");
return false;
}
System.out.println("GET Cert in file: " + certFile + " cmd-profile: " + profile);
if(profile == null)
profile = m_sdoc.getProfile();
X509Certificate cert = m_sdoc.readCertificate(certFile);
System.out.println("Prepare signature, cert: " + ((cert != null) ? "OK" : "NULL") + " status: " + bOk + " container-profile: " + profile);
Signature sig = m_sdoc.prepareSignature(cert, roles, adr);
if(profile == null || profile.trim().length() == 0 || profile.trim().equalsIgnoreCase("BES"))
profile = ConfigManager.instance().getStringProperty("DIGIDOC_DEFAULT_PROFILE", "TM");
System.out.println("Prepare signature, cert: " + ((cert != null) ? "OK" : "NULL") + " status: " + bOk + " cfg-profile: " + profile);
if(profile != null && (sig.getProfile() == null || !sig.getProfile().equals(profile))) {
sig.setProfile(profile);
if(m_sdoc.getProfile() == null || m_sdoc.getProfile().trim().length() == 0 || m_sdoc.getProfile().trim().equalsIgnoreCase("BES"))
m_sdoc.setProfile(profile);
}
if(profile != null && profile.trim().equals("TS")) {
System.out.println("TS profile is currently not supported!");
return false;
}
byte[] sidigest = sig.calculateSignedInfoDigest();
if(sidigest != null) {
String sDigHex = ConvertUtils.bin2hex(sidigest);
System.out.println("SignatureHash id: " + sig.getId() + " hash: " + sDigHex);
} else {
System.err.println("ERROR: calculating signed info digest");
}
} catch(Exception ex) {
bOk = false;
System.err.println("ERROR: calculating signature value: " + ex);
ex.printStackTrace(System.err);
}
} else {
bOk = false;
System.err.println("Missing certFile of -ddoc-calc-sign command");
}
}
}
return bOk; // nothing to do?
}
/**
* Checks for commands related to
* adding hex signature value to signature without value and getting confirmation
* @param args command line arguments
* @return success flag
*/
private boolean runAddSignValueCmds(String[] args)
{
boolean bOk = true;
for(int i = 0; (args != null) && (i < args.length); i++) {
if(args[i].equals("-ddoc-add-sign-value")) {
String signFile = null;
String sigId = null;
if(i < args.length - 1 && !args[i+1].startsWith("-")) {
signFile = args[i+1];
i++;
}
if(i < args.length - 1 && !args[i+1].startsWith("-")) {
sigId = args[i+1];
i++;
}
if(signFile != null && sigId != null) {
try {
if(m_sdoc == null) {
System.err.println("No signed document to calc-sign. Use -ddoc-in or -ddoc-new commands!");
return false;
}
// read signature value
byte[] bValHex = SignedDoc.readFile(new File(signFile));
String sValHex = new String(bValHex).trim();
System.out.println("Sign val: " + sValHex + " len: " + sValHex.length());
byte[] sigval = ConvertUtils.hex2bin(sValHex);
if(sigval == null || sigval.length < 128) {
System.err.println("Must provide at least 128 bytes rsa signature value in hex encoding!");
return false;
}
// find signature to finalize
Signature sig = m_sdoc.findSignatureById(sigId);;
if(sig == null) {
System.err.println("No signature found with id: " + sigId);
return false;
}
sig.setSignatureValue(sigval);
System.out.println("Getting confirmation for signature: " + sig.getId());
sig.getConfirmation();
} catch(Exception ex) {
bOk = false;
System.err.println("ERROR: adding signature value: " + ex);
ex.printStackTrace(System.err);
}
} else {
bOk = false;
System.err.println("Missing signFile or sigId of -ddoc-add-sign-value command");
}
}
}
return bOk; // nothing to do?
}
/**
* Checks for commands related to
* adding data files to signed documents
* @param args command line arguments
* @return success flag
*/
private boolean runAddSignedDocCmds(String[] args)
{
boolean bOk = true;
for(int i = 0; (args != null) && (i < args.length); i++) {
if(args[i].equals("-ddoc-add")) {
String inFile = null;
String inMime = null;
String inContent = DataFile.CONTENT_EMBEDDED_BASE64;
if(m_sdoc != null && m_sdoc.getFormat().equals(SignedDoc.FORMAT_BDOC))
inContent = DataFile.CONTENT_BINARY;
if(i < args.length - 1 && !args[i+1].startsWith("-")) {
inFile = args[i+1];
i++;
}
if(i < args.length - 1 && !args[i+1].startsWith("-")) {
inMime = args[i+1];
i++;
}
if(i < args.length - 1 && !args[i+1].startsWith("-")) {
inContent = args[i+1];
i++;
}
if(inFile != null && inMime != null) {
try {
if(m_sdoc == null) {
System.out.println("Creating digidoc: " + SignedDoc.FORMAT_DIGIDOC_XML + ", " + SignedDoc.VERSION_1_3);
m_sdoc = new SignedDoc(SignedDoc.FORMAT_DIGIDOC_XML, SignedDoc.VERSION_1_3);
}
System.out.println("Adding data-file: " + inFile + ", " + inMime + ", " + inContent);
File f = new File(inFile);
if(!f.isFile() && !f.canRead()) {
System.err.println("File not found: " + inFile);
return false;
}
//throw new DigiDocException(DigiDocException.ERR_DATA_FILE_FILE_NAME);
DataFile df = m_sdoc.addDataFile(new File(inFile), inMime, inContent);
} catch(Exception ex) {
bOk = false;
System.err.println("ERROR: adding DataFile: " + ex);
ex.printStackTrace(System.err);
}
} else {
bOk = false;
System.err.println("Missing input file or mime type of -ddoc-add command");
}
}
}
return bOk; // nothing to do?
}
/**
* Checks for commands related to
* adding data files to signed documents from memory. Uses setBody()
* @param args command line arguments
* @return success flag
*/
private boolean runAddMemSignedDocCmds(String[] args)
{
boolean bOk = true;
for(int i = 0; (args != null) && (i < args.length); i++) {
if(args[i].equals("-ddoc-add-mem")) {
String inFile = null;
String inMime = null;
String inContent = DataFile.CONTENT_EMBEDDED_BASE64;
if(m_sdoc != null && m_sdoc.getFormat().equals(SignedDoc.FORMAT_BDOC))
inContent = DataFile.CONTENT_BINARY;
if(i < args.length - 1 && !args[i+1].startsWith("-")) {
inFile = args[i+1];
i++;
}
if(i < args.length - 1 && !args[i+1].startsWith("-")) {
inMime = args[i+1];
i++;
}
if(i < args.length - 1 && !args[i+1].startsWith("-")) {
inContent = args[i+1];
i++;
}
if(inFile != null && inMime != null) {
try {
if(m_sdoc == null) {
System.out.println("Creating digidoc: " + SignedDoc.FORMAT_DIGIDOC_XML + ", " + SignedDoc.VERSION_1_3);
m_sdoc = new SignedDoc(SignedDoc.FORMAT_DIGIDOC_XML, SignedDoc.VERSION_1_3);
}
System.out.println("Adding mem-data-file: " + inFile + ", " + inMime + ", " + inContent);
File f = new File(inFile);
if(!f.isFile() && !f.canRead()) {
System.err.println("File not found: " + inFile);
return false;
}
byte[] data = SignedDoc.readFile(f);
DataFile df = new DataFile(m_sdoc.getNewDataFileId(), inContent, f.getName(), inMime, m_sdoc);
df.setBody(data);
m_sdoc.addDataFile(df);
} catch(Exception ex) {
bOk = false;
System.err.println("ERROR: adding DataFile: " + ex);
ex.printStackTrace(System.err);
}
} else {
bOk = false;
System.err.println("Missing input file or mime type of -ddoc-add command");
}
}
}
return bOk; // nothing to do?
}
private boolean isWarning(SignedDoc sdoc, DigiDocException ex)
{
if(ex != null &&
(ex.getCode() == DigiDocException.ERR_DF_INV_HASH_GOOD_ALT_HASH ||
ex.getCode() == DigiDocException.ERR_OLD_VER ||
ex.getCode() == DigiDocException.ERR_TEST_SIGNATURE ||
ex.getCode() == DigiDocException.WARN_WEAK_DIGEST ||
(ex.getCode() == DigiDocException.ERR_ISSUER_XMLNS && !sdoc.getFormat().equals(SignedDoc.FORMAT_SK_XML))))
return true;
return false;
}
private boolean hasNonWarningErrs(SignedDoc sdoc, ArrayList lerrs)
{
for(int i = 0; (lerrs != null) && (i < lerrs.size()); i++) {
DigiDocException ex = (DigiDocException)lerrs.get(i);
if(!isWarning(sdoc, ex)) {
return true;
}
}
return false;
}
/**
* Checks for commands related to
* validating signed documents
* @param args command line arguments
* @return success flag
*/
private boolean runValidateSignedDocCmds(String[] args)
{
boolean bFound = false, bOk = true, b = false, bLibErrs = false;
for(int i = 0; (args != null) && (i < args.length); i++) {
if(args[i].equals("-ddoc-validate")) {
bFound = true;
}
if(args[i].equals("-libraryerrors")) {
bLibErrs = true;
}
}
if(bFound) {
if(m_sdoc != null) {
System.out.println("Validating DigiDoc document: " + m_sdoc.getFormat() + "/" + m_sdoc.getVersion() + " profile: " + m_sdoc.getProfile());
ArrayList lerrs = m_sdoc.verify(true, true);
if(lerrs.size() > 0)
printErrsAndWarnings(m_sdoc, lerrs, bLibErrs);
if(SignedDoc.hasFatalErrs(lerrs))
return false;
bOk = !hasNonWarningErrs(m_sdoc, lerrs);
// display data files
for(int i = 0; i < m_sdoc.countDataFiles(); i++) {
DataFile df = m_sdoc.getDataFile(i);
System.out.println("\tDataFile: " + df.getId() + " file: " + df.getFileName() +
" mime: " + df.getMimeType() + " size: " + df.getSize());
ArrayList lerrs1 = new ArrayList();
lerrs1 = df.validate(true);
if(lerrs1.size() > 0)
printErrsAndWarnings(m_sdoc, lerrs1, bLibErrs);
}
// display signatures
for(int i = 0; i < m_sdoc.countSignatures(); i++) {
Signature sig = m_sdoc.getSignature(i);
System.out.println("\tSignature: " + sig.getId() + " profile: " + sig.getProfile());
KeyInfo keyInfo = m_sdoc.getSignature(i).getKeyInfo();
String userId = null, firstName = null, familyName = null, cn = null;
//System.out.println("\tSignature: " + sig.getId() + " profile: " + sig.getProfile() + " key: " + ((keyInfo != null) ? "OK" : "NULL"));
if(keyInfo != null) {
userId = keyInfo.getSubjectPersonalCode();
firstName = keyInfo.getSubjectFirstName();
familyName = keyInfo.getSubjectLastName();
if(keyInfo.getSignersCertificate() != null)
cn = SignedDoc.getCommonName(keyInfo.getSignersCertificate().getSubjectDN().getName());
}
ArrayList lerrs1 = new ArrayList();
b = sig.verify(m_sdoc, lerrs1);
X509Certificate cert = null;
CertValue cv = sig.getCertValueOfType(CertValue.CERTVAL_TYPE_SIGNER);
if(cv != null)
cert = cv.getCert();
if(cv != null && DigiDocGenFactory.isTestCard(cert)) {
lerrs1.add(new DigiDocException(DigiDocException.ERR_TEST_SIGNATURE, "Test signature!", null));
}
DigiDocVerifyFactory.verifySignatureFromLiveAndOcspFromTest(sig, lerrs1);
System.out.print("\tSignature: " + sig.getId() + " profile: " + sig.getProfile() + " - ");
System.out.print(cn);
if(!b && hasNonWarningErrs(m_sdoc, lerrs1))
System.out.println(" --> ERROR");
else
System.out.println(" --> OK");
printErrsAndWarnings(m_sdoc, lerrs1, bLibErrs);
}
} else
return false; // nothing read in to display
}
return bOk; // nothing to do?
}
/**
* Checks for commands related to
* displaying signed documents
* @param args command line arguments
* @return success flag
*/
private boolean runNotarizeSignedDocCmds(String[] args)
{
boolean bFound = false;
for(int i = 0; (args != null) && (i < args.length); i++) {
if(args[i].equals("-ddoc-notarize")) {
bFound = true;
break;
}
}
if(bFound) {
if(m_sdoc != null) {
System.out.println("Notarizing digidoc: ");
// display signatures
for(int i = 0; i < m_sdoc.countSignatures(); i++) {
Signature sig = m_sdoc.getSignature(i);
System.out.print("\tSignature: " + sig.getId() + " - ");
KeyInfo keyInfo = m_sdoc.getSignature(i).getKeyInfo();
String userId = keyInfo.getSubjectPersonalCode();
String firstName = keyInfo.getSubjectFirstName();
String familyName = keyInfo.getSubjectLastName();
//String timeStamp = sdoc.getSignature(i).getSignedProperties().getSigningTime().toString();
System.out.println(userId + "," + firstName + "," + familyName);
// get confirmation
try {
sig.getConfirmation();
} catch(DigiDocException ex) {
System.out.println("ERROR: getting confirmation for: " + sig.getId() +
" - " + ex);
}
ArrayList errs = sig.verify(m_sdoc, false, true);
if(errs.size() == 0)
System.out.println(" --> OK");
else
System.out.println(" --> ERROR");
for(int j = 0; j < errs.size(); j++)
System.out.println("\t\t" + (DigiDocException)errs.get(i));
}
} else
return false; // nothing read in to display
}
return true; // nothing to do?
}
/**
* Checks for commands related to
* extracting data of signed files
* @param args command line arguments
* @return success flag
*/
private boolean runExtractDataFileCmds(String[] args)
{
boolean bFound = false;
String dfId = null, dfName = null;
FileOutputStream fos = null;
InputStream is = null;
for(int i = 0; (args != null) && (i < args.length); i++) {
if(args[i].equals("-ddoc-extract")) {
dfId = args[i+1];
dfName = args[i+2];
break;
}
}
if(m_sdoc != null && dfId != null && dfName != null) {
System.out.println("Search DF: " + dfId);
// display signatures
bFound = false;
for(int i = 0; i < m_sdoc.countDataFiles(); i++) {
DataFile df = m_sdoc.getDataFile(i);
System.out.println("DF: " + i + " - " + df.getId());
if(df.getId().equals(dfId)) {
try {
System.out.println("Extracting DF: " + dfId + " to: " + dfName);
fos = new FileOutputStream(dfName);
is = df.getBodyAsStream();
if(is == null) {
System.err.println("DataFile has no data!");
return false;
}
byte[] data = new byte[4096];
int n = 0, m = 0;
while((n = is.read(data)) > 0) {
fos.write(data, 0, n);
m += n;
}
fos.close();
fos = null;
is.close();
is = null;
bFound = true;
System.out.println("Wrote: " + m + " bytes to: " + dfName);
} catch(Exception ex) {
System.err.println("ERROR: extracting df: " + dfId + " - " + ex);
} finally {
try {
if(is != null)
is.close();
if(fos != null)
fos.close();
} catch(Exception ex2) {
System.err.println("ERROR closing streams: " + ex2);
}
}
}
}
if(!bFound)
System.err.println("No datafile found: " + dfId);
}
return true; // nothing to do?
}
/**
* Checks for commands related to
* removing signatures
* @param args command line arguments
* @return success flag
*/
private boolean runRmvSigCmds(String[] args)
{
boolean bFound = false;
String sigId = null;
for(int i = 0; (args != null) && (i < args.length); i++) {
if(args[i].equals("-ddoc-rm-sig")) {
sigId = args[i+1];
break;
}
}
if(m_sdoc != null && sigId != null) {
System.out.println("Remove signature: " + sigId);
// display signatures
bFound = false;
for(int i = 0; i < m_sdoc.countSignatures(); i++) {
Signature sig = m_sdoc.getSignature(i);
//System.out.println("Sig: " + i + " - " + sig.getId());
if(sig.getId().equals(sigId)) {
try {
System.out.println("Removing signature: " + sigId);
m_sdoc.removeSignature(i);
bFound = true;
} catch(Exception ex) {
System.err.println("ERROR: removing signature: " + sigId + " - " + ex);
}
}
}
if(!bFound) {
System.err.println("No signature found: " + sigId);
return false;
}
}
return true; // nothing to do?
}
/**
* Checks for commands related to
* removing data-files
* @param args command line arguments
* @return success flag
*/
private boolean runRmvDfCmds(String[] args)
{
boolean bFound = false;
String dfId = null;
for(int i = 0; (args != null) && (i < args.length); i++) {
if(args[i].equals("-ddoc-rm-df")) {
dfId = args[i+1];
break;
}
}
if(m_sdoc != null && dfId != null) {
System.out.println("Remove data-file: " + dfId);
// display datafiles
bFound = false;
for(int i = 0; i < m_sdoc.countDataFiles(); i++) {
DataFile df = m_sdoc.getDataFile(i);
System.out.println("DF: " + i + " - " + df.getId());
if(df.getId().equals(dfId)) {
try {
//System.out.println("Removing data-file: " + dfId);
m_sdoc.removeDataFile(i);
bFound = true;
} catch(Exception ex) {
System.err.println("ERROR: removing data-file: " + dfId + " - " + ex);
}
}
}
if(!bFound) {
System.err.println("No data-file found: " + dfId);
return false;
}
}
return true; // nothing to do?
}
/**
* Checks for commands related to
* displaying encrypted documents
* @param args command line arguments
* @return success flag
*/
private boolean runListEncryptedDataCmds(String[] args)
{
boolean bFound = false;
for(int i = 0; (args != null) && (i < args.length); i++) {
if(args[i].equals("-cdoc-list")) {
bFound = true;
break;
}
}
if(bFound) {
if(m_cdoc != null) {
System.out.println("Encrypted document: ");
// display data object
System.out.print("\tEncryptedData ");
if(m_cdoc.getId() != null)
System.out.print(" Id: " + m_cdoc.getId());
if(m_cdoc.getType() != null)
System.out.print(" type: " + m_cdoc.getType());
if(m_cdoc.getMimeType() != null)
System.out.print(" mime: " + m_cdoc.getMimeType());
if(m_cdoc.getEncryptionMethod() != null)
System.out.print(" algorithm: " + m_cdoc.getEncryptionMethod());
System.out.println();
// display meta data
System.out.println("\tFORMAT: " + m_cdoc.getPropFormatName() +
" VER: " + m_cdoc.getPropFormatVersion());
System.out.println("\tLIBRARY: " + m_cdoc.getPropLibraryName() +
" VER: " + m_cdoc.getPropLibraryVersion());
int nFiles = m_cdoc.getPropOrigFileCount();
for(int i = 0; i < nFiles; i++) {
System.out.println("\tDF: " + m_cdoc.getPropOrigFileId(i) +
" FILE: " + m_cdoc.getPropOrigFileName(i) +
" SIZE: " + m_cdoc.getPropOrigFileSize(i) +
" MIME: " + m_cdoc.getPropOrigFileMime(i));
}
// display transport keys
for(int i = 0; i < m_cdoc.getNumKeys(); i++) {
EncryptedKey ekey = m_cdoc.getEncryptedKey(i);
System.out.print("\tEncryptedKey");
if(ekey.getId() != null)
System.out.print(" Id: " + ekey.getId());
if(ekey.getRecipient() != null)
System.out.print(" Recipient: " + ekey.getRecipient());
if(ekey.getKeyName() != null)
System.out.print(" key-name: " + ekey.getKeyName());
if(ekey.getCarriedKeyName() != null)
System.out.print(" carried-key-name: " + ekey.getCarriedKeyName());
if(ekey.getEncryptionMethod() != null)
System.out.print("\n\t\talgorithm: " + ekey.getEncryptionMethod());
if(ekey.getRecipientsCertificate() != null)
System.out.print("\n\t\tCERT: " + ekey.getRecipientsCertificate().getSubjectDN().getName());
System.out.println();
}
// encryption properties
System.out.print("\tEncryptionProperties");
if(m_cdoc.getEncryptionPropertiesId() != null)
System.out.print(" Id: " + m_cdoc.getEncryptionPropertiesId());
System.out.println();
for(int i = 0; i < m_cdoc.getNumProperties(); i++) {
EncryptionProperty eprop = m_cdoc.getProperty(i);
System.out.print("\t\tEncryptionProperty");
if(eprop != null) {
if(eprop.getId() != null)
System.out.print(" Id: " + eprop.getId());
if(eprop.getTarget() != null)
System.out.print(" Target: " + eprop.getTarget());
if(eprop.getName() != null)
System.out.print(" Name: " + eprop.getName());
if(eprop.getContent() != null)
System.out.print(" --> " + eprop.getContent());
}
System.out.println();
}
} else
return false; // nothing read in to display
}
return true; // nothing to do?
}
/**
* Checks for commands related to
* displaying encrypted documents
* @param args command line arguments
* @return success flag
*/
private boolean runValidateEncryptedDataCmds(String[] args)
{
boolean bFound = false;
for(int i = 0; (args != null) && (i < args.length); i++) {
if(args[i].equals("-cdoc-validate")) {
bFound = true;
break;
}
}
if(bFound) {
if(m_cdoc != null) {
System.out.println("Validating Encrypted document: ");
// display data files
ArrayList errs = m_cdoc.validate();
if(errs.size() == 0)
System.out.println(" --> OK");
else
System.out.println(" --> ERROR");
for(int j = 0; j < errs.size(); j++)
System.out.println("\t\t" + (DigiDocException)errs.get(j));
} else
return false; // nothing read in to display
}
return true; // nothing to do?
}
/**
* Checks for commands related to
* checking certificates
* @param args command line arguments
* @return success flag
*/
private boolean runCheckCertCmds(String[] args)
{
boolean bOk = true;
String inFile = null;
for(int i = 0; (args != null) && (i < args.length); i++) {
if(args[i].equals("-check-cert")) {
if(i < args.length - 1) {
inFile = args[i+1];
break;
}
else
bOk = false;
}
}
if(bOk && inFile != null) {
System.out.println("Reading certificate file: " + inFile);
try {
NotaryFactory notFac = ConfigManager.
instance().getNotaryFactory();
X509Certificate cert = SignedDoc.readCertificate(new File(inFile));
notFac.checkCertificate(cert);
System.out.println("Certificate is OK");
bOk = true;
} catch(Exception ex) {
bOk = false;
System.err.println("ERROR: checking certificate: " + inFile + " - " + ex);
ex.printStackTrace(System.err);
}
}
return bOk;
}
private void printErrsAndWarnings(SignedDoc sdoc, ArrayList lerrs, boolean bLibErrs)
{
for(int i = 0; i < lerrs.size(); i++) {
DigiDocException err = (DigiDocException)lerrs.get(i);
if(!isWarning(m_sdoc, err)) {
System.err.println("ERROR: " + err.getCode() + " - " + err.getMessage());
}
}
for(int i = 0; i < lerrs.size(); i++) {
DigiDocException err = (DigiDocException)lerrs.get(i);
if(isWarning(m_sdoc, err)) {
System.err.println("WARNING: " + err.getCode() + " - " + err.getMessage());
}
}
if(bLibErrs) {
for(int i = 0; i < lerrs.size(); i++) {
DigiDocException err = (DigiDocException)lerrs.get(i);
if(err.getCode() != DigiDocException.ERR_TEST_SIGNATURE)
System.err.println("LIBRARY-ERROR: " + err.getCode() + " - " + err.getMessage());
}
}
}
/**
* Checks for commands related to
* reading signed documents
* @param args command line arguments
* @return success flag
*/
private boolean runReadSignedDocCmds(String[] args, ArrayList lerr)
{
boolean bOk = true, bStream = false, bOStream = false, bLibErrs = false, bFatal=false;
String inFile = null;
for(int i = 0; (args != null) && (i < args.length); i++) {
if(args[i].equals("-libraryerrors"))
bLibErrs = true;
}
for(int i = 0; (args != null) && (i < args.length); i++) {
if(args[i].equals("-ddoc-in") || args[i].equals("-ddoc-in-stream") || args[i].equals("-ddoc-in-ostream")) {
if(args[i].equals("-ddoc-in-stream"))
bStream = true;
if(args[i].equals("-ddoc-in-ostream"))
bOStream = true;
if(i < args.length - 1) {
sFilIn = inFile = args[i+1];
break;
}
else
bOk = false;
}
}
if(bOk && inFile != null) {
System.out.println("Reading digidoc file: " + inFile);
DigiDocFactory digFac = null;
try {
if(bOStream) {
ObjectInputStream ois = new ObjectInputStream(new FileInputStream(inFile));
m_sdoc = (SignedDoc)ois.readObject();
bOk = true;
ois.close();
} else if(bStream) {
SAXDigiDocFactory saxFac = new SAXDigiDocFactory();
m_sdoc = saxFac.readSignedDocFromStreamOfType(new FileInputStream(inFile), saxFac.isBdocExtension(inFile), lerr);
bOk = !hasNonWarningErrs(m_sdoc, lerr);
printErrsAndWarnings(m_sdoc, lerr, bLibErrs);
} else {
digFac = ConfigManager.instance().getDigiDocFactory();
m_sdoc = digFac.readSignedDocOfType(inFile, digFac.isBdocExtension(inFile), lerr);
bOk = !hasNonWarningErrs(m_sdoc, lerr);
printErrsAndWarnings(m_sdoc, lerr, bLibErrs);
}
if(m_sdoc != null && m_sdoc.getFormat() != null && m_sdoc.getVersion() != null &&
(m_sdoc.getFormat().equals(SignedDoc.FORMAT_SK_XML) ||
(m_sdoc.getFormat().equals(SignedDoc.FORMAT_DIGIDOC_XML) &&
(m_sdoc.getVersion().equals(SignedDoc.VERSION_1_1) || m_sdoc.getVersion().equals(SignedDoc.VERSION_1_2))))) {
printErrsAndWarnings(m_sdoc, lerr, bLibErrs);
}
} catch(Exception ex) {
boolean bHasSigValCmd = false;
if(ex instanceof DigiDocException) {
DigiDocException dex = (DigiDocException)ex;
if(dex.getCode() == DigiDocException.ERR_SIGNATURE_VALUE_ID) {
for(int i = 0; (args != null) && (i < args.length); i++) {
if(args[i].equals("-ddoc-add-sign-value")) {
bHasSigValCmd = true;
break;
}
}
}
}
if(!bHasSigValCmd) {
bOk = false;
System.err.println("ERROR: reading digidoc: " + inFile + " - " + ex);
ex.printStackTrace(System.err);
} else {
System.err.println("Signature with no signature value read in input");
bOk = true;
}
}
}
return bOk;
}
/**
* Checks for commands related to
* reading encrypted documents
* @param args command line arguments
* @return success flag
*/
private boolean runReadEncryptedDataCmds(String[] args)
{
boolean bOk = true;
String inFile = null;
for(int i = 0; (args != null) && (i < args.length); i++) {
if(args[i].equals("-cdoc-in")) {
if(i < args.length - 2) {
sFilIn = inFile = args[i+1];
break;
}
else
bOk = false;
}
}
if(bOk && inFile != null) {
System.out.println("Reading encrypted file: " + inFile);
try {
EncryptedDataParser dencFac = ConfigManager.
instance().getEncryptedDataParser();
m_cdoc = dencFac.readEncryptedData(inFile);
bOk = true;
} catch(Exception ex) {
bOk = false;
System.err.println("ERROR: reading encrypted file: " + inFile + " - " + ex);
ex.printStackTrace(System.err);
}
}
return bOk;
}
/**
* Checks for commands related to
* reading signed documents
* @param args command line arguments
* @return success flag
*/
private boolean runEncryptEncryptedDataCmds(String[] args)
{
boolean bOk = true, bFound = false;
String inFile = null, outFile = null;
for(int i = 0; (args != null) && (i < args.length); i++) {
if(args[i].equals("-cdoc-encrypt")) {
bFound = true;
if(i < args.length - 1 && !args[i+1].startsWith("-")) {
inFile = args[i+1];
i++;
}
if(i < args.length - 1 && !args[i+1].startsWith("-")) {
outFile = args[i+1];
i++;
}
}
}
if(bFound) {
if(outFile != null && inFile != null) {
System.out.println("Encrypting file: " + inFile + " to: " + outFile);
bOk = m_cdoc.encryptFileData(inFile, outFile);
} else {
bOk = false;
System.err.println("Missing input file or output file of the -cdoc-encrypt command");
}
}
return bOk;
}
/**
* Checks for commands related to
* reading signed documents
* @param args command line arguments
* @return success flag
*/
private boolean runEncryptEncryptedDataSKCmds(String[] args)
{
boolean bOk = true, bFound = false;
String inFile = null, outFile = null;
FileOutputStream fos = null;
for(int i = 0; (args != null) && (i < args.length); i++) {
if(args[i].equals("-cdoc-encrypt-sk")) {
bFound = true;
if(i < args.length - 1 && !args[i+1].startsWith("-")) {
inFile = args[i+1];
i++;
}
if(i < args.length - 1 && !args[i+1].startsWith("-")) {
outFile = args[i+1];
i++;
}
}
}
if(bFound) {
if(outFile != null && inFile != null) {
System.out.println("Encrypting file: " + inFile + " to: " + outFile);
try {
File fIn = new File(inFile);
// create ddoc intermediate file
m_sdoc = new SignedDoc(SignedDoc.FORMAT_DIGIDOC_XML, SignedDoc.VERSION_1_3);
DataFile df = m_sdoc.addDataFile(new File(inFile), SignedDoc.xmlns_digidoc13, DataFile.CONTENT_EMBEDDED_BASE64);
byte[] data = SignedDoc.readFile(new File(inFile));
df.setBase64Body(data);
byte[] inData = m_sdoc.toXML().getBytes("UTF-8");
// TODO: check cdoc existencs
m_cdoc.setData(inData);
m_cdoc.setDataStatus(EncryptedData.DENC_DATA_STATUS_UNENCRYPTED_AND_NOT_COMPRESSED);
m_cdoc.addProperty(EncryptedData.ENCPROP_FILENAME, inFile + ".ddoc");
m_cdoc.setMimeType(EncryptedData.DENC_ENCDATA_TYPE_DDOC);
StringBuffer sb = new StringBuffer();
sb.append(fIn.getName());
sb.append("|");
sb.append(new Long(fIn.length()).toString());
sb.append("|");
sb.append("application/unknown|");
sb.append(df.getId());
m_cdoc.addProperty(EncryptedData.ENCPROP_ORIG_FILE, sb.toString());
m_cdoc.addProperty(EncryptedData.ENCPROP_ORIG_SIZE, new Long(data.length).toString());
m_cdoc.encrypt(EncryptedData.DENC_COMPRESS_NEVER);
fos = new FileOutputStream(outFile);
fos.write(m_cdoc.toXML());
fos.close();
fos = null;
bOk = true;
} catch(Exception ex) {
bOk = false;
System.err.println("ERROR: encrypting file: " + inFile + " - " + ex);
ex.printStackTrace(System.err);
} finally {
if(fos != null) {
try {
fos.close();
} catch(Exception ex2) {
System.err.println("Error closing streams: " + ex2);
}
}
}
} else {
bOk = false;
System.err.println("Missing input file or output file of the -cdoc-encrypt command");
}
}
return bOk;
}
/**
* Checks for commands related to
* decrypting encrypted documents
* @param args command line arguments
* @return success flag
*/
private boolean runDecryptEncryptedDataCmds(String[] args)
{
boolean bOk = true, bFound = false, bExtract = false;
String pin = null, outFile = null, keystoreFile = null;
String sImpl = SignatureFactory.SIGFAC_TYPE_PKCS11;
FileOutputStream fos = null;
InputStream is = null;
int nSlot = 0;
for(int i = 0; (args != null) && (i < args.length); i++) {
if(args[i].equals("-cdoc-decrypt") || args[i].equals("-cdoc-decrypt-sk")) {
if(args[i].equals("-cdoc-decrypt-sk"))
bExtract = true;
bFound = true;
if(i < args.length - 1 && !args[i+1].startsWith("-")) {
pin = args[i+1];
i++;
}
if(i < args.length - 1 && !args[i+1].startsWith("-")) {
outFile = args[i+1];
i++;
}
if(i < args.length - 1 && !args[i+1].startsWith("-")) {
nSlot = Integer.parseInt(args[i+1]);
i++;
}
if(i < args.length - 1 && !args[i+1].startsWith("-")) {
sImpl = args[i+1];
i++;
}
if(i < args.length - 1 && !args[i+1].startsWith("-")) {
keystoreFile = args[i+1];
i++;
}
}
}
if(bFound) {
if(pin != null && outFile != null) {
System.out.println("Decrypting to: " + outFile);
try {
// TODO: check cdoc existencs
ConfigManager cfg = ConfigManager.instance();
SignatureFactory sigFac = cfg.getSignatureFactoryOfType(sImpl);
if(sigFac == null) {
System.err.println("No signature factory of type: " + sImpl);
return false;
} else {
if(sigFac.getType().equals(SignatureFactory.SIGFAC_TYPE_PKCS12)) {
Pkcs12SignatureFactory p12sfac = (Pkcs12SignatureFactory)sigFac;
bOk = p12sfac.load(keystoreFile, SignatureFactory.SIGFAC_TYPE_PKCS12, pin);
}
}
if(!bOk) {
System.out.println("Failed to load signature token!");
return bOk;
}
X509Certificate cert = sigFac.getAuthCertificate(nSlot, pin);
int nIdx = m_cdoc.getRecvIndex(cert);
if(nIdx < 0) {
System.err.println("No decryption key found on smartcard to decrypt this file!");
return false;
}
m_cdoc.decrypt(sImpl, keystoreFile, nIdx, nSlot, pin);
//m_cdoc.decrypt(0, 0, pin);
if(bExtract) {
//System.out.println("extracting D0");
//System.out.println("Writing ddoc to: " + outFile);
fos = new FileOutputStream(outFile);
fos.write(m_cdoc.getData());
fos.close();
fos = null;
DigiDocFactory digFac = ConfigManager.instance().getDigiDocFactory();
m_sdoc = digFac.readSignedDoc(outFile);
DataFile df = m_sdoc.getDataFile(0);
//System.out.println("Writing extracted data to: " + outFile);
fos = new FileOutputStream(outFile);
is = df.getBodyAsStream();
if(is == null) {
System.err.println("DataFile has no data!");
return false;
}
byte[] data = new byte[4096];
int n = 0, m = 0;
while((n = is.read(data)) > 0) {
fos.write(data, 0, n);
m += n;
}
fos.close();
fos = null;
is.close();
is = null;
} else {
fos = new FileOutputStream(outFile);
fos.write(m_cdoc.getData());
fos.close();
fos = null;
}
bOk = true;
} catch(Exception ex) {
bOk = false;
System.err.println("ERROR: decrypting file: " + ex);
ex.printStackTrace(System.err);
} finally {
try {
if(fos != null)
fos.close();
if(is != null)
is.close();
} catch(Exception ex2) {
System.err.println("Error closing streams: " + ex2);
}
}
} else {
bOk = false;
System.err.println("Missing pin or output file of the -cdoc-decrypt command");
}
}
return bOk;
}
/**
* Checks for commands related to
* decrypting encrypted documents
* @param args command line arguments
* @return success flag
*/
private boolean runDecryptEncryptedDataPkcs12Cmds(String[] args)
{
boolean bOk = true, bFound = false, bExtract = false;
String outFile = null, keystoreFile = null, keystorePasswd = null, keystoreType="JKS";
FileOutputStream fos = null;
InputStream is = null;
for(int i = 0; (args != null) && (i < args.length); i++) {
if(args[i].equals("-cdoc-decrypt-pkcs12") || args[i].equals("-cdoc-decrypt-pkcs12-sk")) {
if(args[i].equals("-cdoc-decrypt-pkcs12-sk"))
bExtract = true;
bFound = true;
if(i < args.length - 1 && !args[i+1].startsWith("-")) {
keystoreFile = args[i+1];
i++;
}
if(i < args.length - 1 && !args[i+1].startsWith("-")) {
keystorePasswd = args[i+1];
i++;
}
if(i < args.length - 1 && !args[i+1].startsWith("-")) {
keystoreType = args[i+1];
i++;
}
if(i < args.length - 1 && !args[i+1].startsWith("-")) {
outFile = args[i+1];
i++;
}
}
}
if(bFound) {
if(keystoreFile != null && keystorePasswd != null && outFile != null) {
System.out.println("Decrypting to: " + outFile);
try {
// TODO: check cdoc existencs
// check recipient index
int nKey = -1;
try {
System.out.println("Load keystore: " + keystoreFile + " pwd: " + keystorePasswd);
Pkcs12SignatureFactory p12fac = new Pkcs12SignatureFactory();
p12fac.init();
p12fac.load(keystoreFile, keystoreType, keystorePasswd);
X509Certificate cert = p12fac.getAuthCertificate(0, keystorePasswd);
System.out.println("Cert: " + ((cert != null) ? cert.getSubjectDN().getName() : "NULL"));
nKey = m_cdoc.getRecvIndex(cert);
System.out.println("Using recipient: " + nKey);
} catch(Exception ex) {
System.err.println("ERROR: finding cdoc recipient: " + ex);
}
m_cdoc.decryptPkcs12(nKey, keystoreFile, keystorePasswd, keystoreType);
if(bExtract) {
//System.out.println("extracting D0");
//System.out.println("Writing ddoc to: " + outFile);
fos = new FileOutputStream(outFile);
fos.write(m_cdoc.getData());
fos.close();
fos = null;
DigiDocFactory digFac = ConfigManager.instance().getDigiDocFactory();
m_sdoc = digFac.readSignedDoc(outFile);
DataFile df = m_sdoc.getDataFile(0);
//System.out.println("Writing extracted data to: " + outFile);
fos = new FileOutputStream(outFile);
is = df.getBodyAsStream();
if(is == null) {
System.err.println("DataFile has no data!");
return false;
}
byte[] data = new byte[4096];
int n = 0, m = 0;
while((n = is.read(data)) > 0) {
fos.write(data, 0, n);
m += n;
}
fos.close();
fos = null;
is.close();
is = null;
} else {
fos = new FileOutputStream(outFile);
fos.write(m_cdoc.getData());
fos.close();
fos = null;
}
bOk = true;
} catch(Exception ex) {
bOk = false;
System.err.println("ERROR: decrypting file: " + ex);
ex.printStackTrace(System.err);
} finally {
try {
if(is != null)
is.close();
if(fos != null)
fos.close();
} catch(Exception ex2) {
System.err.println("ERROR: closing file streams - " + ex2);
}
}
} else {
bOk = false;
System.err.println("Missing keystore file, password or output file of the -cdoc-decrypt-pkcs12 command");
}
}
return bOk;
}
/**
* Checks for commands related to
* decrypting encrypted documents
* @param args command line arguments
* @return success flag
*/
private boolean runDecryptEncryptedDataPkcs12StreamCmds(String[] args)
{
boolean bOk = true, bFound = false, bExtract = false;
String inFile = null, outFile = null, keystoreFile = null, keystorePasswd = null, keystoreType="JKS", recipient = null;
FileInputStream fis = null;
FileOutputStream fos = null;
InputStream is = null;
for(int i = 0; (args != null) && (i < args.length); i++) {
if(args[i].equals("-cdoc-decrypt-pkcs12-stream") || args[i].equals("-cdoc-decrypt-pkcs12-stream-sk")) {
if(args[i].equals("-cdoc-decrypt-pkcs12-stream-sk"))
bExtract = true;
bFound = true;
if(i < args.length - 1 && !args[i+1].startsWith("-")) {
inFile = args[i+1];
i++;
}
if(i < args.length - 1 && !args[i+1].startsWith("-")) {
keystoreFile = args[i+1];
i++;
}
if(i < args.length - 1 && !args[i+1].startsWith("-")) {
keystorePasswd = args[i+1];
i++;
}
if(i < args.length - 1 && !args[i+1].startsWith("-")) {
keystoreType = args[i+1];
i++;
}
if(i < args.length - 1 && !args[i+1].startsWith("-")) {
outFile = args[i+1];
i++;
}
}
}
if(bFound) {
if(keystoreFile != null && keystorePasswd != null && outFile != null && inFile != null) {
try {
// TODO: check cdoc existencs
System.out.println("Decrypting: " + inFile + " to: " + outFile + " recv: " + recipient);
try {
fis = new FileInputStream(inFile);
fos = new FileOutputStream(outFile);
EncryptedStreamParser streamParser = ConfigManager.instance().getEncryptedStreamParser();
streamParser.decryptStreamUsingTokenType(fis, fos, 0, keystorePasswd, SignatureFactory.SIGFAC_TYPE_PKCS12, keystoreFile);
fos.close();
fos = null;
fis.close();
fis = null;
bOk = true;
} catch(Exception ex) {
bOk = false;
System.err.println("ERROR: decrypting file: " + ex);
ex.printStackTrace(System.err);
}
if(bExtract) {
DigiDocFactory digFac = ConfigManager.instance().getDigiDocFactory();
m_sdoc = digFac.readSignedDoc(outFile);
DataFile df = m_sdoc.getDataFile(0);
//System.out.println("Writing extracted data to: " + outFile);
fos = new FileOutputStream(outFile);
is = df.getBodyAsStream();
if(is == null) {
System.err.println("DataFile has no data!");
return false;
}
byte[] data = new byte[4096];
int n = 0, m = 0;
while((n = is.read(data)) > 0) {
fos.write(data, 0, n);
m += n;
}
fos.close();
fos = null;
is.close();
is = null;
}
bOk = true;
} catch(Exception ex) {
bOk = false;
System.err.println("ERROR: decrypting file: " + ex);
ex.printStackTrace(System.err);
} finally {
try {
if(is != null)
is.close();
if(fis != null)
fis.close();
if(fos != null)
fos.close();
} catch(Exception ex2) {
System.err.println("ERROR: closing file streams - " + ex2);
}
}
} else {
bOk = false;
System.err.println("Missing keystore file, password or output file of the -cdoc-decrypt-pkcs12-stream command");
}
}
return bOk;
}
/**
* Checks for commands related to
* decrypting large encrypted documents
* @param args command line arguments
* @return success flag
*/
private boolean runDecryptEncryptedStreamCmds(String[] args)
{
boolean bOk = true, bFound = false;
String pin = null, outFile = null, inFile = null;
FileInputStream fis = null;
FileOutputStream fos = null;
for(int i = 0; (args != null) && (i < args.length); i++) {
if(args[i].equals("-cdoc-decrypt-stream")) {
bFound = true;
if(i < args.length - 1 && !args[i+1].startsWith("-")) {
inFile = args[i+1];
i++;
}
if(i < args.length - 1 && !args[i+1].startsWith("-")) {
pin = args[i+1];
i++;
}
if(i < args.length - 1 && !args[i+1].startsWith("-")) {
outFile = args[i+1];
i++;
}
}
}
if(bFound) {
if(pin != null && outFile != null && inFile != null) {
System.out.println("Decrypting: " + inFile + " to: " + outFile);
try {
fis = new FileInputStream(inFile);
fos = new FileOutputStream(outFile);
EncryptedStreamParser streamParser = ConfigManager.instance().getEncryptedStreamParser();
streamParser.decryptStreamUsingTokenType(fis, fos, 0, pin, SignatureFactory.SIGFAC_TYPE_PKCS11, null);
fos.close();
fos = null;
fis.close();
fis = null;
bOk = true;
} catch(Exception ex) {
bOk = false;
System.err.println("ERROR: decrypting file: " + ex);
ex.printStackTrace(System.err);
} finally {
try {
if(fis != null)
fis.close();
if(fos != null)
fos.close();
} catch(Exception ex2) {
System.err.println("ERROR: closing file streams - " + ex2);
}
}
} else {
bOk = false;
System.err.println("Missing input file, recipient name, pin or output file of the -cdoc-decrypt-stream command");
}
}
return bOk;
}
/**
* Checks for commands related to
* decrypting large encrypted documents
* @param args command line arguments
* @return success flag
*/
private boolean runDecryptEncryptedStreamRecvCmds(String[] args)
{
boolean bOk = true, bFound = false;
String pin = null, outFile = null, inFile = null, recv = null;
FileInputStream fis = null;
FileOutputStream fos = null;
for(int i = 0; (args != null) && (i < args.length); i++) {
if(args[i].equals("-cdoc-decrypt-stream-recv")) {
bFound = true;
if(i < args.length - 1 && !args[i+1].startsWith("-")) {
inFile = args[i+1];
i++;
}
if(i < args.length - 1 && !args[i+1].startsWith("-")) {
pin = args[i+1];
i++;
}
if(i < args.length - 1 && !args[i+1].startsWith("-")) {
outFile = args[i+1];
i++;
}
if(i < args.length - 1 && !args[i+1].startsWith("-")) {
recv = args[i+1];
i++;
}
}
}
if(bFound) {
if(pin != null && outFile != null && inFile != null && recv != null) {
System.out.println("Decrypting: " + inFile + " to: " + outFile);
try {
fis = new FileInputStream(inFile);
fos = new FileOutputStream(outFile);
EncryptedStreamParser streamParser = ConfigManager.instance().getEncryptedStreamParser();
//streamParser.decryptStreamUsingTokenType(fis, fos, 0, pin, SignatureFactory.SIGFAC_TYPE_PKCS11, null);
streamParser.decryptStreamUsingRecipientName(fis, fos, 0, pin, recv);
fos.close();
fos = null;
fis.close();
fis = null;
bOk = true;
} catch(Exception ex) {
bOk = false;
System.err.println("ERROR: decrypting file: " + ex);
ex.printStackTrace(System.err);
} finally {
try {
if(fis != null)
fis.close();
if(fos != null)
fos.close();
} catch(Exception ex2) {
System.err.println("ERROR: closing file streams - " + ex2);
}
}
} else {
bOk = false;
System.err.println("Missing input file, recipient name, pin or output file of the -cdoc-decrypt-stream command");
}
}
return bOk;
}
/**
* Checks for commands related to
* decrypting large encrypted documents
* @param args command line arguments
* @return success flag
*/
private boolean runDecryptEncryptedStreamSlotAndLabelCmds(String[] args)
{
boolean bOk = true, bFound = false;
String pin = null, outFile = null, inFile = null, slot = null, label = null;
int nSlot = 0;
FileInputStream fis = null;
FileOutputStream fos = null;
for(int i = 0; (args != null) && (i < args.length); i++) {
if(args[i].equals("-cdoc-decrypt-stream-slot-label")) {
bFound = true;
if(i < args.length - 1 && !args[i+1].startsWith("-")) {
inFile = args[i+1];
i++;
}
if(i < args.length - 1 && !args[i+1].startsWith("-")) {
pin = args[i+1];
i++;
}
if(i < args.length - 1 && !args[i+1].startsWith("-")) {
outFile = args[i+1];
i++;
}
if(i < args.length - 1 && !args[i+1].startsWith("-")) {
slot = args[i+1];
if(slot != null && slot.length() > 0)
nSlot = Integer.parseInt(slot);
i++;
}
if(i < args.length - 1 && !args[i+1].startsWith("-")) {
label = args[i+1];
i++;
}
}
}
if(bFound) {
if(pin != null && outFile != null && inFile != null && label != null && nSlot > 0) {
System.out.println("Decrypting: " + inFile + " to: " + outFile);
try {
fis = new FileInputStream(inFile);
fos = new FileOutputStream(outFile);
EncryptedStreamParser streamParser = ConfigManager.instance().getEncryptedStreamParser();
streamParser.decryptStreamUsingRecipientSlotIdAndTokenLabel(fis, fos, nSlot, label, pin);
fos.close();
fos = null;
fis.close();
fis = null;
bOk = true;
} catch(Exception ex) {
bOk = false;
System.err.println("ERROR: decrypting file: " + ex);
ex.printStackTrace(System.err);
} finally {
try {
if(fis != null)
fis.close();
if(fos != null)
fos.close();
} catch(Exception ex2) {
System.err.println("ERROR: closing file streams - " + ex2);
}
}
} else {
bOk = false;
System.err.println("Missing input file, recipient name, pin or output file of the -cdoc-decrypt-stream command");
}
}
return bOk;
}
/**
* Checks for commands related to
* encrypting big files
* @param args command line arguments
* @return success flag
*/
private boolean runEncryptStreamCmds(String[] args)
{
boolean bOk = true, bFound = false;
String inFile = null, outFile = null;
for(int i = 0; (args != null) && (i < args.length); i++) {
if(args[i].equals("-cdoc-encrypt-stream")) {
bFound = true;
if(i < args.length - 1 && !args[i+1].startsWith("-")) {
inFile = args[i+1];
i++;
}
if(i < args.length - 1 && !args[i+1].startsWith("-")) {
outFile = args[i+1];
i++;
}
}
}
if(bFound) {
if(outFile != null && inFile != null) {
System.out.println("Encrypting file: " + inFile + " to: " + outFile);
try {
// TODO: check cdoc existencs
File fin = new File(inFile);
m_cdoc.addProperty(EncryptedData.ENCPROP_FILENAME, inFile);
if(inFile.endsWith(".bdoc") || inFile.endsWith(".asice"))
m_cdoc.setMimeType(SignedDoc.MIMET_FILE_CONTENT_20);
m_cdoc.encryptStream(new FileInputStream(inFile), new FileOutputStream(outFile), EncryptedData.DENC_COMPRESS_NEVER);
bOk = true;
} catch(Exception ex) {
bOk = false;
System.err.println("ERROR: encrypting file: " + inFile + " - " + ex);
ex.printStackTrace(System.err);
}
} else {
bOk = false;
System.err.println("Missing input file or output file of the -cdoc-encrypt-stream command");
}
}
return bOk;
}
/**
* Checks for commands related to
* adding recipients (EncryptedKey -s) encrypted documents
* @param args command line arguments
* @return success flag
*/
private boolean runAddRecipientsCmds(String[] args)
{
boolean bOk = true;
for(int i = 0; (args != null) && (i < args.length); i++) {
if(args[i].equals("-cdoc-recipient")) {
String certFile = null;
String recipient = null;
String keyName = null;
String carriedKeyName = null;
String sId = null;
if(i < args.length - 1 && !args[i+1].startsWith("-")) {
certFile = args[i+1];
i++;
}
if(i < args.length - 1 && !args[i+1].startsWith("-")) {
recipient = args[i+1];
i++;
}
if(i < args.length - 1 && !args[i+1].startsWith("-")) {
keyName = args[i+1];
i++;
}
if(i < args.length - 1 && !args[i+1].startsWith("-")) {
carriedKeyName = args[i+1];
i++;
}
if(certFile != null) {
try {
if(m_cdoc == null) {
System.out.println("Creating encrypted document");
m_cdoc = new EncryptedData(null, null, null, EncryptedData.DENC_XMLNS_XMLENC, EncryptedData.DENC_ENC_METHOD_AES128);
}
System.out.println("Adding recipient: " + certFile + ", " + recipient + ", " + keyName + ", " + carriedKeyName);
X509Certificate recvCert = SignedDoc.readCertificate(new File(certFile));
if(recvCert != null && recipient == null)
recipient = SignedDoc.getCommonName(recvCert.getSubjectDN().getName());
//System.out.println("Recipient: " + recipient);
if(sId == null) {
int n = m_cdoc.getNumKeys() + 1;
sId = "ID" + n;
}
EncryptedKey ekey = new EncryptedKey(sId, recipient, EncryptedData.DENC_ENC_METHOD_RSA1_5, keyName, carriedKeyName, recvCert);
m_cdoc.addEncryptedKey(ekey);
} catch(Exception ex) {
bOk = false;
System.err.println("ERROR: adding EncryptedKey: " + ex);
ex.printStackTrace(System.err);
}
} else {
bOk = false;
System.err.println("Missing certificate file of -cdoc-recipient command");
}
}
}
return bOk; // nothing to do?
}
/**
* Checks for configuration commands
* @param args command line arguments
* @return success flag
*/
private boolean runHelpCmds(String[] args)
{
boolean bOk = false;
for(int i = 0; (args != null) && (i < args.length); i++) {
if(args[i].equals("-?") || args[i].equals("-help")) {
return true;
}
}
if(args.length == 0) {
System.out.println("args: " + args.length);
return true;
}
return false;
}
/**
* Checks for configuration commands
* @param args command line arguments
* @return success flag
*/
private boolean runConfigCmds(String[] args)
{
boolean bOk = true;
String cfgFile = "jar://jdigidoc.cfg"; // default value
for(int i = 0; (args != null) && (i < args.length); i++) {
if(args[i].equals("-config")) {
if(i < args.length - 2)
cfgFile = args[i+1];
else
bOk = false;
}
}
if(bOk) {
System.out.println("Reading config file: " + cfgFile);
bOk = ConfigManager.init(cfgFile);
}
return bOk;
}
/**
* command for testing ddoc file for correct start and end tags
* Checks if rubbish bytes are at the end
* @param args command line arguments
* @return success flag
*/
private boolean runCheckValidDdocCmds(String[] args)
{
boolean bOk = true;
ByteArrayOutputStream bos = null;
FileInputStream fis = null;
for(int i = 0; (args != null) && (i < args.length); i++) {
if(args[i].equals("-cdoc-test")) {
String testFile = null;
if(i < args.length - 1 && !args[i+1].startsWith("-")) {
testFile = args[i+1];
i++;
}
if(testFile != null) {
try {
bos = new ByteArrayOutputStream();
fis = new FileInputStream(testFile);
byte[] data = new byte[1024];
int n = 0;
while((n = fis.read(data)) > 0)
bos.write(data, 0, n);
fis.close();
fis = null;
data = bos.toByteArray();
bos.close();
bos = null;
// now test it
String s = new String(data);
if(!s.startsWith("")) {
System.err.println("Invalid ddoc: " + testFile + " - bad file end");
bOk = false;
} else {
System.err.println("Good ddoc: " + testFile);
bOk = true;
}
} catch(Exception ex) {
System.err.println("ERROR: testing ddoc: " + testFile + " - " + ex);
ex.printStackTrace(System.err);
} finally {
try {
if(fis != null)
fis.close();
if(bos != null)
bos.close();
} catch(Exception ex2) {
System.err.println("ERROR: closing file streams - " + ex2);
}
}
} else {
bOk = false;
System.err.println("Missing certificate file of -cdoc-recipient command");
}
}
}
return bOk; // nothing to do?
}
private String composeHttpFrom()
{
// set HTTP_FROM to some value
String sFrom = null;
try {
NetworkInterface ni = null;
Enumeration eNi = NetworkInterface.getNetworkInterfaces();
if(eNi != null && eNi.hasMoreElements())
ni = (NetworkInterface)eNi.nextElement();
if(ni != null) {
InetAddress ia = null;
Enumeration eA = ni.getInetAddresses();
if(eA != null && eA.hasMoreElements())
ia = (InetAddress)eA.nextElement();
if(ia != null)
sFrom = ia.getHostAddress();
System.err.println("FROM: " + sFrom);
}
} catch(Exception ex2) {
System.err.println("ERROR: finding ip-adr: " + ex2);
}
return sFrom;
}
/**
* Checks for commands related to signing signed documents.
* Uses slot id and token label to identify token to be used for signing.
* @param args command line arguments
* @return success flag
*/
private boolean runSignSignedDocSlotLabelCmds(String[] args)
{
boolean bOk = true;
String sImpl = null;
for(int i = 0; (args != null) && (i < args.length); i++) {
if(args[i].equals("-ddoc-sign-slot-label")) {
String pin = null;
String rollReso = null;
String country = null;
String city = null;
String state = null;
String zip = null;
String profile = null;
String slot = null;
int nSlot = 0;
String label = null;
if(i < args.length - 1 && !args[i+1].startsWith("-")) {
slot = args[i+1];
if(slot != null && slot.length() > 0)
nSlot = Integer.parseInt(slot);
i++;
}
if(i < args.length - 1 && !args[i+1].startsWith("-")) {
label = args[i+1];
i++;
}
if(i < args.length - 1 && !args[i+1].startsWith("-")) {
pin = args[i+1];
i++;
}
if(i < args.length - 1 && !args[i+1].startsWith("-")) {
rollReso = args[i+1];
i++;
}
if(i < args.length - 1 && !args[i+1].startsWith("-")) {
country = args[i+1];
i++;
}
if(i < args.length - 1 && !args[i+1].startsWith("-")) {
state = args[i+1];
i++;
}
if(i < args.length - 1 && !args[i+1].startsWith("-")) {
city = args[i+1];
i++;
}
if(i < args.length - 1 && !args[i+1].startsWith("-")) {
zip = args[i+1];
i++;
}
if(i < args.length - 1 && !args[i+1].startsWith("-")) {
profile = args[i+1];
i++;
}
if(pin != null) {
try {
if(m_sdoc == null) {
System.err.println("No signed document to sign. Use -ddoc-in or -ddoc-new commands!");
return false;
}
// roll/resolutsioon
String[] roles = null;
if(rollReso != null && rollReso.trim().length() > 0) {
roles = new String[1];
roles[0] = rollReso;
}
// address
SignatureProductionPlace adr = null;
if(country != null || state != null || city != null || zip != null)
adr = new SignatureProductionPlace(city, state, country, zip);
System.out.println("Signing digidoc");
ConfigManager cfg = ConfigManager.instance();
System.err.println("Signing of type: " + sImpl);
PKCS11SignatureFactory sigFac = (PKCS11SignatureFactory)cfg.
getSignatureFactoryOfType(SignatureFactory.SIGFAC_TYPE_PKCS11);
if(sigFac == null) {
System.err.println("No PKCS11 signature factory");
return false;
}
TokenKeyInfo tki = sigFac.getTokenWithSlotIdAndLabel(nSlot, label);
if(tki == null) {
System.err.println("No token with slot: " + nSlot + " and label: " + label);
return false;
}
X509Certificate cert = sigFac.getCertificateWithSlotIdAndLabel(nSlot, label);
System.out.println("Prepare signature, cert: " + ((cert != null) ? "OK" : "NULL") + " status: " + bOk);
Signature sig = m_sdoc.prepareSignature(cert, roles, adr);
if(profile == null)
profile = ConfigManager.instance().getStringProperty("DIGIDOC_DEFAULT_PROFILE", "TM");
if(profile != null)
sig.setProfile(profile);
byte[] sidigest = sig.calculateSignedInfoDigest();
byte[] sigval = sigFac.sign(sidigest, nSlot, label, pin, sig);
// finalize signature up to default profile
System.out.println("Finalize signature: " + sig.getId() + " profile: " + profile + " sig-len: " + ((sigval != null) ? sigval.length : 0));
sig.setSignatureValue(sigval);
// set HTTP_FROM to some value
sig.setHttpFrom(composeHttpFrom());
sig.getConfirmation();
} catch(Exception ex) {
bOk = false;
System.err.println("ERROR: signing: " + ex);
ex.printStackTrace(System.err);
}
} else {
bOk = false;
System.err.println("Missing pin of -ddoc-sign-slot-label command");
}
}
}
return bOk; // nothing to do?
}
/**
* command for listing all useable keys.
* This command currently uses only PKCS11 interface
* @param args command line arguments
* @return success flag
*/
private boolean runListKeysCmds(String[] args)
{
boolean bOk = true;
for(int i = 0; (args != null) && (i < args.length); i++) {
if(args[i].equals("-ddoc-list-keys")) {
try {
PKCS11SignatureFactory sigFac = (PKCS11SignatureFactory)ConfigManager.
instance().getSignatureFactoryOfType(SignatureFactory.SIGFAC_TYPE_PKCS11);
if(sigFac == null) {
System.err.println("PKCS11 interface not available!");
return false;
}
TokenKeyInfo[] ltok = sigFac.getTokenKeys();
for(int j = 0; (ltok != null) && (j < ltok.length); j++) {
TokenKeyInfo tok = ltok[j];
System.out.println("Token: " + tok.getNr() + " slot: " + tok.getSlot() +
" label " + tok.getLabel() +
" id: " + tok.getIdHex() + " cert: " + tok.getCertSerial() +
" CN: " + tok.getCertName() + " signing: " + tok.isSignatureKey() +
" encryption: " + tok.isEncryptKey());
}
bOk = true;
} catch(Exception ex) {
System.err.println("ERROR: listing keys: " + ex);
ex.printStackTrace(System.err);
}
}
}
return bOk; // nothing to do?
}
/**
* run-loop for jdigidoc. Evaluates the command line arguments
* and executes the commands
* @param args command line arguments
*/
public boolean run(String[] args)
{
boolean bOk = true, b = false, bContinue = true, bHelp = false;
ArrayList lerr = new ArrayList();
bHelp = runHelpCmds(args);
// check config file
bOk = runConfigCmds(args);
// register provider
if(bOk)
ConfigManager.addProvider();
// checking certificates
if(bOk)
bOk = runCheckCertCmds(args);
// list keys
if(bOk)
bOk = runListKeysCmds(args);
// reading of digidoc files
if(bOk) {
bOk = runReadSignedDocCmds(args, lerr);
bContinue = !SignedDoc.hasFatalErrs(lerr);
}
// creating digidocs
if(bOk)
bOk = runNewSignedDocCmds(args);
// adding data files
if(bOk)
bOk = runAddSignedDocCmds(args);
if(bOk)
bOk = runAddMemSignedDocCmds(args);
// signing digidoc-s
if(bOk)
bOk = runSignSignedDocCmds(args);
// sign using pkcs11 by key id
if(bOk)
bOk = runSignSignedDocSlotLabelCmds(args);
// calc-sign
if(bOk)
bOk = runCalcSignCmds(args);
// add-sign-value
if(bOk)
bOk = runAddSignValueCmds(args);
// notarizing digidoc-s
if(bOk)
bOk = runNotarizeSignedDocCmds(args);
if(bOk)
bOk = runRmvSigCmds(args);
if(bOk)
bOk = runRmvDfCmds(args);
// writing digidoc's
if(bOk)
bOk = runWriteSignedDocCmds(args);
// validate signed doc
if(bContinue) {
b = runValidateSignedDocCmds(args);
if(!b) bOk = false;
}
if(bOk)
bOk = runExtractDataFileCmds(args);
// read encrypted files
if(bOk)
bOk = runReadEncryptedDataCmds(args);
// add recipients
if(bOk)
bOk = runAddRecipientsCmds(args);
// encrypt data
if(bOk)
bOk = runEncryptEncryptedDataCmds(args);
if(bOk) // SK specific cdoc containing ddoc internal container
bOk = runEncryptEncryptedDataSKCmds(args);
// encrypt data
if(bOk)
bOk = runEncryptStreamCmds(args);
// decrypt data
if(bOk)
bOk = runDecryptEncryptedDataCmds(args);
// decrypt using pkcs12 factory (also jks keystores)
if(bOk)
bOk = runDecryptEncryptedDataPkcs12Cmds(args);
// decrypt pkcs12 stream
if(bOk)
bOk = runDecryptEncryptedDataPkcs12StreamCmds(args);
// decrypt data
if(bOk)
bOk = runDecryptEncryptedStreamCmds(args);
if(bOk)
bOk = runDecryptEncryptedStreamRecvCmds(args);
if(bOk)
bOk = runDecryptEncryptedStreamSlotAndLabelCmds(args);
// display encrypted doc
if(bOk)
bOk = runListEncryptedDataCmds(args);
// validate encrypted doc
if(bOk)
bOk = runValidateEncryptedDataCmds(args);
// test cdoc commands
if(bOk)
bOk = runCheckValidDdocCmds(args);
if(bHelp) {
System.err.println("USAGE: ee.sk.test.jdigidoc [commands]");
System.err.println("\t-? or -help - displays this help screen");
System.err.println("\t-config [default: jar://jdigidoc.cfg]");
System.err.println("\t-check-cert ");
System.err.println("\t-ddoc-in ");
System.err.println("\t-ddoc-in-stream ");
System.err.println("\t-ddoc-in-ostream ");
System.err.println("\t-ddoc-new [format] [version]");
System.err.println("\t-ddoc-add [content-type]");
System.err.println("\t-ddoc-add-mem [content-type]");
System.err.println("\t-ddoc-sign [roll/resolutsioon] [country] [state] [city] [zip] [slot(0)] [profile] [driver(PKCS11)] [keystoreFile]");
System.err.println("\t-ddoc-out ");
System.err.println("\t-ddoc-out-stream ");
System.err.println("\t-ddoc-out-ostream ");
System.err.println("\t-ddoc-validate");
System.err.println("\t-ddoc-extract ");
System.err.println("\t-ddoc-rm-sig ");
System.err.println("\t-ddoc-rm-df ");
System.err.println("\t-ddoc-list-keys");
System.err.println("\t-ddoc-sign-slot-label [manifest] [country] [state] [city] [zip] [profile]");
System.err.println("\t-cdoc-decrypt-stream-slot-label ");
System.err.println("\t-ddoc-calc-sign [roll/resolutsioon] [country] [state] [city] [zip]] [profile]");
System.err.println("\t-ddoc-add-sign-value ");
System.err.println("\t-cdoc-in ");
System.err.println("\t-cdoc-list");
System.err.println("\t-cdoc-validate");
System.err.println("\t-cdoc-recipient [recipient] [KeyName] [CarriedKeyName]");
System.err.println("\t-cdoc-encrypt ");
System.err.println("\t-cdoc-encrypt-sk ");
System.err.println("\t-cdoc-encrypt-stream ");
System.err.println("\t-cdoc-decrypt [slot(0)]");
System.err.println("\t-cdoc-decrypt-sk [slot(0)]");
System.err.println("\t-cdoc-decrypt-stream ");
System.err.println("\t-cdoc-decrypt-stream-recv ");
System.err.println("\t-cdoc-test ");
System.err.println("\t-cdoc-decrypt-pkcs12 ");
System.err.println("\t-cdoc-decrypt-pkcs12-sk ");
System.err.println("\t-cdoc-decrypt-pkcs12-stream ");
System.err.println("\t-cdoc-decrypt-pkcs12-stream-sk ");
System.err.println("\t-libraryerrors");
}
// cleanup data-file cache
if(m_sdoc != null)
m_sdoc.cleanupDfCache();
return bOk;
}
/**
* jdigidoc's main routine.
* @param args command line arguments
*/
public static void main(String[] args)
{
Date ds, de;
jdigidoc prog;
// print program name & version
System.out.println(SignedDoc.LIB_NAME + " - " + SignedDoc.LIB_VERSION);
ds = new Date();
prog = new jdigidoc();
boolean bOk = prog.run(args);
de = new Date();
System.out.println(SignedDoc.LIB_NAME + " end, time: " + ((de.getTime() - ds.getTime()) / 1000) + " sec result: " + (bOk ? "success" : "failure"));
}
}
