1 files changed, 127 insertions, 0 deletions
diff --git a/bkucommon/src/main/java/at/gv/egiz/bku/slcommands/impl/xsect/STALSignatureMethod.java b/bkucommon/src/main/java/at/gv/egiz/bku/slcommands/impl/xsect/STALSignatureMethod.java
new file mode 100644
index 00000000..a9bb8e04
--- /dev/null
+++ b/bkucommon/src/main/java/at/gv/egiz/bku/slcommands/impl/xsect/STALSignatureMethod.java
@@ -0,0 +1,127 @@
+/*
+* Copyright 2009 Federal Chancellery Austria and
+* Graz University of Technology
+*
+* Licensed under the Apache License, Version 2.0 (the "License");
+* you may not use this file except in compliance with the License.
+* You may obtain a copy of the License at
+*
+*     http://www.apache.org/licenses/LICENSE-2.0
+*
+* Unless required by applicable law or agreed to in writing, software
+* distributed under the License is distributed on an "AS IS" BASIS,
+* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+* See the License for the specific language governing permissions and
+* limitations under the License.
+*/
+
+package at.gv.egiz.bku.slcommands.impl.xsect;
+
+import java.io.ByteArrayOutputStream;
+import java.io.IOException;
+import java.io.InputStream;
+import java.security.InvalidAlgorithmParameterException;
+import java.security.Key;
+import java.security.NoSuchAlgorithmException;
+import java.util.ArrayList;
+import java.util.Collections;
+import java.util.List;
+
+import javax.xml.crypto.XMLCryptoContext;
+import javax.xml.crypto.dsig.XMLSignatureException;
+import javax.xml.crypto.dsig.spec.SignatureMethodParameterSpec;
+
+import at.gv.egiz.bku.slcommands.impl.DataObjectHashDataInput;
+import at.gv.egiz.bku.slexceptions.SLViewerException;
+import at.gv.egiz.bku.utils.StreamUtil;
+import at.gv.egiz.stal.ErrorResponse;
+import at.gv.egiz.stal.HashDataInput;
+import at.gv.egiz.stal.STAL;
+import at.gv.egiz.stal.STALRequest;
+import at.gv.egiz.stal.STALResponse;
+import at.gv.egiz.stal.SignRequest;
+import at.gv.egiz.stal.SignResponse;
+
+import iaik.xml.crypto.dsig.AbstractSignatureMethodImpl;
+
+public class STALSignatureMethod extends AbstractSignatureMethodImpl {
+  
+  /**
+   * Creates a new instance of this <code>STALSignatureMethod</code>
+   * with the given <code>algorithm</code> and <code>params</code>.
+   * 
+   * @param algorithm the algorithm URI
+   * @param params optional algorithm parameters
+   * @throws InvalidAlgorithmParameterException if the specified parameters 
+   * are inappropriate for the requested algorithm
+   * @throws NoSuchAlgorithmException if an implementation of the specified 
+   * algorithm cannot be found
+   * @throws NullPointerException if <code>algorithm</code> is <code>null</code>  
+   */
+  public STALSignatureMethod(String algorithm,
+      SignatureMethodParameterSpec params)
+      throws InvalidAlgorithmParameterException, NoSuchAlgorithmException {
+    super(algorithm, params);
+  }
+
+  @Override
+  public byte[] calculateSignatureValue(XMLCryptoContext context, Key key, InputStream message)
+      throws XMLSignatureException, IOException {
+    
+    if (!(key instanceof STALPrivateKey)) {
+      throw new XMLSignatureException("STALSignatureMethod expects STALPrivateKey.");
+    }
+
+    STAL stal = ((STALPrivateKey) key).getStal();
+    String keyboxIdentifier = ((STALPrivateKey) key).getKeyboxIdentifier();
+    List<DataObject> dataObjects = ((STALPrivateKey) key).getDataObjects();
+    
+    List<HashDataInput> hashDataInputs = new ArrayList<HashDataInput>();
+    for (DataObject dataObject : dataObjects) {
+      try {
+        dataObject.validateHashDataInput();
+      } catch (SLViewerException e) {
+        throw new XMLSignatureException(e);
+      }
+      hashDataInputs.add(new DataObjectHashDataInput(dataObject));
+    }
+    
+    ByteArrayOutputStream m = new ByteArrayOutputStream();
+    StreamUtil.copyStream(message, m);
+    
+    SignRequest signRequest = new SignRequest();
+    signRequest.setKeyIdentifier(keyboxIdentifier);
+    signRequest.setSignedInfo(m.toByteArray());
+    signRequest.setHashDataInput(hashDataInputs);
+
+    List<STALResponse> responses = 
+      stal.handleRequest(Collections.singletonList((STALRequest) signRequest));
+    
+    if (responses == null || responses.size() != 1) {
+      throw new XMLSignatureException("Failed to access STAL.");
+    }
+
+    STALResponse response = responses.get(0);
+    if (response instanceof SignResponse) {
+      return ((SignResponse) response).getSignatureValue();
+    } else if (response instanceof ErrorResponse) {
+      STALSignatureException se = new STALSignatureException(((ErrorResponse) response).getErrorCode());
+      throw new XMLSignatureException(se);
+    } else {
+      throw new XMLSignatureException("Failed to access STAL.");
+    }
+    
+  }
+
+  @Override
+  public boolean validateSignatureValue(XMLCryptoContext context, Key key, byte[] value,
+      InputStream message) throws XMLSignatureException, IOException {
+    throw new XMLSignatureException("The STALSignatureMethod does not support validation.");
+  }
+
+  @Override
+  protected Class<?> getParameterSpecClass() {
+    return null;
+  }
+  
+}