Initial import.

git-svn-id: https://joinup.ec.europa.eu/svn/mocca/trunk@1 8a26b1a7-26f0-462f-b9ef-d0e30c41f5a4

9 files changed, 1215 insertions, 0 deletions

diff --git a/BKUOnline/src/main/java/at/gv/egiz/bku/online/conf/Configurator.java b/BKUOnline/src/main/java/at/gv/egiz/bku/online/conf/Configurator.java
new file mode 100644
index 00000000..0cb717c4
--- /dev/null
+++ b/BKUOnline/src/main/java/at/gv/egiz/bku/online/conf/Configurator.java
@@ -0,0 +1,69 @@
+/*
+* Copyright 2008 Federal Chancellery Austria and
+* Graz University of Technology
+*
+* Licensed under the Apache License, Version 2.0 (the "License");
+* you may not use this file except in compliance with the License.
+* You may obtain a copy of the License at
+*
+*     http://www.apache.org/licenses/LICENSE-2.0
+*
+* Unless required by applicable law or agreed to in writing, software
+* distributed under the License is distributed on an "AS IS" BASIS,
+* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+* See the License for the specific language governing permissions and
+* limitations under the License.
+*/
+package at.gv.egiz.bku.online.conf;

+

+import iaik.security.ecc.provider.ECCProvider;

+import iaik.xml.crypto.XSecProvider;

+

+import java.net.HttpURLConnection;

+import java.security.Provider;

+import java.security.Security;

+

+import javax.net.ssl.HttpsURLConnection;

+

+import org.apache.commons.logging.Log;

+import org.apache.commons.logging.LogFactory;

+

+import at.gv.egiz.bku.slcommands.impl.xsect.STALProvider;

+

+/**

+ * 

+ * TODO currently only the code to get started.  

+ */

+public class Configurator {

+  private Log log = LogFactory.getLog(Configurator.class);

+

+  public Configurator() {

+    configure();

+  }

+

+  protected void configUrlConnections() {

+    HttpsURLConnection.setFollowRedirects(false);

+    HttpURLConnection.setFollowRedirects(false);

+  }

+

+  protected void configureProviders() {

+    log.debug("Registering security providers");  

+    Security.addProvider(new STALProvider());

+    XSecProvider.addAsProvider(false);

+    Security.insertProviderAt(new ECCProvider(false), 1);

+    StringBuffer sb = new StringBuffer();

+    sb.append("Following providers are now registered: ");

+    int i = 1;

+    for (Provider prov : Security.getProviders()) {

+      sb.append((i++) + ". : " + prov);

+    }

+    log.debug("Configured provider" + sb.toString());

+  }

+

+  public void configure() {

+    configureProviders();

+    configUrlConnections();

+

+  }

+

+}

diff --git a/BKUOnline/src/main/java/at/gv/egiz/bku/online/webapp/BKURequestHandler.java b/BKUOnline/src/main/java/at/gv/egiz/bku/online/webapp/BKURequestHandler.java
new file mode 100644
index 00000000..53a7c164
--- /dev/null
+++ b/BKUOnline/src/main/java/at/gv/egiz/bku/online/webapp/BKURequestHandler.java
@@ -0,0 +1,91 @@
+/*
+* Copyright 2008 Federal Chancellery Austria and
+* Graz University of Technology
+*
+* Licensed under the Apache License, Version 2.0 (the "License");
+* you may not use this file except in compliance with the License.
+* You may obtain a copy of the License at
+*
+*     http://www.apache.org/licenses/LICENSE-2.0
+*
+* Unless required by applicable law or agreed to in writing, software
+* distributed under the License is distributed on an "AS IS" BASIS,
+* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+* See the License for the specific language governing permissions and
+* limitations under the License.
+*/
+package at.gv.egiz.bku.online.webapp;

+

+import java.util.Enumeration;

+import java.util.HashMap;

+import java.util.Locale;

+import java.util.Map;

+

+import javax.servlet.ServletException;

+import javax.servlet.http.HttpServletRequest;

+import javax.servlet.http.HttpServletResponse;

+import javax.servlet.http.HttpSession;

+

+import org.apache.commons.logging.Log;

+import org.apache.commons.logging.LogFactory;

+

+import at.gv.egiz.bku.binding.HTTPBindingProcessor;

+import at.gv.egiz.bku.binding.HttpUtil;

+import at.gv.egiz.org.apache.tomcat.util.http.AcceptLanguage;

+

+/**

+ * Handles SL requests and instantiates BindingProcessors 

+ *

+ */

+public class BKURequestHandler extends SpringBKUServlet {

+

+  public final static String REDIRECT_URL ="appletPage.jsp";

+

+  protected Log log = LogFactory.getLog(BKURequestHandler.class);

+

+  protected void doPost(HttpServletRequest req, HttpServletResponse resp)

+      throws ServletException, java.io.IOException {

+    log.debug("Got new request");

+    String lang = req.getHeader("Accept-Language");

+    Locale locale = AcceptLanguage.getLocale(lang);

+    log.debug("Using locale: "+locale);

+    HttpSession session = req.getSession();

+    if (session != null) {

+      session.invalidate();

+    }

+    String id = req.getSession(true).getId();

+    log.debug("Using session id: "+id);

+    HTTPBindingProcessor bindingProcessor;

+    if (req.isSecure()) {

+      bindingProcessor = (HTTPBindingProcessor) getBindingProcessorManager()

+          .createBindingProcessor("https", id, locale);

+    } else {

+      bindingProcessor = (HTTPBindingProcessor) getBindingProcessorManager()

+          .createBindingProcessor("http", id, locale);

+    }

+    Map<String, String> headerMap = new HashMap<String, String>();

+    for (Enumeration<String> headerName = req.getHeaderNames(); headerName

+        .hasMoreElements();) {

+      String header = headerName.nextElement();

+      if (header != null) {

+        headerMap.put(header, req.getHeader(header));

+      }

+    }

+    String charset = req.getCharacterEncoding();

+    String contentType = req.getContentType();

+    if (charset != null) {

+      contentType += ";"+charset;

+    }

+    headerMap.put(HttpUtil.HTTP_HEADER_CONTENT_TYPE, contentType);

+    bindingProcessor.setHTTPHeaders(headerMap);

+    bindingProcessor.consumeRequestStream(req.getInputStream());

+    req.getInputStream().close();

+    getBindingProcessorManager().process(bindingProcessor);

+    resp.sendRedirect(REDIRECT_URL);

+  }

+

+  protected void doGet(HttpServletRequest req, HttpServletResponse resp)

+      throws ServletException, java.io.IOException {

+    doPost(req, resp);

+  }

+}

diff --git a/BKUOnline/src/main/java/at/gv/egiz/bku/online/webapp/ResultServlet.java b/BKUOnline/src/main/java/at/gv/egiz/bku/online/webapp/ResultServlet.java
new file mode 100644
index 00000000..6c1a4c3a
--- /dev/null
+++ b/BKUOnline/src/main/java/at/gv/egiz/bku/online/webapp/ResultServlet.java
@@ -0,0 +1,120 @@
+/*
+* Copyright 2008 Federal Chancellery Austria and
+* Graz University of Technology
+*
+* Licensed under the Apache License, Version 2.0 (the "License");
+* you may not use this file except in compliance with the License.
+* You may obtain a copy of the License at
+*
+*     http://www.apache.org/licenses/LICENSE-2.0
+*
+* Unless required by applicable law or agreed to in writing, software
+* distributed under the License is distributed on an "AS IS" BASIS,
+* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+* See the License for the specific language governing permissions and
+* limitations under the License.
+*/
+package at.gv.egiz.bku.online.webapp;

+

+import java.io.IOException;

+import java.util.Iterator;

+

+import javax.servlet.ServletConfig;

+import javax.servlet.ServletException;

+import javax.servlet.http.HttpServletRequest;

+import javax.servlet.http.HttpServletResponse;

+import javax.servlet.http.HttpSession;

+

+import org.apache.commons.logging.Log;

+import org.apache.commons.logging.LogFactory;

+

+import at.gv.egiz.bku.binding.HTTPBindingProcessor;

+import at.gv.egiz.bku.binding.IdFactory;

+

+/**

+ * Delivers the result to the browser 

+ *

+ */

+public class ResultServlet extends SpringBKUServlet {

+  

+  private final static Log log = LogFactory.getLog(ResultServlet.class);

+  

+  private String encoding = "UTF-8";

+  private String expiredPage = "./expiredError.jsp";

+  

+  public ResultServlet() {

+  }

+  

+  private void myInit() {

+    String enc = getServletContext().getInitParameter("responseEncoding");

+    if (enc != null) {

+      log.debug("Init default encoding to: "+enc);

+      encoding = enc;

+    }

+    String expP = getServletConfig().getInitParameter("expiredPage");

+    if (expP != null) {

+      log.debug("Init expired page to: "+expP);

+      expiredPage = expP;

+    }

+  }

+

+  @Override

+  public void init() throws ServletException {

+    super.init();

+    myInit();

+  }

+

+  @Override

+  public void init(ServletConfig config) throws ServletException {

+    super.init(config);

+    myInit();

+  }

+

+

+

+  protected void doPost(HttpServletRequest req, HttpServletResponse resp)

+      throws ServletException, IOException {

+    doGet(req, resp);

+  }

+

+  protected void doGet(HttpServletRequest req, HttpServletResponse resp)

+      throws ServletException, java.io.IOException {

+

+    HttpSession session = req.getSession(false);

+    if (session == null) {

+      resp.sendRedirect(expiredPage);

+      return;

+    }

+    String sessionId = session.getId();

+    if (sessionId == null) {

+      resp.sendRedirect(expiredPage);

+      return;

+    }

+    log.debug("Got a result request for session: " + sessionId);

+    HTTPBindingProcessor bp = (HTTPBindingProcessor) getBindingProcessorManager().getBindingProcessor(

+        IdFactory.getInstance().createId(sessionId));

+    if (bp == null) {

+      session.invalidate();

+      resp.sendRedirect(expiredPage);

+      return;

+    }

+    

+    if (bp.getRedirectURL() != null) {

+      resp.sendRedirect(bp.getRedirectURL());

+      return;

+    }

+    resp.setStatus(bp.getResponseCode());

+    resp.setHeader("Cache-Control","no-store"); //HTTP 1.1

+    resp.setHeader("Pragma","no-cache"); //HTTP 1.0

+    resp.setDateHeader ("Expires", 0);

+    for (Iterator<String> it = bp.getResponseHeaders().keySet()

+        .iterator(); it.hasNext();) {

+      String header = it.next();

+      resp.setHeader(header, bp.getResponseHeaders().get(header));

+    }

+    resp.setContentType(bp.getResultContentType());

+    resp.setCharacterEncoding(encoding);

+    bp.writeResultTo(resp.getOutputStream(), encoding);

+    session.invalidate();

+  }

+}

diff --git a/BKUOnline/src/main/java/at/gv/egiz/bku/online/webapp/SessionTimeout.java b/BKUOnline/src/main/java/at/gv/egiz/bku/online/webapp/SessionTimeout.java
new file mode 100644
index 00000000..2b56166c
--- /dev/null
+++ b/BKUOnline/src/main/java/at/gv/egiz/bku/online/webapp/SessionTimeout.java
@@ -0,0 +1,49 @@
+/*
+* Copyright 2008 Federal Chancellery Austria and
+* Graz University of Technology
+*
+* Licensed under the Apache License, Version 2.0 (the "License");
+* you may not use this file except in compliance with the License.
+* You may obtain a copy of the License at
+*
+*     http://www.apache.org/licenses/LICENSE-2.0
+*
+* Unless required by applicable law or agreed to in writing, software
+* distributed under the License is distributed on an "AS IS" BASIS,
+* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+* See the License for the specific language governing permissions and
+* limitations under the License.
+*/
+package at.gv.egiz.bku.online.webapp;

+

+import javax.servlet.http.HttpSessionEvent;

+import javax.servlet.http.HttpSessionListener;

+

+import org.apache.commons.logging.Log;

+import org.apache.commons.logging.LogFactory;

+

+import at.gv.egiz.bku.binding.BindingProcessorManager;

+import at.gv.egiz.bku.binding.IdFactory;

+

+/**

+ * Session listener to trigger the removal of the BindingProcessor

+ *

+ */

+public class SessionTimeout implements HttpSessionListener {

+  

+  private static Log log = LogFactory.getLog(SessionTimeout.class);

+

+  @Override

+  public void sessionCreated(HttpSessionEvent arg0) {

+    // TODO Auto-generated method stub

+

+  }

+

+  @Override

+  public void sessionDestroyed(HttpSessionEvent event) {

+    BindingProcessorManager manager = (BindingProcessorManager) event.getSession().getServletContext().getAttribute(SpringBKUServlet.BEAN_NAME);

+    log.info("Removing session: "+event.getSession().getId());

+    manager.removeBindingProcessor(IdFactory.getInstance().createId(event.getSession().getId()));

+  }

+

+}

diff --git a/BKUOnline/src/main/java/at/gv/egiz/bku/online/webapp/SpringBKUServlet.java b/BKUOnline/src/main/java/at/gv/egiz/bku/online/webapp/SpringBKUServlet.java
new file mode 100644
index 00000000..6ee537b1
--- /dev/null
+++ b/BKUOnline/src/main/java/at/gv/egiz/bku/online/webapp/SpringBKUServlet.java
@@ -0,0 +1,31 @@
+/*
+* Copyright 2008 Federal Chancellery Austria and
+* Graz University of Technology
+*
+* Licensed under the Apache License, Version 2.0 (the "License");
+* you may not use this file except in compliance with the License.
+* You may obtain a copy of the License at
+*
+*     http://www.apache.org/licenses/LICENSE-2.0
+*
+* Unless required by applicable law or agreed to in writing, software
+* distributed under the License is distributed on an "AS IS" BASIS,
+* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+* See the License for the specific language governing permissions and
+* limitations under the License.
+*/
+package at.gv.egiz.bku.online.webapp;

+

+import javax.servlet.http.HttpServlet;

+

+import at.gv.egiz.bku.binding.BindingProcessorManager;

+

+public abstract class SpringBKUServlet extends HttpServlet {

+

+  public final static String BEAN_NAME="bindingProcessorManager";

+  

+  protected BindingProcessorManager getBindingProcessorManager() {

+    return (BindingProcessorManager) getServletContext().getAttribute(BEAN_NAME);

+  }

+

+}

diff --git a/BKUOnline/src/main/java/at/gv/egiz/stal/service/impl/RequestBrokerSTALFactory.java b/BKUOnline/src/main/java/at/gv/egiz/stal/service/impl/RequestBrokerSTALFactory.java
new file mode 100644
index 00000000..38c568ab
--- /dev/null
+++ b/BKUOnline/src/main/java/at/gv/egiz/stal/service/impl/RequestBrokerSTALFactory.java
@@ -0,0 +1,38 @@
+/*
+* Copyright 2008 Federal Chancellery Austria and
+* Graz University of Technology
+*
+* Licensed under the Apache License, Version 2.0 (the "License");
+* you may not use this file except in compliance with the License.
+* You may obtain a copy of the License at
+*
+*     http://www.apache.org/licenses/LICENSE-2.0
+*
+* Unless required by applicable law or agreed to in writing, software
+* distributed under the License is distributed on an "AS IS" BASIS,
+* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+* See the License for the specific language governing permissions and
+* limitations under the License.
+*/
+/*
+ * To change this template, choose Tools | Templates
+ * and open the template in the editor.
+ */
+
+package at.gv.egiz.stal.service.impl;
+
+import at.gv.egiz.stal.STAL;
+import at.gv.egiz.stal.STALFactory;
+
+/**
+ *
+ * @author clemens
+ */
+public class RequestBrokerSTALFactory implements STALFactory {
+
+    @Override
+    public STAL createSTAL() {
+        return new STALRequestBrokerImpl();
+    }
+
+}
diff --git a/BKUOnline/src/main/java/at/gv/egiz/stal/service/impl/STALRequestBroker.java b/BKUOnline/src/main/java/at/gv/egiz/stal/service/impl/STALRequestBroker.java
new file mode 100644
index 00000000..aad9b874
--- /dev/null
+++ b/BKUOnline/src/main/java/at/gv/egiz/stal/service/impl/STALRequestBroker.java
@@ -0,0 +1,43 @@
+/*
+* Copyright 2008 Federal Chancellery Austria and
+* Graz University of Technology
+*
+* Licensed under the Apache License, Version 2.0 (the "License");
+* you may not use this file except in compliance with the License.
+* You may obtain a copy of the License at
+*
+*     http://www.apache.org/licenses/LICENSE-2.0
+*
+* Unless required by applicable law or agreed to in writing, software
+* distributed under the License is distributed on an "AS IS" BASIS,
+* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+* See the License for the specific language governing permissions and
+* limitations under the License.
+*/
+/*
+ * To change this template, choose Tools | Templates
+ * and open the template in the editor.
+ */
+package at.gv.egiz.stal.service.impl;
+
+import at.gv.egiz.stal.STAL;
+import at.gv.egiz.stal.STALRequest;
+import at.gv.egiz.stal.STALResponse;
+import at.gv.egiz.stal.HashDataInputCallback;
+import java.util.List;
+import java.util.concurrent.TimeoutException;
+
+/**
+ *
+ * @author clemens
+ */
+public interface STALRequestBroker extends STAL {
+
+    public static final int ERR_6000 = 6000;
+    public static final long TIMEOUT_MS = 1000*60*5; //300000;
+
+    public List<STALRequest> nextRequest(List<STALResponse> response);
+//    public void setResponse(List<STALResponse> response) throws TimeoutException;
+//    public void interruptRequestHandling(ErrorResponseType error);
+    public HashDataInputCallback getHashDataInput();
+}
diff --git a/BKUOnline/src/main/java/at/gv/egiz/stal/service/impl/STALRequestBrokerImpl.java b/BKUOnline/src/main/java/at/gv/egiz/stal/service/impl/STALRequestBrokerImpl.java
new file mode 100644
index 00000000..19548247
--- /dev/null
+++ b/BKUOnline/src/main/java/at/gv/egiz/stal/service/impl/STALRequestBrokerImpl.java
@@ -0,0 +1,554 @@
+/*
+* Copyright 2008 Federal Chancellery Austria and
+* Graz University of Technology
+*
+* Licensed under the Apache License, Version 2.0 (the "License");
+* you may not use this file except in compliance with the License.
+* You may obtain a copy of the License at
+*
+*     http://www.apache.org/licenses/LICENSE-2.0
+*
+* Unless required by applicable law or agreed to in writing, software
+* distributed under the License is distributed on an "AS IS" BASIS,
+* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+* See the License for the specific language governing permissions and
+* limitations under the License.
+*/
+/*
+ * To change this template, choose Tools | Templates
+ * and open the template in the editor.
+ */
+package at.gv.egiz.stal.service.impl;
+
+import at.gv.egiz.stal.ErrorResponse;
+import at.gv.egiz.stal.QuitRequest;
+import at.gv.egiz.stal.STALRequest;
+import at.gv.egiz.stal.STALResponse;
+import at.gv.egiz.stal.HashDataInputCallback;
+import at.gv.egiz.stal.SignRequest;
+import java.util.ArrayList;
+import java.util.Collections;
+import java.util.List;
+import java.util.Locale;
+import org.apache.commons.logging.Log;
+import org.apache.commons.logging.LogFactory;
+
+/**
+ * An instance of STALRequestBroker is shared between a producer threads (SLCommand)
+ * and multiple consumer threads (STALService).
+ * This implementation assures that handleRequest is executed only once the previous invocation returned.
+ * The BindingProcessor assures that a new SLCommand calls handleRequest() only once
+ * the bindingProcessor called handleRequest(QUIT) after the previous SLCommand's handleRequest() returned.
+ * 
+ * Multiple STALService threads might call nextRequest()/getSignedReferences() in any order.
+ * 
+ * @author clemens
+ */
+public class STALRequestBrokerImpl implements STALRequestBroker {
+
+    private static final Log log = LogFactory.getLog(STALRequestBrokerImpl.class);
+//    protected RequestResponseBroker broker;   
+    protected List<STALRequest> requests = null;
+    protected List<STALResponse> responses = null;
+    protected HashDataInputCallback currentHashDataInputCallback;
+    private boolean isHandlingRequest = false;
+    private boolean expectingResponse = false;
+//    private Object handleRequestCondition = new Object();
+//    private Object gotResponsesCondition = new Object();
+//    public STALRequestBrokerImpl() {
+//        broker = new RequestResponseBroker();
+//        new Thread(handler).start();
+//    }
+
+//    @Override
+//    public HashDataInputCallback getCurrentHashDataInputCallback() {
+//        return broker.getCurrentHashDataInputCallback();
+//    }
+    /**
+     * Produce requests (and HashDataInputCallback) and wait for responses.
+     * The next thread may enter once we consumed the responses.
+     * 
+     * @param requests
+     * @return
+     * 
+     * @pre requests either single SignRequest, QuitRequest or multiple ReadInfoboxRequests
+     */
+    @Override
+    public synchronized List<STALResponse> handleRequest(List<STALRequest> requests) {
+        while (isHandlingRequest) {
+            log.trace("waiting to produce request");
+            try {
+                long beforeWait = System.currentTimeMillis();
+                wait(TIMEOUT_MS);
+                if (System.currentTimeMillis() - beforeWait >= TIMEOUT_MS) {
+                    log.warn("timeout while waiting to produce request");
+                    return Collections.singletonList((STALResponse) new ErrorResponse(ERR_6000));
+                }
+            } catch (InterruptedException ex) {
+                log.warn("interrupt while waiting to produce request: " + ex.getMessage());
+            }
+        }
+        log.trace("produce request");
+        isHandlingRequest = true;
+
+        this.requests = requests;
+        currentHashDataInputCallback = null;
+        for (STALRequest request : requests) {
+            if (request instanceof SignRequest) {
+                log.trace("Received SignRequest, keep HashDataInput callback.");
+                currentHashDataInputCallback = ((SignRequest) request).getHashDataInput();
+                break;
+            } else if (request instanceof QuitRequest) {
+                //alternative1:
+                //for QUIT requests, do not wait for responses, but for request consumation
+                // (i.e. set isHandlingReq to false once QUIT is consumed)
+                log.trace("Received QuitRequest, do not wait for responses.");
+                log.trace("notifying request consumers");
+                notify();
+                //alternative2:
+                //wait for QUIT to be consumed
+                // (i.e. notify me noce QUIT is consumed)
+//                while (this.requests != null) {
+//                    try {
+//                        long beforeWait = System.currentTimeMillis();
+//                        wait(TIMEOUT_MS);
+//                        if (System.currentTimeMillis() - beforeWait >= TIMEOUT_MS) {
+//                            log.warn("timeout while waiting for QUIT to be consumed");
+//                            this.requests = null;
+//                            isHandlingRequest = false;
+//                            return Collections.singletonList((STALResponse) new ErrorResponse(ERR_6000));
+//                        }
+//                    } catch (InterruptedException ex) {
+//                        log.warn("interrupt while waiting for QUIT to be consumed: " + ex.getMessage());
+//                    }
+//                }
+//                isHandlingRequest = false;
+                return new ArrayList<STALResponse>();
+            } else if (log.isTraceEnabled()) {
+                log.trace("Received STAL request: " + request.getClass().getName());
+            }
+        }
+        log.trace("notifying request consumers");
+        notify();
+
+        while (this.responses == null) {
+            log.trace("waiting to consume response");
+            try {
+                long beforeWait = System.currentTimeMillis();
+                wait(TIMEOUT_MS);
+                if (System.currentTimeMillis() - beforeWait >= TIMEOUT_MS) {
+                    log.warn("timeout while waiting to consume response");
+                    this.requests = null;
+                    currentHashDataInputCallback = null;
+                    isHandlingRequest = false;
+                    return Collections.singletonList((STALResponse) new ErrorResponse(ERR_6000));
+                }
+            } catch (InterruptedException ex) {
+                log.warn("interrupt while waiting to consume response: " + ex.getMessage());
+            }
+        }
+        log.trace("consuming responses");
+        List<STALResponse> resps = responses;
+        responses = null;
+        log.trace("notifying response producers");
+        notify();
+
+        isHandlingRequest = false;
+        log.trace("notifying request producers");
+        notify();
+
+        return resps;
+    }
+
+    /**
+     * 
+     * @param responses
+     * @return QUIT if expected responses are not provided
+     */
+    @Override
+    public synchronized List<STALRequest> nextRequest(List<STALResponse> responses) {
+        if (responses != null && responses.size() > 0) {
+            if (!expectingResponse) {
+                log.warn("Received unexpected response in nextRequest()");
+                return Collections.singletonList((STALRequest) new QuitRequest());
+            }
+            while (this.responses != null) {
+                log.trace("waiting to produce response");
+                try {
+                    long beforeWait = System.currentTimeMillis();
+                    wait(TIMEOUT_MS);
+                    if (System.currentTimeMillis() - beforeWait >= TIMEOUT_MS) {
+                        log.warn("timeout while waiting to produce response");
+                        return Collections.singletonList((STALRequest) new QuitRequest());
+                    }
+                } catch (InterruptedException ex) {
+                    log.warn("interrupt while waiting to produce response: " + ex.getMessage());
+                }
+            }
+            log.trace("produce response");
+            this.responses = responses;
+            //reset HashDataInputCallback
+            if (log.isTraceEnabled()) {
+                for (STALResponse response : responses) {
+                    log.trace("Received STAL response: " + response.getClass().getName());
+                }
+            }
+            log.trace("notifying response consumers");
+            notify();
+        } else {
+            if (expectingResponse) {
+                // while (expectingResponse) wait();
+                log.warn("No expected response received in nextRequest()");
+                return Collections.singletonList((STALRequest) new QuitRequest());
+            }
+            log.trace("expecting non-null response in next nextRequest(response)");
+            expectingResponse = true;
+        }
+        while (this.requests == null) {
+            log.trace("waiting to consume request");
+            try {
+                long beforeWait = System.currentTimeMillis();
+                wait(TIMEOUT_MS);
+                if (System.currentTimeMillis() - beforeWait >= TIMEOUT_MS) {
+                    log.warn("timeout while waiting to consume request");
+                    return Collections.singletonList((STALRequest) new QuitRequest());
+                }
+            } catch (InterruptedException ex) {
+                log.warn("interrupt while waiting to consume request: " + ex.getMessage());
+            }
+        }
+        log.trace("consume request");
+        List<STALRequest> reqs = requests;
+        //TODO check if QUIT and set isHandlingReq to false here? 
+        // (rename isHandlingReq -> produce)
+        // handleReq(QUIT) doesn't wait() and returns immediately
+        // cf. handleReq(QUIT)
+        requests = null;
+        //no need to notify; request producer is waiting for isHandlingRequest
+        //(alt2: the QUIT producer returned immediately and didn't notify)
+        //(alt1: the QUIT producer is waiting for notification on QUIT consumption)
+        if (reqs.size() > 0 && reqs.get(0) instanceof QuitRequest) {
+            isHandlingRequest = false;
+            log.trace("consumed QUIT, notifying request producers");
+            notify();
+            log.trace("expecting no response in next nextRequest()");
+            expectingResponse = false;
+            //notify no-response request consumers
+        }
+        return reqs;
+    }
+
+    @Override
+    public synchronized HashDataInputCallback getHashDataInput() {
+        log.trace("return current HashDataInput callback");
+        return currentHashDataInputCallback;
+    }
+//    /**
+//     * Causes the calling thread to sleep until response is passed via nextRequest()
+//     * (except for QUIT request, which returns immediately).
+//     * The requestList may contain at most one signRequest.
+//     * The signRequest's signedRefCallback is stored until a response to the signRequest is provided (2nd nextRequest() call),
+//     * i.e. until handleRequest() returns.
+//     * 
+//     * @param aRequestList
+//     * @return
+//     * @pre requestList contains at most one signRequest
+//     */
+//    @Override
+//    public List<STALResponse> handleRequest(List<STALRequest> requestList) {
+//        try {
+//            if (log.isTraceEnabled()) {
+//                log.trace("HandleRequest (" + requestList.size() + " requests)");
+//            }
+//
+//            broker.produceRequests(requestList);
+//
+//            // QUIT returns immediately
+//            if (requestList.size() == 1 && requestList.get(0) instanceof QuitRequest) {
+//                log.trace("Received QUIT request, do not wait for responses.");
+//                return new ArrayList<STALResponse>();
+//            }
+//            return broker.consumeResponses();
+//        } catch (InterruptedException ex) {
+//            log.error("Interrupted while handling STAL request list: " + ex.getMessage());
+//            return Collections.singletonList((STALResponse) new ErrorResponse());
+//        } catch (TimeoutException ex) {
+//            log.error("Timeout during handle request: " + ex.getMessage());
+//            ErrorResponse err = new ErrorResponse();
+//            err.setErrorCode(ERR_6000);
+//            return Collections.singletonList((STALResponse) err);
+//        }
+//    }
+//
+//    @Override
+//    public void setResponse(List<STALResponse> responses) {
+//        try {
+////        if (responses != null && responses.size() > 0) {
+////            List<STALResponse> stalResponses = translateResponses(responses);
+//            broker.produceResponses(responses);
+////        } else {
+////            log.trace("Received emtpy responses list, do not add.");
+////        }
+//        } catch (InterruptedException ex) {
+//            log.error("Interrupted while setting STAL response: " + ex.getMessage());
+////            broker.interrupt(new ErrorResponse());
+//        } catch (TimeoutException ex) {
+//            log.error("Timeout during setResponse: " + ex.getMessage());
+//        }
+//    }
+//
+//    /**
+//     * TODO split in nextRequest(void) and setResponses(responses)
+//     * <br/>
+//     * Translate (possibly empty) STAL-WS response list to STAL responses and
+//     * wait until request(s) are available and translate to STAL-WS requests.
+//     * @param prevResponse if null or zero-length, they are not passed to the handler
+//     * @return
+//     */
+//    @Override
+//    public List<STALRequest> nextRequest() { //List<ResponseType> responses) {
+//        try {
+////            if (responses != null && responses.size() > 0) {
+////                List<STALResponse> stalResponses = translateResponses(responses);
+////                broker.produceResponses(stalResponses);
+////            } else {
+////                log.trace("Received emtpy responses list, do not add.");
+////            }
+//
+////            List<? extends STALRequest> stalRequests = broker.consumeRequests();
+////            List<RequestType> requests = translateRequests(stalRequests);
+//            return broker.consumeRequests();
+////        } catch (InterruptedException ex) {
+////            log.error("Interrupted while requesting next STAL request: " + ex.getMessage());
+////            return Collections.singletonList((STALResponse) new ErrorResponse());
+//        } catch (InterruptedException ex) {
+//            log.error("Interrupted while requesting next STAL request: " + ex.getMessage());
+////            broker.interrupt(new ErrorResponse());
+//            return new ArrayList<STALRequest>();
+//        } catch (TimeoutException ex) {
+//            log.error("Timeout during nextRequest: " + ex.getMessage());
+//            return new ArrayList<STALRequest>();
+//        }
+//    }
+//
+////    @Override
+////    public void interruptRequestHandling(ErrorResponseType error) {
+////        if (log.isTraceEnabled()) {
+////            log.trace("Received Error: " + error.getErrorMessage());
+////        }
+////        broker.interrupt(new ErrorResponse(error.getErrorCode()));
+////    }
+//
+//    //TODO
+////    private List<RequestType> translateRequests(List<? extends STALRequest> stalRequests) {
+////        List<RequestType> requests = new ArrayList<RequestType>(stalRequests.size());
+////        for (STALRequest stalRequest : stalRequests) {
+////            if (stalRequest instanceof InfoboxReadRequest) {
+////                InfoboxReadRequestType req = new InfoboxReadRequestType();
+////                req.setInfoboxIdentifier(((InfoboxReadRequest) stalRequest).getInfoboxIdentifier());
+////                log.warn("TODO consider domain identifier for infobox " + req.getInfoboxIdentifier());
+////                req.setDomainIdentifier("TODO");
+////                requests.add(req);
+////            } else if (stalRequest instanceof SignRequest) {
+////                //TODO
+////                //remember current sign request for getSignedReferences()
+////                throw new UnsupportedOperationException("SignRequest unsupported");
+////            } else if (stalRequest instanceof QuitRequest) {
+////                requests.add(new QuitRequestType());
+////            } else {
+////                log.error("Unknown STAL request: " + stalRequest.getClass().getName());
+////            }
+////        }
+////        return requests;
+////    }
+//
+////    private List<STALResponse> translateResponses(List<ResponseType> responses) {
+////        List<STALResponse> stalResponses = new ArrayList<STALResponse>(responses.size());
+////        for (ResponseType response : responses) {
+////            if (response instanceof InfoboxReadResponseType) {
+////                byte[] infoboxValue = ((InfoboxReadResponseType) response).getInfoboxValue();
+////                stalResponses.add(new InfoboxReadResponse(infoboxValue));
+////            } else if (response instanceof SignResponseType) {
+////                byte[] signatureValue = ((SignResponseType) response).getSignatureValue();
+////                stalResponses.add(new SignResponse(signatureValue));
+////            } else if (response instanceof ErrorResponseType) {
+////                int errorCode = ((ErrorResponseType) response).getErrorCode();
+////                log.warn("TODO consider error msg: " + ((ErrorResponseType) response).getErrorMessage());
+////                stalResponses.add(new ErrorResponse(errorCode));
+////            } else {
+////                log.error("Unknown STAL service response " + response.getId() + ": " + response.getClass().getName());
+////            }
+////        }
+////        return stalResponses;
+////    }
+//    /**
+//     * synchronize on this, not on request/response lists since they are nulled
+//     */
+//    // protected since outer handler field is protected 
+//    protected class RequestResponseBroker { //implements Runnable {
+//
+//        protected List<STALRequest> requests = null;
+//        protected List<STALResponse> responses = null;
+//        protected HashDataInputCallback currentHashDataInputCallback;
+//
+////        @Override
+////        public void run() {
+////            while (true) {
+////                ;
+////            }
+////            //TODO handler lifecycle in run()?
+////        }
+//        /**
+//         * wait until requests are consumed,
+//         * produce requests, remember sigRefCallback and notify consumer
+//         * (no need for synchronized?)
+//         * @param requests 
+//         */
+//        public synchronized void produceRequests(List<STALRequest> requests) throws InterruptedException, TimeoutException {
+////            synchronized (requests) {
+//
+//            // requests is null, since there's only one producer thread calling handleRequests()
+//            // and handleRequest() returns only if nextRequest() was called
+//            while (this.requests != null) {
+////                    requests.wait();
+//                long before = System.currentTimeMillis();
+//                log.trace("waiting to produce requests ...");
+//                wait(); //TIMEOUT_MS);
+//                if (System.currentTimeMillis() - before >= TIMEOUT_MS) {
+//                    log.error("Timeout while waiting to produce requests.");
+//                    throw new TimeoutException();
+//                }
+//            }
+//            log.trace("producing requests");
+//            this.requests = requests;
+//            // getSignedReferences does not produce responses, 
+//            // so the command thread will not continue (and no further signRequest can possibly be produced)
+//            // once the ws-client sends nextRequest with responses to the signRequest, the callback is invalidated
+//
+//            // reset callback if for some reason produceResponse() wasn't called
+//            currentHashDataInputCallback = null;
+//            for (STALRequest request : requests) {
+//                if (request instanceof SignRequest) {
+//                    log.trace("keep hashdatainput callback");
+//                    currentHashDataInputCallback = ((SignRequest) request).getHashDataInput();
+//                    break;
+//                }
+//            }
+//
+////                requests.notify();
+//            log.trace("notifying request consumers (TODO not only consumers)");
+//            notify();
+////            }
+//        }
+//
+//        /**
+//         * wait until requests are produced and consume them
+//         * @return
+//         */
+//        public synchronized List<STALRequest> consumeRequests() throws InterruptedException, TimeoutException {
+//            List<STALRequest> retVal = null;
+////            synchronized (requests) {
+//            while (requests == null) {
+////                    requests.wait();
+//                long before = System.currentTimeMillis();
+//                log.trace("waiting to consumer requests ...");
+//                wait(); //TIMEOUT_MS);
+//                if (System.currentTimeMillis() - before >= TIMEOUT_MS) {
+//                    log.error("Timeout while waiting to consume requests.");
+//                    throw new TimeoutException();
+//                }
+//            }
+//            log.trace("consuming requests");
+//            retVal = requests;
+//            requests = null;
+////            }
+//            log.trace("???notify request producers???");
+//            return retVal;
+//        }
+//
+//        /**
+//         * wait until previous responses are consumed,
+//         * produce responses and notify consumer
+//         * @param responses
+//         */
+//        public synchronized void produceResponses(List<STALResponse> responses) throws InterruptedException, TimeoutException {
+////            synchronized (responses) {
+//            while (this.responses != null) {
+////                    responses.wait();
+//                long before = System.currentTimeMillis();
+//                log.trace("waiting to produce responses ...");
+//                wait(); //TIMEOUT_MS);
+//                if (System.currentTimeMillis() - before >= TIMEOUT_MS) {
+//                    log.error("Timeout while waiting to produce responses.");
+//                    throw new TimeoutException();
+//                }
+//            }
+//            log.trace("producing responses");
+//            this.responses = responses;
+//            //invalidate sigrefcallback (from now on handleRequest() may be called, producing new requests)
+//            //make sure the provided responses are for the corresponding signrequest
+//            if (this.requests == null) {//requests already consumed=>responses correspond to these
+//                log.trace("resetting current hashdatainput");
+//                currentHashDataInputCallback = null;
+//            }
+////                responses.notify();
+//            log.trace("notify response consumers (TODO only consumers?)");
+//            notify();
+////            }
+//        }
+//
+//        /**
+//         * wait until responses are available, consume them
+//         * @return
+//         * @throws java.lang.Exception
+//         */
+//        public synchronized List<STALResponse> consumeResponses() throws InterruptedException, TimeoutException {
+//            List<STALResponse> retVal = null;
+////            synchronized (responses) {
+//            while (responses == null) {
+////                    responses.wait();
+//                long before = System.currentTimeMillis();
+//                log.trace("waiting to consume responses ...");
+//                wait(); //TIMEOUT_MS);
+//                if (System.currentTimeMillis() - before >= TIMEOUT_MS) {
+//                    log.error("Timeout while waiting to consume responses.");
+//                    throw new TimeoutException();
+//                }
+//            }
+//            log.trace("consuming responses");
+//            retVal = responses;
+//            responses = null;
+////            }
+//            log.trace("???notify response producers???");
+//            return retVal;
+//        }
+//
+//        /**
+//         * get the signrefcallback until handleRequest() is called the next time.
+//         * @return null if last request was not a signRequest
+//         */
+//        public synchronized HashDataInputCallback getCurrentHashDataInputCallback() {
+//            log.trace("obtain current hashdatainput");
+//            return currentHashDataInputCallback;
+//        }
+//        /**
+//         * add the error to responses and notify (response-) consumers
+//         * @param error
+//         */
+////        public synchronized void interrupt(ErrorResponse error) {
+//////            synchronized (responses) {
+////            if (responses == null) {
+////                responses = Collections.singletonList((STALResponse) error);
+////            } else {
+////                responses.add(error);
+////            }
+//////                responses.notify();
+////            notify();
+//////            }
+////        }
+//    }
+    @Override
+    public void setLocale(Locale locale) {
+        // TODO Auto-generated method stub
+    }
+}
diff --git a/BKUOnline/src/main/java/at/gv/egiz/stal/service/impl/STALServiceImpl.java b/BKUOnline/src/main/java/at/gv/egiz/stal/service/impl/STALServiceImpl.java
new file mode 100644
index 00000000..3e8ad6f3
--- /dev/null
+++ b/BKUOnline/src/main/java/at/gv/egiz/stal/service/impl/STALServiceImpl.java
@@ -0,0 +1,220 @@
+/*
+* Copyright 2008 Federal Chancellery Austria and
+* Graz University of Technology
+*
+* Licensed under the Apache License, Version 2.0 (the "License");
+* you may not use this file except in compliance with the License.
+* You may obtain a copy of the License at
+*
+*     http://www.apache.org/licenses/LICENSE-2.0
+*
+* Unless required by applicable law or agreed to in writing, software
+* distributed under the License is distributed on an "AS IS" BASIS,
+* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+* See the License for the specific language governing permissions and
+* limitations under the License.
+*/
+/*
+ * To change this template, choose Tools | Templates
+ * and open the template in the editor.
+ */
+package at.gv.egiz.stal.service.impl;
+
+import at.gv.egiz.bku.binding.BindingProcessor;
+import at.gv.egiz.bku.binding.BindingProcessorManager;
+import at.gv.egiz.stal.service.*;
+import at.gv.egiz.bku.binding.Id;
+import at.gv.egiz.bku.binding.IdFactory;
+import at.gv.egiz.stal.ErrorResponse;
+import at.gv.egiz.stal.STALRequest;
+import at.gv.egiz.stal.STALResponse;
+import at.gv.egiz.stal.HashDataInputCallback;
+import at.gv.egiz.stal.InfoboxReadRequest;
+import at.gv.egiz.stal.QuitRequest;
+import at.gv.egiz.stal.SignRequest;
+
+import java.io.ByteArrayInputStream;
+import java.io.ByteArrayOutputStream;
+import java.io.IOException;
+import java.io.InputStream;
+import java.util.List;
+import javax.annotation.Resource;
+import javax.jws.WebService;
+import javax.servlet.ServletContext;
+import javax.xml.ws.WebServiceContext;
+import javax.xml.ws.handler.MessageContext;
+import org.apache.commons.logging.Log;
+import org.apache.commons.logging.LogFactory;
+
+/**
+ * 
+ * @author clemens
+ */
+@WebService(endpointInterface = "at.gv.egiz.stal.service.STALPortType")
+public class STALServiceImpl implements STALPortType {
+
+  public static final String BINDING_PROCESSOR_MANAGER = "bindingProcessorManager";
+  public static final String TEST_SESSION_ID = "TestSession";
+  protected static final Log log = LogFactory.getLog(STALServiceImpl.class);
+  @Resource
+  WebServiceContext wsContext;
+  protected IdFactory idF = IdFactory.getInstance();
+
+  @Override
+  public GetNextRequestResponseType getNextRequest(GetNextRequestType request) {
+
+    // HttpSession session = ((HttpServletRequest)
+    // mCtx.get(MessageContext.SERVLET_REQUEST)).getSession();
+    String sessId = request.getSessionId();
+    List<STALResponse> responses = request.getResponse();
+    if (log.isDebugEnabled()) {
+      log.debug("Received GetNextRequest for session " + sessId
+          + " containing " + responses.size() + " responses");
+    }
+
+    GetNextRequestResponseType response = new GetNextRequestResponseType();
+    response.setSessionId(sessId);
+
+    if (TEST_SESSION_ID.equals(sessId)) {
+      if (responses.size() > 0 && responses.get(0) instanceof ErrorResponse) {
+        log
+            .info("Received TestSession GetNextRequest(ErrorResponse), returning QuitRequest");
+        response.getRequest().add(new QuitRequest());
+      } else {
+        log
+            .info("Received TestSession GetNextRequest, returning InfoboxReadRequest ");
+        SignRequest sig = new SignRequest();
+        sig.setKeyIdentifier("SecureSignatureKeypair");
+        sig.setSignedInfo("<dsig:SignedInfo  xmlns:dsig=\"http://www.w3.org/2000/09/xmldsig#\" xmlns:xpf=\"http://www.w3.org/2002/06/xmldsig-filter2\"><dsig:CanonicalizationMethod Algorithm=\"http://www.w3.org/TR/2001/REC-xml-c14n-20010315\" /> <dsig:SignatureMethod Algorithm=\"http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha1\" /> <dsig:Reference Id=\"signed-data-reference-0-1214921968-27971781-24309\" URI=\"#signed-data-object-0-1214921968-27971781-13578\"><dsig:Transforms> <dsig:Transform Algorithm=\"http://www.w3.org/2002/06/xmldsig-filter2\"> <xpf:XPath xmlns:xpf=\"http://www.w3.org/2002/06/xmldsig-filter2\" Filter=\"intersect\">id('signed-data-object-0-1214921968-27971781-13578')/node()</xpf:XPath></dsig:Transform></dsig:Transforms><dsig:DigestMethod Algorithm=\"http://www.w3.org/2000/09/xmldsig#sha1\" /> <dsig:DigestValue>H1IePEEfGQ2SG03H6LTzw1TpCuM=</dsig:DigestValue></dsig:Reference><dsig:Reference Id=\"etsi-data-reference-0-1214921968-27971781-25439\" Type=\"http://uri.etsi.org/01903/v1.1.1#SignedProperties\" URI=\"#xmlns(etsi=http://uri.etsi.org/01903/v1.1.1%23)%20xpointer(id('etsi-data-object-0-1214921968-27971781-3095')/child::etsi:QualifyingProperties/child::etsi:SignedProperties)\"><dsig:DigestMethod Algorithm=\"http://www.w3.org/2000/09/xmldsig#sha1\" /><dsig:DigestValue>yV6Q+I60buqR4mMaxA7fi+CV35A=</dsig:DigestValue></dsig:Reference></dsig:SignedInfo>".getBytes());
+        response.getRequest().add(sig);
+        InfoboxReadRequest req = new InfoboxReadRequest();
+        req.setInfoboxIdentifier("IdentityLink");
+        req.setDomainIdentifier("hansiwurzel");
+        response.getRequest().add(req);
+        req = new InfoboxReadRequest();
+        req.setInfoboxIdentifier("CertifiedKeypair");
+        response.getRequest().add(req);
+        req = new InfoboxReadRequest();
+        req.setInfoboxIdentifier("SecureSignatureKeypair");
+        response.getRequest().add(req);
+      }
+      return response;
+    }
+
+    // get Session Id
+    Id sessionId = idF.createId(sessId);
+    STALRequestBroker stal = getStal(sessionId);
+
+    if (stal == null) {
+      log.error("Failed to get STAL for session " + sessId
+          + ", returning QuitRequest");
+      response.getRequest().add(new QuitRequest());
+    } else {
+      List<STALResponse> responsesIn = request.getResponse();
+      for (STALResponse resp : responsesIn) {
+        log.debug(resp);
+      }
+      List<STALRequest> requestsOut = ((STALRequestBroker) stal)
+          .nextRequest(responsesIn);
+      response.getRequest().addAll(requestsOut);
+      if (log.isDebugEnabled()) {
+        log.debug("Returning GetNextRequestResponse for session " + sessId
+            + " containing " + requestsOut.size() + " requests");
+      }
+    }
+    return response;
+  }
+
+  @Override
+  public GetHashDataInputResponseType getHashDataInput(
+      GetHashDataInputType request) throws GetHashDataInputFault {
+
+    String sessId = request.getSessionId();
+    if (log.isDebugEnabled()) {
+      log.debug("Received GetHashDataInputRequest for session " + sessId
+          + " containing " + request.getReference().size() + " referencese");
+    }
+
+    // get Session Id
+    Id sessionId = idF.createId(sessId);
+    STALRequestBroker stal = getStal(sessionId);
+
+    if (stal == null) {
+      String msg = "Failed to get STAL for session " + sessId;
+      log.error(msg);
+      GetHashDataInputFaultType faultInfo = new GetHashDataInputFaultType();
+      faultInfo.setErrorCode(1);
+      faultInfo.setErrorMessage(msg);
+      throw new GetHashDataInputFault(msg, faultInfo);
+    } else {
+      GetHashDataInputResponseType response = new GetHashDataInputResponseType();
+      response.setSessionId(sessId);
+
+      HashDataInputCallback hashDataInput = stal.getHashDataInput();
+      if (TEST_SESSION_ID.equals(sessId)) {
+        log
+            .debug("Received TestSession GetHashDataInput, setting dummy HashDataInputCallback");
+        hashDataInput = new HashDataInputCallback() {
+
+          @Override
+          public InputStream getHashDataInput(String referenceId) {
+            byte[] hd = ("dummyhashdatainput_" + referenceId).getBytes();
+            return new ByteArrayInputStream(hd);
+          }
+        };
+      }
+      if (hashDataInput != null) {
+        List<GetHashDataInputType.Reference> references = request
+            .getReference();
+        for (GetHashDataInputType.Reference reference : references) {
+          String refId = reference.getID();
+          if (log.isDebugEnabled()) {
+            log.debug("Resolving HashDataInput for reference " + refId);
+          }
+          ByteArrayOutputStream baos = null;
+          try {
+            InputStream hdi = hashDataInput.getHashDataInput(refId);
+            baos = new ByteArrayOutputStream(hdi.available());
+            int c;
+            while ((c = hdi.read()) != -1) {
+              baos.write(c);
+            }
+            GetHashDataInputResponseType.Reference ref = new GetHashDataInputResponseType.Reference();
+            ref.setID(refId);
+            ref.setValue(baos.toByteArray());
+            response.getReference().add(ref);
+          } catch (IOException ex) {
+            String msg = "Failed to get HashDataInput for reference " + refId;
+            log.error(msg, ex);
+            GetHashDataInputFaultType faultInfo = new GetHashDataInputFaultType();
+            faultInfo.setErrorCode(1);
+            faultInfo.setErrorMessage(msg);
+            throw new GetHashDataInputFault(msg, faultInfo, ex);
+          } finally {
+            try {
+              baos.close();
+            } catch (IOException ex) {
+            }
+          }
+        }
+      } else {
+        log.warn("Could not resolve any HashDataInputs for session " + sessId
+            + ", no callback provided.");
+      }
+      return response;
+    }
+  }
+
+  private STALRequestBroker getStal(Id sessionId) {
+    // log.warn("RETURNING DUMMY STAL REQUEST BROKER");
+    // return new STALRequestBrokerImpl();
+
+    MessageContext mCtx = wsContext.getMessageContext();
+    ServletContext sCtx = (ServletContext) mCtx
+        .get(MessageContext.SERVLET_CONTEXT);
+    BindingProcessorManager bpMgr = (BindingProcessorManager) sCtx
+        .getAttribute(BINDING_PROCESSOR_MANAGER);
+    BindingProcessor bp = bpMgr.getBindingProcessor(sessionId);
+    return (bp == null) ? null : (STALRequestBroker) bp.getSTAL();
+  }
+}