From b00fd777ba1c564b1f4b3fdf14ec4d23ff80c1ea Mon Sep 17 00:00:00 2001
From: spuchmann <spuchmann@d688527b-c9ab-4aba-bd8d-4036d912da1d>
Date: Thu, 8 May 2008 14:04:44 +0000
Subject: added PermitFileURIs; removing unnecessary dependencies to Sun's JSSE

git-svn-id: https://joinup.ec.europa.eu/svn/moa-idspss/trunk@1071 d688527b-c9ab-4aba-bd8d-4036d912da1d
---
 .../java/at/gv/egovernment/moa/util/Constants.java |   4 +-
 .../resources/schemas/MOA-SPSS-config-1.4.3.xsd    | 312 +++++++++++++++++++++
 2 files changed, 314 insertions(+), 2 deletions(-)
 create mode 100644 common/src/main/resources/resources/schemas/MOA-SPSS-config-1.4.3.xsd

(limited to 'common/src')

diff --git a/common/src/main/java/at/gv/egovernment/moa/util/Constants.java b/common/src/main/java/at/gv/egovernment/moa/util/Constants.java
index d82947e3f..887363fdd 100644
--- a/common/src/main/java/at/gv/egovernment/moa/util/Constants.java
+++ b/common/src/main/java/at/gv/egovernment/moa/util/Constants.java
@@ -77,11 +77,11 @@ public interface Constants {
 
   /** Local location of the MOA configuration XML schema definition. */
   public static final String MOA_CONFIG_SCHEMA_LOCATION =
-    SCHEMA_ROOT + "MOA-SPSS-config-1.3.xsd";
+    SCHEMA_ROOT + "MOA-SPSS-config-1.4.3.xsd";
 
   /** Local location of the MOA ID configuration XML schema definition. */
   public static final String MOA_ID_CONFIG_SCHEMA_LOCATION =
-    SCHEMA_ROOT + "MOA-ID-Configuration-1.4.3.xsd";
+    SCHEMA_ROOT + "MOA-ID-Configuration-1.3.xsd";
 
   /** URI of the Security Layer 1.0 namespace. */
   public static final String SL10_NS_URI =
diff --git a/common/src/main/resources/resources/schemas/MOA-SPSS-config-1.4.3.xsd b/common/src/main/resources/resources/schemas/MOA-SPSS-config-1.4.3.xsd
new file mode 100644
index 000000000..2b2f1d689
--- /dev/null
+++ b/common/src/main/resources/resources/schemas/MOA-SPSS-config-1.4.3.xsd
@@ -0,0 +1,312 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  MOA SP/SS 1.4.3 Configuration Schema
+-->
+<xs:schema targetNamespace="http://reference.e-government.gv.at/namespace/moaconfig/20021122#" elementFormDefault="qualified" attributeFormDefault="unqualified" xmlns:config="http://reference.e-government.gv.at/namespace/moaconfig/20021122#" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" xmlns:xs="http://www.w3.org/2001/XMLSchema">
+  <xs:import namespace="http://www.w3.org/2000/09/xmldsig#" schemaLocation="http://www.w3.org/TR/xmldsig-core/xmldsig-core-schema.xsd"/>
+  <xs:element name="MOAConfiguration">
+    <xs:complexType>
+      <xs:sequence>
+        <xs:element name="Common" minOccurs="0">
+          <xs:complexType>
+            <xs:sequence>
+              <xs:element name="HardwareCryptoModule" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                  <xs:sequence>
+                    <xs:element name="Name" type="xs:string"/>
+                    <xs:element name="SlotId" type="xs:string" minOccurs="0"/>
+                    <xs:element name="UserPIN" type="xs:string"/>
+                  </xs:sequence>
+                </xs:complexType>
+              </xs:element>
+            </xs:sequence>
+          </xs:complexType>
+        </xs:element>
+        <xs:element name="SignatureCreation" minOccurs="0">
+          <xs:complexType>
+            <xs:sequence>
+              <xs:element name="KeyModules">
+                <xs:complexType>
+                  <xs:choice maxOccurs="unbounded">
+                    <xs:element name="HardwareKeyModule">
+                      <xs:complexType>
+                        <xs:sequence>
+                          <xs:element name="Id" type="xs:token"/>
+                          <xs:element name="Name" type="xs:string"/>
+                          <xs:element name="SlotId" type="xs:string" minOccurs="0"/>
+                          <xs:element name="UserPIN" type="xs:string"/>
+                        </xs:sequence>
+                      </xs:complexType>
+                    </xs:element>
+                    <xs:element name="SoftwareKeyModule">
+                      <xs:complexType>
+                        <xs:sequence>
+                          <xs:element name="Id" type="xs:token"/>
+                          <xs:element name="FileName" type="xs:string"/>
+                          <xs:element name="Password" type="xs:string" minOccurs="0"/>
+                        </xs:sequence>
+                      </xs:complexType>
+                    </xs:element>
+                  </xs:choice>
+                </xs:complexType>
+              </xs:element>
+              <xs:element name="KeyGroup" maxOccurs="unbounded">
+                <xs:complexType>
+                  <xs:sequence>
+                    <xs:element name="Id" type="xs:token"/>
+                    <xs:sequence maxOccurs="unbounded">
+                      <xs:element name="Key">
+                        <xs:complexType>
+                          <xs:sequence>
+                            <xs:element name="KeyModuleId" type="xs:token"/>
+                            <xs:element name="KeyCertIssuerSerial" type="dsig:X509IssuerSerialType"/>
+                          </xs:sequence>
+                        </xs:complexType>
+                      </xs:element>
+                    </xs:sequence>
+                  </xs:sequence>
+                </xs:complexType>
+              </xs:element>
+              <xs:element name="KeyGroupMapping" maxOccurs="unbounded">
+                <xs:complexType>
+                  <xs:sequence>
+                    <xs:element name="CustomerId" type="dsig:X509IssuerSerialType" minOccurs="0"/>
+                    <xs:element name="KeyGroupId" type="xs:token" maxOccurs="unbounded"/>
+                  </xs:sequence>
+                </xs:complexType>
+              </xs:element>
+              <xs:element name="XMLDSig">
+                <xs:complexType>
+                  <xs:sequence>
+                    <xs:element name="CanonicalizationAlgorithm" type="xs:anyURI" minOccurs="0"/>
+                    <xs:element name="DigestMethodAlgorithm" type="xs:anyURI" minOccurs="0"/>
+                  </xs:sequence>
+                </xs:complexType>
+              </xs:element>
+              <xs:element name="CreateTransformsInfoProfile" type="config:ProfileType" minOccurs="0" maxOccurs="unbounded"/>
+              <xs:element name="CreateSignatureEnvironmentProfile" type="config:ProfileType" minOccurs="0" maxOccurs="unbounded"/>
+            </xs:sequence>
+          </xs:complexType>
+        </xs:element>
+        <xs:element name="SignatureVerification" minOccurs="0">
+          <xs:complexType>
+            <xs:sequence>
+            	<xs:element name="CertificateValidation">
+            		<xs:complexType>
+            			<xs:sequence>
+            				<xs:element name="PathConstruction">
+            					<xs:complexType>
+            						<xs:sequence>
+            							<xs:element
+            								name="AutoAddCertificates" type="xs:boolean" />
+            							<xs:element
+            								name="UseAuthorityInformationAccess"
+            								type="xs:boolean" />
+            							<xs:element
+            								name="CertificateStore">
+            								<xs:complexType>
+            									<xs:choice>
+            										<xs:element
+            											name="DirectoryStore">
+            											<xs:complexType>
+            												<xs:sequence>
+            													<xs:element
+            														name="Location" type="xs:token" />
+            												</xs:sequence>
+            											</xs:complexType>
+            										</xs:element>
+            									</xs:choice>
+            								</xs:complexType>
+            							</xs:element>
+            						</xs:sequence>
+            					</xs:complexType>
+            				</xs:element>
+            				<xs:element name="PathValidation">
+            					<xs:complexType>
+            						<xs:sequence>
+            							<xs:element
+            								name="ChainingMode">
+            								<xs:complexType>
+            									<xs:sequence>
+            										<xs:element
+            											name="DefaultMode"
+            											type="config:ChainingModeType" />
+            										<xs:element
+            											name="TrustAnchor" minOccurs="0"
+            											maxOccurs="unbounded">
+            											<xs:complexType>
+            												<xs:sequence>
+            													<xs:element
+            														name="Identification"
+            														type="dsig:X509IssuerSerialType" />
+            													<xs:element
+            														name="Mode" type="config:ChainingModeType" />
+            												</xs:sequence>
+            											</xs:complexType>
+            										</xs:element>
+            									</xs:sequence>
+            								</xs:complexType>
+            							</xs:element>
+            							<xs:element name="TrustProfile"
+            								maxOccurs="unbounded">
+            								<xs:complexType>
+            									<xs:sequence>
+            										<xs:element
+            											name="Id" type="xs:token" />
+            										<xs:element
+            											name="TrustAnchorsLocation" type="xs:anyURI" />
+            										<xs:element
+            											name="SignerCertsLocation" type="xs:anyURI"
+            											minOccurs="0" />
+            									</xs:sequence>
+            								</xs:complexType>
+            							</xs:element>
+            						</xs:sequence>
+            					</xs:complexType>
+            				</xs:element>
+            				<xs:element name="RevocationChecking">
+            					<xs:complexType>
+            						<xs:sequence>
+            							<xs:element
+            								name="EnableChecking" type="xs:boolean" />
+            							<xs:element
+            								name="MaxRevocationAge" type="xs:integer" />
+            							<xs:element name="ServiceOrder"
+            								minOccurs="0">
+            								<xs:complexType>
+            									<xs:sequence
+            										minOccurs="2" maxOccurs="2">
+            										<xs:element
+            											name="Service">
+            											<xs:simpleType>
+            												<xs:restriction
+            													base="xs:token">
+            													<xs:enumeration
+            														value="OCSP" />
+            													<xs:enumeration
+            														value="CRL" />
+            												</xs:restriction>
+            											</xs:simpleType>
+            										</xs:element>
+            									</xs:sequence>
+            								</xs:complexType>
+            							</xs:element>
+            							<xs:element name="Archiving">
+            								<xs:complexType>
+            									<xs:sequence>
+            										<xs:element
+            											name="EnableArchiving" type="xs:boolean" />
+            										<xs:element
+            											name="ArchiveDuration"
+            											type="xs:nonNegativeInteger" minOccurs="0" />
+            										<xs:element
+            											name="Archive" minOccurs="0">
+            											<xs:complexType>
+            												<xs:choice>
+            													<xs:element
+            														name="DatabaseArchive">
+            														<xs:complexType>
+            															<xs:sequence>
+            																<xs:element
+            																	name="JDBCURL" type="xs:anyURI" />
+            																<xs:element
+            																	name="JDBCDriverClassName" type="xs:token" />
+            															</xs:sequence>
+            														</xs:complexType>
+            													</xs:element>
+            												</xs:choice>
+            											</xs:complexType>
+            										</xs:element>
+            									</xs:sequence>
+            								</xs:complexType>
+            							</xs:element>
+            							<xs:element
+            								name="DistributionPoint" minOccurs="0"
+            								maxOccurs="unbounded">
+            								<xs:complexType>
+            									<xs:sequence>
+            										<xs:element
+            											name="CAIssuerDN" type="xs:token" />
+            										<xs:choice
+            											maxOccurs="unbounded">
+            											<xs:element
+            												name="CRLDP">
+            												<xs:complexType>
+            													<xs:sequence>
+            														<xs:element
+            															name="Location" type="xs:anyURI" />
+            														<xs:element
+            															name="ReasonCode" minOccurs="0"
+            															maxOccurs="unbounded">
+            															<xs:simpleType>
+            																<xs:restriction
+            																	base="xs:token">
+            																	<xs:enumeration
+            																		value="unused" />
+            																	<xs:enumeration
+            																		value="keyCompromise" />
+            																	<xs:enumeration
+            																		value="cACompromise" />
+            																	<xs:enumeration
+            																		value="affiliationChanged" />
+            																	<xs:enumeration
+            																		value="superseded" />
+            																	<xs:enumeration
+            																		value="cessationOfOperation" />
+            																	<xs:enumeration
+            																		value="certificateHold" />
+            																	<xs:enumeration
+            																		value="privilegeWithdrawn" />
+            																	<xs:enumeration
+            																		value="aACompromise" />
+            																</xs:restriction>
+            															</xs:simpleType>
+            														</xs:element>
+            													</xs:sequence>
+            												</xs:complexType>
+            											</xs:element>
+            											<xs:element
+            												name="OCSPDP">
+            												<xs:complexType>
+            													<xs:sequence>
+            														<xs:element
+            															name="Location" type="xs:anyURI" />
+            													</xs:sequence>
+            												</xs:complexType>
+            											</xs:element>
+            										</xs:choice>
+            									</xs:sequence>
+            								</xs:complexType>
+            							</xs:element>
+            						</xs:sequence>
+            					</xs:complexType>
+            				</xs:element>
+            			</xs:sequence>
+            		</xs:complexType>
+            	</xs:element>
+            	<xs:element name="VerifyTransformsInfoProfile"
+            		type="config:ProfileType" minOccurs="0"
+            		maxOccurs="unbounded" />
+            	<xs:element name="SupplementProfile"
+            		type="config:ProfileType" minOccurs="0"
+            		maxOccurs="unbounded" />
+            	<xs:element name="PermitFileURIs" type="xs:boolean" minOccurs="0" maxOccurs="1" default="false"/>
+            </xs:sequence>
+          </xs:complexType>
+        </xs:element>
+      </xs:sequence>
+    </xs:complexType>
+  </xs:element>
+  <xs:simpleType name="ChainingModeType">
+    <xs:restriction base="xs:string">
+      <xs:enumeration value="chaining"/>
+      <xs:enumeration value="pkix"/>
+    </xs:restriction>
+  </xs:simpleType>
+  <xs:complexType name="ProfileType">
+    <xs:sequence>
+      <xs:element name="Id" type="xs:token"/>
+      <xs:element name="Location" type="xs:anyURI"/>
+    </xs:sequence>
+  </xs:complexType>
+</xs:schema>
-- 
cgit v1.2.3