org.demoiselle.signer.policy.impl.cades.pkcs7.attribute.impl

Class SigningCertificate

java.lang.Object

org.demoiselle.signer.policy.impl.cades.pkcs7.attribute.impl.SigningCertificate

All Implemented Interfaces:

SignedAttribute, SignedOrUnsignedAttribute

public class SigningCertificate
extends Object
implements SignedAttribute

The signing certificate attribute is designed to prevent the simple substitution and re-issue attacks, and to allow for a restricted set of authorization certificates to be used in verifying a signature.

The definition of SigningCertificate is

 SigningCertificate ::=  SEQUENCE {
     certs        SEQUENCE OF ESSCertID,
     policies     SEQUENCE OF PolicyInformation OPTIONAL
 }

 id-aa-signingCertificate OBJECT IDENTIFIER ::= {
     iso(1)
     member-body(2) us(840) rsadsi(113549) pkcs(1) pkcs9(9)
     smime(16) id-aa(2) 12
 }
 

Constructor Summary

Constructors

Constructor and Description
SigningCertificate()

Method Summary

Modifier and Type	Method and Description
String	getOID() OID value of the attribute.
org.bouncycastle.asn1.cms.Attribute	getValue() Represents the value of the attribute itself.
void	initialize(PrivateKey privateKey, Certificate[] certificates, byte[] content, SignaturePolicy signaturePolicy, byte[] hash) Performs the initial parameterization for attribute retrieval

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

SigningCertificate

public SigningCertificate()

Method Detail

initialize

public void initialize(PrivateKey privateKey,
                       Certificate[] certificates,
                       byte[] content,
                       SignaturePolicy signaturePolicy,
                       byte[] hash)

Description copied from interface: SignedOrUnsignedAttribute

Performs the initial parameterization for attribute retrieval

Specified by:

initialize in interface SignedOrUnsignedAttribute

Parameters:

privateKey - private key

certificates - certificate chain

content - set null if signing only hash

signaturePolicy - signature policy

hash - set null if signing content

getOID

public String getOID()

Description copied from interface: SignedOrUnsignedAttribute

OID value of the attribute. Ex: "1.12.2.54.94"

Specified by:

getOID in interface SignedOrUnsignedAttribute

Returns:

OID of attribute

getValue

public org.bouncycastle.asn1.cms.Attribute getValue()

Description copied from interface: SignedOrUnsignedAttribute

Represents the value of the attribute itself.

Specified by:

getValue in interface SignedOrUnsignedAttribute

Returns:

Attribute value