org.demoiselle.signer.policy.impl.cades.pkcs7.attribute.impl

Class CertificateRefs

java.lang.Object

org.demoiselle.signer.policy.impl.cades.pkcs7.attribute.impl.CertificateRefs

All Implemented Interfaces:

SignedOrUnsignedAttribute, UnsignedAttribute

public class CertificateRefs
extends Object
implements UnsignedAttribute

Complete Certificate Refs Attribute Definition

The Complete Certificate Refs attribute is an unsigned attribute. It references the full set of CA certificates that have been used to validate a ES with Complete validation data (ES-C) up to (but not including) the signer's certificate. Only a single instance of this attribute must occur with an electronic signature.

Note: The signer's certified is referenced in the signing certificate attribute (see clause 3.1 https://www.ietf.org/rfc/rfc3126.txt)

id-aa-ets-certificateRefs OBJECT IDENTIFIER ::= { iso(1) member-body(2) us(840) rsadsi(113549) pkcs(1) pkcs-9(9) smime(16) id-aa(2) 21}

The complete certificate refs attribute value has the ASN.1 syntax CompleteCertificateRefs.

CompleteCertificateRefs ::= SEQUENCE OF OTHERCertID

OTHERCertID is defined in clause 3.8.2.

OtherCertID ::= SEQUENCE { otherCertHash OtherHash, issuerSerial IssuerSerial OPTIONAL }

The IssuerSerial that must be present in OTHERCertID. The certHash must match the hash of the certificate referenced.

Constructor Summary

Constructors

Constructor and Description
CertificateRefs()

Method Summary

Modifier and Type	Method and Description
String	getOID() OID value of the attribute.
org.bouncycastle.asn1.cms.Attribute	getValue() Represents the value of the attribute itself.
void	initialize(PrivateKey privateKey, Certificate[] certificates, byte[] content, SignaturePolicy signaturePolicy, byte[] hash) Performs the initial parameterization for attribute retrieval

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

CertificateRefs

public CertificateRefs()

Method Detail

initialize

public void initialize(PrivateKey privateKey,
                       Certificate[] certificates,
                       byte[] content,
                       SignaturePolicy signaturePolicy,
                       byte[] hash)

Description copied from interface: SignedOrUnsignedAttribute

Performs the initial parameterization for attribute retrieval

Specified by:

initialize in interface SignedOrUnsignedAttribute

Parameters:

privateKey - private key

certificates - certificate chain

content - set null if signing only hash

signaturePolicy - signature policy

hash - set null if signing content

getOID

public String getOID()

Description copied from interface: SignedOrUnsignedAttribute

OID value of the attribute. Ex: "1.12.2.54.94"

Specified by:

getOID in interface SignedOrUnsignedAttribute

Returns:

OID of attribute

getValue

public org.bouncycastle.asn1.cms.Attribute getValue()
                                             throws SignerException

Description copied from interface: SignedOrUnsignedAttribute

Represents the value of the attribute itself.

Specified by:

getValue in interface SignedOrUnsignedAttribute

Returns:

Attribute value

Throws:

SignerException