1 files changed, 28 insertions, 20 deletions

diff --git a/moaSig/moa-sig-lib/src/main/java/at/gv/egovernment/moa/spss/server/invoke/XMLSignatureVerificationInvoker.java b/moaSig/moa-sig-lib/src/main/java/at/gv/egovernment/moa/spss/server/invoke/XMLSignatureVerificationInvoker.java
index c09740c..a8c3ea0 100644
--- a/moaSig/moa-sig-lib/src/main/java/at/gv/egovernment/moa/spss/server/invoke/XMLSignatureVerificationInvoker.java
+++ b/moaSig/moa-sig-lib/src/main/java/at/gv/egovernment/moa/spss/server/invoke/XMLSignatureVerificationInvoker.java
@@ -40,10 +40,6 @@ import java.util.Set;
 import org.w3c.dom.Element;
 import org.w3c.dom.Node;
 
-import at.gv.egovernment.moa.logging.LogMsg;
-import at.gv.egovernment.moa.logging.Logger;
-import at.gv.egovernment.moa.logging.LoggingContext;
-import at.gv.egovernment.moa.logging.LoggingContextManager;
 import at.gv.egovernment.moa.spss.MOAApplicationException;
 import at.gv.egovernment.moa.spss.MOAException;
 import at.gv.egovernment.moa.spss.MOASystemException;
@@ -71,8 +67,12 @@ import at.gv.egovernment.moa.spss.server.transaction.TransactionContextManager;
 import at.gv.egovernment.moa.spss.util.CertificateUtils;
 import at.gv.egovernment.moa.spss.util.MessageProvider;
 import at.gv.egovernment.moa.spss.util.QCSSCDResult;
-import at.gv.egovernment.moa.util.CollectionUtils;
-import at.gv.egovernment.moa.util.Constants;
+import at.gv.egovernment.moaspss.logging.LogMsg;
+import at.gv.egovernment.moaspss.logging.Logger;
+import at.gv.egovernment.moaspss.logging.LoggingContext;
+import at.gv.egovernment.moaspss.logging.LoggingContextManager;
+import at.gv.egovernment.moaspss.util.CollectionUtils;
+import at.gv.egovernment.moaspss.util.Constants;
 import iaik.server.modules.AdESFormVerificationResult;
 import iaik.server.modules.AdESVerificationResult;
 import iaik.server.modules.IAIKException;
@@ -162,7 +162,8 @@ public class XMLSignatureVerificationInvoker {
 		LoggingContext loggingCtx = LoggingContextManager.getInstance().getLoggingContext();
 		XMLSignatureVerificationProfileFactory profileFactory = new XMLSignatureVerificationProfileFactory(request);
 		VerifyXMLSignatureResponseBuilder responseBuilder = new VerifyXMLSignatureResponseBuilder();
-		ExtendedXMLSignatureVerificationResult result;
+		ExtendedXMLSignatureVerificationResult result = null;
+		XMLSignatureVerificationResult plainResult;
 		XMLSignatureVerificationProfile profile;
 		ReferencesCheckResult signatureManifestCheck;
 		DataObjectFactory dataObjFactory;
@@ -215,8 +216,14 @@ public class XMLSignatureVerificationInvoker {
 
 			module.setLog(new IaikLog(loggingCtx.getNodeID()));
 
-			result = module.verifyXAdESSignature(xmlSignature, dataObjectList, profile, signingTime,
+			if(request.getExtendedValidaiton()) {
+				result = module.verifyXAdESSignature(xmlSignature, dataObjectList, profile, signingTime,
 					new TransactionId(context.getTransactionID()));
+				plainResult = result.getXMLSignatureVerificationResult();
+			} else {
+				plainResult = module.verifySignature(xmlSignature, dataObjectList, profile, signingTime,
+						new TransactionId(context.getTransactionID()));
+			}
 		} catch (IAIKException e) {
 			MOAException moaException = IaikExceptionMapper.getInstance().map(e);
 			throw moaException;
@@ -225,19 +232,20 @@ public class XMLSignatureVerificationInvoker {
 			throw moaException;
 		}
 
-		List adesResults = getAdESResult(result.getFormVerificationResult());
+		if(result != null) {
+			List adesResults = getAdESResult(result.getFormVerificationResult());
 
-		if (adesResults != null) {
-			Iterator adesIterator = adesResults.iterator();
-			while (adesIterator.hasNext()) {
-				Logger.info("ADES Formresults: " + adesIterator.next().toString());
+			if (adesResults != null) {
+				Iterator adesIterator = adesResults.iterator();
+				while (adesIterator.hasNext()) {
+					Logger.info("ADES Formresults: " + adesIterator.next().toString());
+				}
 			}
-		}
-
-		responseBuilder.setAdESFormResults(adesResults);
 
+			responseBuilder.setAdESFormResults(adesResults);
+		}
 		// QC/SSCD check
-		List list = result.getXMLSignatureVerificationResult().getCertificateValidationResult().getCertificateChain();
+		List list = plainResult.getCertificateValidationResult().getCertificateChain();
 		if (list != null) {
 			X509Certificate[] chain = new X509Certificate[list.size()];
 
@@ -261,17 +269,17 @@ public class XMLSignatureVerificationInvoker {
 		}
 
 		// check the result
-		signatureManifestCheck = validateSignatureManifest(request, result.getXMLSignatureVerificationResult(),
+		signatureManifestCheck = validateSignatureManifest(request, plainResult,
 				profile);
 
 		// Check if signer certificate is in trust profile's allowed signer
 		// certificates pool
 		TrustProfile trustProfile = context.getConfiguration().getTrustProfile(request.getTrustProfileId());
-		CheckResult certificateCheck = validateSignerCertificate(result.getXMLSignatureVerificationResult(),
+		CheckResult certificateCheck = validateSignerCertificate(plainResult,
 				trustProfile);
 
 		// build the response
-		responseBuilder.setResult(result.getXMLSignatureVerificationResult(), profile, signatureManifestCheck,
+		responseBuilder.setResult(plainResult, profile, signatureManifestCheck,
 				certificateCheck, qcsscdresult.isQC(), qcsscdresult.isQCSourceTSL(), qcsscdresult.isSSCD(),
 				qcsscdresult.isSSCDSourceTSL(), tp.isTSLEnabled(), issuerCountryCode);
 		return responseBuilder.getResponse();