no.difi.asic.CadesAsicWriter Maven / Gradle / Ivy

Go to download

Show more of this group Show more artifacts with this name
Show all versions of commons-asic Show documentation

Generic implementation of ASiC-E archives in accordance with ETSI 102 918 v1.3.1.

There is a newer version: 0.12.0

package no.difi.asic;

import java.io.IOException;
import java.io.OutputStream;
import java.util.UUID;

/**
 * Builds an ASiC-E Cades container using a variation of "builder pattern".
 *
 * This class is not thread safe, as it indirectly holds a MessageDigest object.
 *
 * @author steinar
 *         Date: 02.07.15
 *         Time: 12.09
 */
class CadesAsicWriter extends AbstractAsicWriter {

    /**
     * Prepares creation of a new container.
     * @param outputStream Stream used to write container.
     */
    public CadesAsicWriter(SignatureMethod signatureMethod, OutputStream outputStream, boolean closeStreamOnClose) throws IOException {
        super(outputStream, closeStreamOnClose, new CadesAsicManifest(signatureMethod.getMessageDigestAlgorithm()));
    }

    /**
     * {@inheritDoc}
     */
    @Override
    public AsicWriter setRootEntryName(String name) {
        ((CadesAsicManifest) asicManifest).setRootfileForEntry(name);
        return this;
    }

    @Override
    protected void performSign(SignatureHelper signatureHelper) throws IOException {
        // Define signature filename containing UUID
        String signatureFilename = String.format("META-INF/signature-%s.p7s", UUID.randomUUID().toString());

        // Adding signature file to asic manifest before actual signing
        ((CadesAsicManifest) asicManifest).setSignature(signatureFilename, "application/x-pkcs7-signature");


        // Generates and writes manifest (META-INF/asicmanifest.xml) to the zip archive
        byte[] manifestBytes = ((CadesAsicManifest) asicManifest).toBytes();
        asicOutputStream.writeZipEntry("META-INF/asicmanifest.xml", manifestBytes);

        // Generates and writes signature (META-INF/signature-*.p7s) to the zip archive
        asicOutputStream.writeZipEntry(signatureFilename, signatureHelper.signData(manifestBytes));
    }
}