1 files changed, 17 insertions, 4 deletions
diff --git a/eaaf_modules/eaaf_module_auth_sl20/src/main/java/at/gv/egiz/eaaf/modules/auth/sl20/utils/IJoseTools.java b/eaaf_modules/eaaf_module_auth_sl20/src/main/java/at/gv/egiz/eaaf/modules/auth/sl20/utils/IJoseTools.java
index 6ee53a9d..f04555dc 100644
--- a/eaaf_modules/eaaf_module_auth_sl20/src/main/java/at/gv/egiz/eaaf/modules/auth/sl20/utils/IJoseTools.java
+++ b/eaaf_modules/eaaf_module_auth_sl20/src/main/java/at/gv/egiz/eaaf/modules/auth/sl20/utils/IJoseTools.java
@@ -8,26 +8,39 @@ import java.util.List;
 
 import javax.annotation.Nonnull;
 
+import at.gv.egiz.eaaf.modules.auth.sl20.data.VerificationResult;
+import at.gv.egiz.eaaf.modules.auth.sl20.exceptions.SL20Exception;
+import at.gv.egiz.eaaf.modules.auth.sl20.exceptions.SlCommandoBuildException;
+
 import org.jose4j.jwa.AlgorithmConstraints;
 import org.jose4j.lang.JoseException;
 
 import com.fasterxml.jackson.databind.JsonNode;
 
-import at.gv.egiz.eaaf.modules.auth.sl20.data.VerificationResult;
-import at.gv.egiz.eaaf.modules.auth.sl20.exceptions.SL20Exception;
-import at.gv.egiz.eaaf.modules.auth.sl20.exceptions.SlCommandoBuildException;
-
 public interface IJoseTools {
 
   /**
    * Create a JWS signature.
    *
+   *<p>This method adds the certificate chain into JOSE header.</p>
+   *
    * @param payLoad Payload to sign
    * @throws SlCommandoBuildException In case of a signature creation error
    */
   String createSignature(String payLoad) throws SlCommandoBuildException;
 
   /**
+   * Create a JWS signature.
+   *
+   * @param payLoad Payload to sign
+   * @param addFullCertChain If <code>true</code> the full certificate chain will be added,
+   *     otherwise only the X509CertSha256Fingerprint is added into JOSE header
+   * @return Signed PayLoad in serialized form
+   * @throws SlCommandoBuildException SlCommandoBuildException In case of a signature creation error
+   */
+  String createSignature(String payLoad, boolean addFullCertChain) throws SlCommandoBuildException;
+
+  /**
    * Validates a signed SL2.0 message.
    *
    * @param serializedContent Serialized JWS signature