summaryrefslogtreecommitdiff
path: root/bkucommon/src/main/java/at/gv/egiz/bku/slcommands/impl/xsect/Signature.java
AgeCommit message (Collapse)AuthorFilesLines
2017-06-23fix another possible XXE, SSRF problem.Thomas Lenz1-1/+9
INFO: DocTypes are disabled by default for all XML content that should be signed with mocca!!! Consequently, XML and XAdES signatures for XML documents that contains a DocType declaration is not possible any more. If DocType declarations are absolutely necessary than this feature can be skipped by set the Java System-Property "-Degiz.mocca.xades.xml.allow.doctype=true"
2013-11-28Use newly generated JAXB classestkellner1-5/+5
git-svn-id: https://joinup.ec.europa.eu/svn/mocca/trunk@1230 8a26b1a7-26f0-462f-b9ef-d0e30c41f5a4
2013-11-26Spelling refactortkellner1-1/+1
git-svn-id: https://joinup.ec.europa.eu/svn/mocca/trunk@1226 8a26b1a7-26f0-462f-b9ef-d0e30c41f5a4
2012-09-21Create (client) & Log (server) STAL error messagestkellner1-4/+5
git-svn-id: https://joinup.ec.europa.eu/svn/mocca/trunk@1136 8a26b1a7-26f0-462f-b9ef-d0e30c41f5a4
2012-08-02Make log output usefultkellner1-1/+1
git-svn-id: https://joinup.ec.europa.eu/svn/mocca/trunk@1130 8a26b1a7-26f0-462f-b9ef-d0e30c41f5a4
2012-01-27remove commented importtkellner1-2/+0
git-svn-id: https://joinup.ec.europa.eu/svn/mocca/trunk@1019 8a26b1a7-26f0-462f-b9ef-d0e30c41f5a4
2012-01-25spellingtkellner1-2/+2
git-svn-id: https://joinup.ec.europa.eu/svn/mocca/trunk@1016 8a26b1a7-26f0-462f-b9ef-d0e30c41f5a4
2012-01-25SignedProperties reference should point straight to SignedPropertiestkellner1-3/+3
git-svn-id: https://joinup.ec.europa.eu/svn/mocca/trunk@1015 8a26b1a7-26f0-462f-b9ef-d0e30c41f5a4
2012-01-25Reference Type doesn't require version number anymoretkellner1-2/+2
git-svn-id: https://joinup.ec.europa.eu/svn/mocca/trunk@1014 8a26b1a7-26f0-462f-b9ef-d0e30c41f5a4
2012-01-25Remove xpointer reference in XAdES 1.4 Signaturetkellner1-12/+1
git-svn-id: https://joinup.ec.europa.eu/svn/mocca/trunk@1013 8a26b1a7-26f0-462f-b9ef-d0e30c41f5a4
2012-01-25Add configurable option to create XAdES 1.4 signaturestkellner1-6/+147
git-svn-id: https://joinup.ec.europa.eu/svn/mocca/trunk@1011 8a26b1a7-26f0-462f-b9ef-d0e30c41f5a4
2011-06-22License changetkellner1-15/+23
copyright headers changed/added License text added NOTICE modified git-svn-id: https://joinup.ec.europa.eu/svn/mocca/trunk@940 8a26b1a7-26f0-462f-b9ef-d0e30c41f5a4
2010-05-05Merged feature branch mocca-1.2.13-id@r724 back to trunk.mcentner1-21/+22
git-svn-id: https://joinup.ec.europa.eu/svn/mocca/trunk@725 8a26b1a7-26f0-462f-b9ef-d0e30c41f5a4
2009-11-11Added support for SHA-256 and partial support for e-card G3, BELPIC and ↵mcentner1-6/+17
Italian cards. git-svn-id: https://joinup.ec.europa.eu/svn/mocca/trunk@540 8a26b1a7-26f0-462f-b9ef-d0e30c41f5a4
2009-09-29Logging issues fixed:mcentner1-10/+8
- Added possibility to configure logging of BKUWebstart. Logging is now configured from log4j configuration deployed with BKUWebstart in a first step. In a second step the webstart launcher looks for a log4j configuration file in the user's mooca configuration directory and updates the log4j configuration. - Logging of IAIK PKI properly initialized. IAIK PKI does not mess with the log4j configuration any longer. - Changed log4j accordingly (an appender is now needed as IAIK PKI does not reconfigure log4j any longer). Added css-stylesheet to ErrorResponses issued by the BKU to improve the presentation to the user. Changed dependencies of BKUWebStart (see Issue#469 https://egovlabs.gv.at/tracker/index.php?func=detail&aid=469&group_id=13&atid=134). DataURLConnection now uses the request encoding of SL < 1.2. application/x-www-form-urlencoded is now used as default encoding method. multipart/form-data is used only if transfer parameters are present in the request that require a Content-Type parameter. This can only be set with multipart/form-data. This is not in conformance with SL 1.2, however it should improve compatibility with applications. Therefore, removed the ability to configure the DataURLConnection implementation class. DataURLConnection now uses a streaming implementation for encoding of application/x-www-form-urlencoded requests. XWWWFormUrlImputDecoder now uses a streaming implementation for decoding of application/x-www-form-urlencoded requests. Fixed Bug in SLResultPart that caused a binary response to be provided as parameter "XMLResponse" in a multipart/form-data encoded request to DataURL. SLCommandFactory now supports unmarshalling of SL < 1.2 requests in order issue meaningful error messages. Therefore, the marshaling context for response marshaling had to be separated from the marshaling context for requests in order to avoid the marshaling of SL < 1.2 namespace prefixes in SL 1.2 responses. Target attribute in QualifiedProperties is now marshaled. (see Issue#470 https://egovlabs.gv.at/tracker/index.php?func=detail&aid=470&group_id=13&atid=134) Reporting of XML validation errors improved. git-svn-id: https://joinup.ec.europa.eu/svn/mocca/trunk@510 8a26b1a7-26f0-462f-b9ef-d0e30c41f5a4
2009-02-261.1 candidate (activation)clemenso1-1/+4
git-svn-id: https://joinup.ec.europa.eu/svn/mocca/trunk@309 8a26b1a7-26f0-462f-b9ef-d0e30c41f5a4
2008-09-15Migrated BKULocal to BKUCommonGUI and minor bug fixeswbauer1-0/+25
git-svn-id: https://joinup.ec.europa.eu/svn/mocca/trunk@37 8a26b1a7-26f0-462f-b9ef-d0e30c41f5a4
2008-09-11Added to be signed data validation.mcentner1-2/+8
git-svn-id: https://joinup.ec.europa.eu/svn/mocca/trunk@32 8a26b1a7-26f0-462f-b9ef-d0e30c41f5a4
2008-09-05HashDataInputclemenso1-919/+936
git-svn-id: https://joinup.ec.europa.eu/svn/mocca/trunk@20 8a26b1a7-26f0-462f-b9ef-d0e30c41f5a4
2008-08-29Initial import.mcentner1-0/+935
git-svn-id: https://joinup.ec.europa.eu/svn/mocca/trunk@1 8a26b1a7-26f0-462f-b9ef-d0e30c41f5a4