enveloping connectors

git-svn-id: https://joinup.ec.europa.eu/svn/pdf-as/trunk@80 7b5415b0-85f9-ee4d-85bd-d5d0c3b42d1c

1 files changed, 721 insertions, 0 deletions

diff --git a/src/main/java/at/knowcenter/wag/egov/egiz/sig/connectors/moa/EnvelopingBase64MOAConnector.java b/src/main/java/at/knowcenter/wag/egov/egiz/sig/connectors/moa/EnvelopingBase64MOAConnector.java
new file mode 100644
index 0000000..4e9dd04
--- /dev/null
+++ b/src/main/java/at/knowcenter/wag/egov/egiz/sig/connectors/moa/EnvelopingBase64MOAConnector.java
@@ -0,0 +1,721 @@
+/**

+ * 

+ */

+package at.knowcenter.wag.egov.egiz.sig.connectors.moa;

+

+import java.io.ByteArrayInputStream;

+import java.io.IOException;

+import java.io.UnsupportedEncodingException;

+import java.security.cert.CertificateException;

+import java.security.cert.CertificateFactory;

+import java.security.cert.X509Certificate;

+import java.util.Properties;

+import java.util.regex.Matcher;

+import java.util.regex.Pattern;

+

+import org.apache.commons.logging.Log;

+import org.apache.commons.logging.LogFactory;

+

+import at.knowcenter.wag.egov.egiz.cfg.SettingsReader;

+import at.knowcenter.wag.egov.egiz.exceptions.ConnectorException;

+import at.knowcenter.wag.egov.egiz.exceptions.SettingsException;

+import at.knowcenter.wag.egov.egiz.sig.SignatureData;

+import at.knowcenter.wag.egov.egiz.sig.SignatureObject;

+import at.knowcenter.wag.egov.egiz.sig.SignatureResponse;

+import at.knowcenter.wag.egov.egiz.sig.X509Cert;

+import at.knowcenter.wag.egov.egiz.sig.connectors.Connector;

+import at.knowcenter.wag.egov.egiz.sig.connectors.TemplateReplaces;

+import at.knowcenter.wag.egov.egiz.sig.connectors.bku.BKUHelper;

+import at.knowcenter.wag.egov.egiz.sig.connectors.bku.BKUPostConnection;

+import at.knowcenter.wag.egov.egiz.sig.connectors.bku.SignSignatureObject;

+import at.knowcenter.wag.egov.egiz.tools.CodingHelper;

+import at.knowcenter.wag.egov.egiz.tools.FileHelper;

+

+/**

+ * @author wprinz

+ * 

+ */

+public class EnvelopingBase64MOAConnector implements Connector

+{

+  /**

+   * The log.

+   */

+  private static Log log = LogFactory.getLog(EnvelopingBase64MOAConnector.class);

+

+  /**

+   * The environemnt configuration of this connector containing templates and

+   * other configurable elements.

+   */

+  protected Environment environment = null;

+

+  /**

+   * Constructor that builds the configuration environment for this connector

+   * according to the given profile.

+   * 

+   * <p>

+   * If confuguration parameters are not defined on that profile, the default

+   * parameters defined in the configuration are used.

+   * </p>

+   * 

+   * @param profile

+   *          The profile from which the Environment should be assembled.

+   * @throws ConnectorException

+   *           f.e.

+   */

+  public EnvelopingBase64MOAConnector(String profile) throws ConnectorException

+  {

+    this.environment = new Environment(profile);

+  }

+

+  /**

+   * @see at.knowcenter.wag.egov.egiz.sig.connectors.Connector#doSign(at.knowcenter.wag.egov.egiz.sig.SignatureData)

+   */

+  public SignSignatureObject doSign(SignatureData data) throws ConnectorException

+  {

+    log.debug("doSign:"); //$NON-NLS-1$

+

+    String sign_request_xml = prepareSignRequest(data);

+    log.debug("sign_request_xml = " + sign_request_xml); //$NON-NLS-1$

+

+    String url = this.environment.getSignURL();

+    Properties response_properties = sendRequest(url, MOASoapConnection.SERVICE_SIGN, sign_request_xml);

+

+    log.debug("response_string = " + response_properties.getProperty(BKUPostConnection.RESPONSE_STRING_KEY));; //$NON-NLS-1$

+    SignSignatureObject sso = analyzeSignResponse(response_properties);

+

+    // TODO this could be made more generic

+    sso.response_properties = response_properties;

+

+    log.debug("doSign finished."); //$NON-NLS-1$

+    return sso;

+  }

+

+  /**

+   * @see at.knowcenter.wag.egov.egiz.sig.connectors.Connector#doVerify(at.knowcenter.wag.egov.egiz.sig.SignatureData,

+   *      at.knowcenter.wag.egov.egiz.sig.connectors.bku.SignSignatureObject)

+   */

+  public SignatureResponse doVerify(SignatureData data, SignSignatureObject so) throws ConnectorException

+  {

+    log.debug("doVerify:"); //$NON-NLS-1$

+

+    String verify_request_xml = prepareVerifyRequest(data, so);

+    log.debug("verify_request_xml = " + verify_request_xml); //$NON-NLS-1$

+

+    String url = this.environment.getVerifyURL();

+    Properties response_properties = sendRequest(url, MOASoapConnection.SERVICE_VERIFY, verify_request_xml);

+

+    SignatureResponse signature_response = analyzeVerifyResponse(response_properties);

+

+    log.debug("doVerify finished."); //$NON-NLS-1$

+    return signature_response;

+  }

+

+  protected Properties sendRequest(String url, String mode,

+      String request_string) throws ConnectorException

+  {

+    try

+    {

+      Properties response_properties = MOASoapConnection.connectMOA(request_string, MOASoapConnection.SERVICE_SIGN, url);

+      return response_properties;

+    }

+    catch (Exception e)

+    {

+      throw new ConnectorException(320, e);

+    }

+  }

+

+  /**

+   * Prepares the sign request xml to be sent using the sign request template.

+   * 

+   * @param data

+   *          The SignatureData.

+   * @return Returns the sign request xml to be sent.

+   * @throws ConnectorException

+   *           f.e.

+   */

+  protected String prepareSignRequest(SignatureData data) throws ConnectorException

+  {

+    log.debug("prepareSignRequest:"); //$NON-NLS-1$

+

+    String sign_request_template = this.environment.getSignRequestTemplate();

+

+    String sign_key_identifier = this.environment.getSignKeyIdentifier();

+    String base64 = BKUHelper.prepareBase64Content(data);

+

+    String sign_request_xml = sign_request_template.replaceFirst(TemplateReplaces.KEY_IDENTIFIER_REPLACE, sign_key_identifier);

+    sign_request_xml = sign_request_xml.replaceFirst(TemplateReplaces.BASE64_CONTENT_REPLACE, base64);

+

+    log.debug("prepareSignRequest finished."); //$NON-NLS-1$

+    return sign_request_xml;

+  }

+  

+  /**

+   * Prepares the verify request xml to be sent using the verify request

+   * template.

+   * 

+   * @param data

+   *          The SignatureData.

+   * @param so

+   *          The signature information object.

+   * @return Returns the verify request xml to be sent.

+   * @throws ConnectorException

+   *           f.e.

+   */

+  public String prepareVerifyRequest(SignatureData data,

+      SignSignatureObject so) throws ConnectorException

+  {

+    String verify_request_template = this.environment.getVerifyRequestTemplate();

+

+    String xml_content = null;

+    // TODO implement MOA

+    // if (sigObject.isMOASigned())

+    // {

+    // MOAConnector moa_conn = new MOAConnector();

+    // // get the MOA-template

+    // verify_template_str = moa_conn.getVerifyTemplate(normalizedText,

+    // sigObject);

+    // }

+    // else

+    // {

+    // get the BKU-template

+    xml_content = prepareXMLContent(data, so);

+    // }

+

+    String verify_request_xml = verify_request_template.replaceFirst(TemplateReplaces.XML_CONTENT_REPLACE, xml_content);

+    verify_request_xml = verify_request_xml.replaceFirst(TemplateReplaces.TRUST_PROFILE_ID_REPLACE, this.environment.getVerifyTrustProfileId());

+

+    return verify_request_xml;

+  }

+

+  /**

+   * Analyzes the sign response xml and extracts the signature data.

+   * 

+   * @param response_properties

+   *          The response properties containing the response String and

+   *          transport related information.

+   * @return Returns the extracted data encapsulated in a SignatureObject.

+   * @throws ConnectorException

+   *           f.e.

+   */

+  public SignSignatureObject analyzeSignResponse(Properties response_properties) throws ConnectorException

+  {

+    log.debug("analyzeSignResponse:"); //$NON-NLS-1$

+

+    String response_string = response_properties.getProperty(BKUPostConnection.RESPONSE_STRING_KEY);

+

+    BKUHelper.checkResponseForError(response_string);

+

+    SignSignatureObject so = parseCreateXMLResponse(response_string);

+

+    log.debug("analyzeSignResponse finished."); //$NON-NLS-1$

+    return so;

+  }

+

+  /**

+   * Analyzes the verify response string.

+   * 

+   * @param response_properties

+   *          The response properties containing the response XML.

+   * @return Returns the SignatureResponse containing the verification result.

+   * @throws ConnectorException

+   *           f.e.

+   */

+  public SignatureResponse analyzeVerifyResponse(Properties response_properties) throws ConnectorException

+  {

+    log.debug("analyzeVerifyResponse:"); //$NON-NLS-1$

+

+    String response_string = response_properties.getProperty(BKUPostConnection.RESPONSE_STRING_KEY);

+

+    BKUHelper.checkResponseForError(response_string);

+

+    SignatureResponse signature_response = BKUHelper.parseVerifyXMLResponse(response_string);

+

+    log.debug("analyzeVerifyResponse finished."); //$NON-NLS-1$

+    return signature_response;

+  }

+

+  

+  /**

+   * Prepares the XML content the holds the actual signature data.

+   * 

+   * <p>

+   * This strongly rebuilds the XML content as retuned from a sign request.

+   * </p>

+   * 

+   * @param data

+   *          The data.

+   * @param so

+   *          The signature object containing the signature information.

+   * @return Returns the XML content.

+   * @throws ConnectorException

+   *           f.e.

+   */

+  public String prepareXMLContent(SignatureData data, SignSignatureObject so) throws ConnectorException

+  {

+    log.debug("prepareXMLContent:"); //$NON-NLS-1$

+    try

+    {

+      String verify_template = this.environment.getVerifyTemplate();

+

+      X509Certificate cert = so.getX509Certificate();

+      String cert_alg = this.environment.getCertAlgEcdsa();

+      if (cert.getPublicKey().getAlgorithm().indexOf("RSA") >= 0) //$NON-NLS-1$

+      {

+        cert_alg = this.environment.getCertAlgRsa();

+      }

+

+      // cert alg replace

+      String verify_xml = verify_template.replaceFirst(TemplateReplaces.CERT_ALG_REPLACE, cert_alg);

+

+      // data digest replace

+      {

+        byte[] data_value = data.getData();

+        byte[] data_value_hash = CodingHelper.buildDigest(data_value);

+        String object_data_hash = CodingHelper.encodeBase64(data_value_hash);

+

+        verify_xml = verify_xml.replaceFirst(TemplateReplaces.DIGEST_VALUE_SIGNED_DATA_REPLACE, object_data_hash);

+      }

+

+      verify_xml = verify_xml.replaceFirst(TemplateReplaces.SIGNATURE_VALUE_REPLACE, so.getSignatureValue());

+

+      // X.509 Certificate replace

+      byte[] der = cert.getEncoded();

+      byte[] cert_hash = CodingHelper.buildDigest(der);

+      String certDigest = CodingHelper.encodeBase64(cert_hash);

+      String x509_cert_string = CodingHelper.encodeBase64(der);

+      verify_xml = verify_xml.replaceFirst(TemplateReplaces.X509_CERTIFICATE_REPLACE, x509_cert_string);

+

+      // Base64 content replace

+      String base64 = BKUHelper.prepareBase64Content(data);

+      verify_xml = verify_xml.replaceFirst(TemplateReplaces.BASE64_CONTENT_REPLACE, base64);

+

+      // Qualified Properties replaces

+      verify_xml = verify_xml.replaceFirst(TemplateReplaces.SIGNING_TIME_REPLACE, so.getDate());

+      verify_xml = verify_xml.replaceFirst(TemplateReplaces.DIGEST_VALUE_CERTIFICATE_REPLACE, certDigest);

+      verify_xml = verify_xml.replaceFirst(TemplateReplaces.X509_ISSUER_NAME_REPLACE, so.getIssuer());

+      verify_xml = verify_xml.replaceFirst(TemplateReplaces.X509_SERIAL_NUMBER_REPLACE, so.getSerialNumber());

+      // SigDataRefReplace already done above

+

+      // Signed Properties hash

+      {

+        final String ETSI_SIGNED_PROPERTIES_START_TAG = "<etsi:SignedProperties"; //$NON-NLS-1$

+        final String ETSI_SIGNED_PROPERTIES_END_TAG = "</etsi:SignedProperties>"; //$NON-NLS-1$

+

+        final int hash_start = verify_xml.indexOf(ETSI_SIGNED_PROPERTIES_START_TAG);

+        assert hash_start >= 0;

+        final int hash_end = verify_xml.indexOf(ETSI_SIGNED_PROPERTIES_END_TAG, hash_start) + ETSI_SIGNED_PROPERTIES_END_TAG.length();

+        assert hash_end - ETSI_SIGNED_PROPERTIES_END_TAG.length() >= 0;

+        assert hash_end > hash_start;

+

+        final String string_to_be_hashed = verify_xml.substring(hash_start, hash_end);

+        log.debug("etsi:SignedProperties string to be hashed: " + string_to_be_hashed); //$NON-NLS-1$

+

+        final byte[] bytes_to_be_hashed = string_to_be_hashed.getBytes("UTF-8"); //$NON-NLS-1$

+        byte[] sig_prop_code = CodingHelper.buildDigest(bytes_to_be_hashed);

+        String sig_prop_hash = CodingHelper.encodeBase64(sig_prop_code);

+

+        verify_xml = verify_xml.replaceFirst(TemplateReplaces.DIGEST_VALUE_SIGNED_PROPERTIES_REPLACE, sig_prop_hash);

+      }

+

+      log.debug("prepareXMLContent finished."); //$NON-NLS-1$

+      return verify_xml;

+    }

+    catch (Exception e)

+    {

+      log.debug(e);

+      throw new ConnectorException(310, e);

+    }

+  }

+

+  

+  /**

+   * This method parses the MOA-Response string. It separates the

+   * SignatureValue, X509IssuerName, SigningTime, X509SerialNumber,

+   * X509Certificate, CertDigest and DigestValues. If the X509Certificate is

+   * extracted it would be stored in the certificates directory.

+   * 

+   * @param xmlResponse

+   *          the response string from the MOA sign-request

+   * @throws ConnectorException

+   *           ErrorCode (303, 304)

+   * @see SignatureObject

+   * @see CodingHelper

+   * @see X509Cert

+   */

+  public static SignSignatureObject parseCreateXMLResponse(String xmlResponse) throws ConnectorException

+  {

+    Pattern sig_val_p_s = Pattern.compile("<[\\w]*:?SignatureValue>"); //$NON-NLS-1$

+    Pattern sig_val_p_e = Pattern.compile("</[\\w]*:?SignatureValue>"); //$NON-NLS-1$

+    Pattern iss_nam_p_s = Pattern.compile("<[\\w]*:?X509IssuerName>"); //$NON-NLS-1$

+    Pattern iss_nam_p_e = Pattern.compile("</[\\w]*:?X509IssuerName>"); //$NON-NLS-1$

+    Pattern sig_tim_p_s = Pattern.compile("<[\\w]*:?SigningTime>"); //$NON-NLS-1$

+    Pattern sig_tim_p_e = Pattern.compile("</[\\w]*:?SigningTime>"); //$NON-NLS-1$

+    Pattern ser_num_p_s = Pattern.compile("<[\\w]*:?X509SerialNumber>"); //$NON-NLS-1$

+    Pattern ser_num_p_e = Pattern.compile("</[\\w]*:?X509SerialNumber>"); //$NON-NLS-1$

+    Pattern sig_cer_p_s = Pattern.compile("<[\\w]*:?X509Certificate>"); //$NON-NLS-1$

+    Pattern sig_cer_p_e = Pattern.compile("</[\\w]*:?X509Certificate>"); //$NON-NLS-1$

+

+    // Pattern sig_cer_d_p_s = Pattern.compile("<[\\w]*:?CertDigest>");

+    // //$NON-NLS-1$

+    // Pattern sig_cer_d_p_e = Pattern.compile("</[\\w]*:?CertDigest>");

+    // //$NON-NLS-1$

+    // Pattern dig_val_p_s = Pattern.compile("<[\\w]*:?DigestValue>");

+    // //$NON-NLS-1$

+    // Pattern dig_val_p_e = Pattern.compile("</[\\w]*:?DigestValue>");

+    // //$NON-NLS-1$

+

+    Matcher sig_val_m_s = sig_val_p_s.matcher(xmlResponse);

+    Matcher sig_val_m_e = sig_val_p_e.matcher(xmlResponse);

+    Matcher iss_nam_m_s = iss_nam_p_s.matcher(xmlResponse);

+    Matcher iss_nam_m_e = iss_nam_p_e.matcher(xmlResponse);

+    Matcher sig_tim_m_s = sig_tim_p_s.matcher(xmlResponse);

+    Matcher sig_tim_m_e = sig_tim_p_e.matcher(xmlResponse);

+    Matcher ser_num_m_s = ser_num_p_s.matcher(xmlResponse);

+    Matcher ser_num_m_e = ser_num_p_e.matcher(xmlResponse);

+    Matcher sig_cer_m_s = sig_cer_p_s.matcher(xmlResponse);

+    Matcher sig_cer_m_e = sig_cer_p_e.matcher(xmlResponse);

+

+    // Matcher sig_cer_d_m_s = sig_cer_d_p_s.matcher(xmlResponse);

+    // Matcher sig_cer_d_m_e = sig_cer_d_p_e.matcher(xmlResponse);

+    // Matcher dig_val_m_s = dig_val_p_s.matcher(xmlResponse);

+    // Matcher dig_val_m_e = dig_val_p_e.matcher(xmlResponse);

+

+    // SignatureValue

+    String sig_val = null;

+    if (sig_val_m_s.find() && sig_val_m_e.find())

+    {

+      sig_val = BKUHelper.removeAllWhitespace(xmlResponse.substring(sig_val_m_s.end(), sig_val_m_e.start()));

+    }

+    log.debug("sig_val = " + sig_val); //$NON-NLS-1$

+

+    // X509IssuerName

+    String iss_nam = null;

+    if (iss_nam_m_s.find() && iss_nam_m_e.find())

+    {

+      iss_nam = xmlResponse.substring(iss_nam_m_s.end(), iss_nam_m_e.start());

+    }

+    log.debug("iss_nam = " + iss_nam); //$NON-NLS-1$

+

+    // X509SerialNumber

+    String ser_num = null;

+    if (ser_num_m_s.find() && ser_num_m_e.find())

+    {

+      ser_num = BKUHelper.removeAllWhitespace(xmlResponse.substring(ser_num_m_s.end(), ser_num_m_e.start()));

+    }

+    log.debug("ser_num = " + ser_num); //$NON-NLS-1$

+

+    // SigningTime

+    String sig_tim = null;

+    if (sig_tim_m_s.find() && sig_tim_m_e.find())

+    {

+      sig_tim = xmlResponse.substring(sig_tim_m_s.end(), sig_tim_m_e.start());

+    }

+    log.debug("sig_tim = " + sig_tim); //$NON-NLS-1$

+

+    // CertDigest

+    // if (sig_cer_d_m_s.find() && sig_cer_d_m_e.find())

+    // {

+    // String cert_digest = xmlResponse.substring(sig_cer_d_m_s.end(),

+    // sig_cer_d_m_e.start());

+    // if (dig_val_m_s.find() && dig_val_m_e.find())

+    // {

+    // sig_dig = cert_digest.substring(dig_val_m_s.end(), dig_val_m_e.start());

+    // //sigObj.setX509CertificateDigest(sig_dig);

+    // }

+    // }

+

+    // X509Certificate

+    X509Certificate cert = null;

+    if (sig_cer_m_s.find() && sig_cer_m_e.find())

+    {

+      String sig_cer = BKUHelper.removeAllWhitespace(xmlResponse.substring(sig_cer_m_s.end(), sig_cer_m_e.start()));

+

+      try

+      {

+        byte[] der = CodingHelper.decodeBase64(sig_cer);

+        ByteArrayInputStream bais = new ByteArrayInputStream(der);

+        CertificateFactory cf = CertificateFactory.getInstance("X.509"); //$NON-NLS-1$

+        cert = (X509Certificate) cf.generateCertificate(bais);

+        bais.close();

+      }

+      catch (UnsupportedEncodingException e)

+      {

+        log.error(e);

+        throw new ConnectorException(300, e);

+      }

+      catch (CertificateException e)

+      {

+        log.error(e);

+        throw new ConnectorException(300, e);

+      }

+      catch (IOException e)

+      {

+        log.error(e);

+        throw new ConnectorException(300, e);

+      }

+    }

+    log.debug("X509Certificate = " + cert); //$NON-NLS-1$

+

+    if (log.isDebugEnabled())

+    {

+

+      String cert_iss = cert.getIssuerDN().getName();

+      log.debug("certificate's issuer = " + cert_iss); //$NON-NLS-1$

+      log.debug("response's issuer    = " + iss_nam); //$NON-NLS-1$

+      log.debug("issuer matches = " + cert_iss.equals(iss_nam)); //$NON-NLS-1$

+      log.debug("ser number matches = " + cert.getSerialNumber().toString().equals(ser_num)); //$NON-NLS-1$

+    }

+

+    SignSignatureObject so = new SignSignatureObject();

+    so.date = sig_tim;

+    so.issuer = iss_nam;

+    so.signatureValue = sig_val;

+    so.x509Certificate = cert;

+

+    so.id = null;

+

+    return so;

+  }

+

+  /**

+   * Holds environment configuration information like templates.

+   * 

+   * @author wprinz

+   */

+  public static class Environment

+  {

+    /**

+     * The configuration key of the sign keybox identifier.

+     */

+    protected static final String SIGN_KEY_IDENTIFIER_KEY = "moa.sign.KeyIdentifier"; //$NON-NLS-1$

+

+    /**

+     * The configuration key of the sign request template.

+     */

+    protected static final String SIGN_REQUEST_TEMPLATE_KEY = "moa.sign.request.base64"; //$NON-NLS-1$

+

+    /**

+     * The configuration key of the sign URL.

+     */

+    protected static final String SIGN_URL_KEY = "moa.sign.url"; //$NON-NLS-1$

+

+    /**

+     * The configuration key of the verify request template.

+     */

+    protected static final String VERIFY_REQUEST_TEMPLATE_KEY = "moa.verify.request.base64"; //$NON-NLS-1$

+

+    /**

+     * The configuration key of the verify template.

+     */

+    protected static final String VERIFY_TEMPLATE_KEY = "moa.verify.template.base64"; //$NON-NLS-1$

+

+    /**

+     * The configuration key of the verify URL.

+     */

+    protected static final String VERIFY_URL_KEY = "moa.verify.url"; //$NON-NLS-1$

+    

+    /**

+     * The configuration key of the trust profile id.

+     */

+    protected static final String VERIFY_TRUST_PROFILE_ID = "moa.verify.TrustProfileID";  //$NON-NLS-1$

+    

+

+    /**

+     * The configuration key for the ECDSA cert alg property.

+     */

+    protected static final String ECDSA_CERT_ALG_KEY = "cert.alg.ecdsa"; //$NON-NLS-1$

+

+    /**

+     * The configuration key for the RSA cert alg property.

+     */

+    protected static final String RSA_CERT_ALG_KEY = "cert.alg.rsa"; //$NON-NLS-1$

+

+    protected String sign_key_identifier = null;

+

+    protected String sign_request_template = null;

+

+    protected String sign_url = null;

+

+    protected String verify_request_template = null;

+

+    protected String verify_template = null;

+

+    protected String verify_url = null;

+    

+    protected String verify_trust_profile_id = null;

+

+    protected String cert_alg_ecdsa = null;

+

+    protected String cert_alg_rsa = null;

+

+    /**

+     * Initializes the environment with a given profile.

+     * 

+     * @param profile

+     *          The configuration profile.

+      * @throws ConnectorException

+     *           f.e.

+     */

+    public Environment(String profile) throws ConnectorException

+    {

+      SettingsReader settings = null;

+      try

+      {

+        settings = SettingsReader.getInstance();

+      }

+      catch (SettingsException e)

+      {

+        throw new ConnectorException(300, e);

+      }

+

+      this.sign_key_identifier = getConnectorValueFromProfile(settings, profile, SIGN_KEY_IDENTIFIER_KEY);

+

+      String sign_request_filename = getConnectorValueFromProfile(settings, profile, SIGN_REQUEST_TEMPLATE_KEY);

+      this.sign_request_template = FileHelper.readFromFile(SettingsReader.relocateFile(sign_request_filename));

+      if (this.sign_request_template == null)

+      {

+        throw new ConnectorException(300, "Can not read the create xml request template"); //$NON-NLS-1$

+      }

+

+      this.sign_url = getConnectorValueFromProfile(settings, profile, SIGN_URL_KEY);

+

+      String verify_request_filename = getConnectorValueFromProfile(settings, profile, VERIFY_REQUEST_TEMPLATE_KEY);

+      this.verify_request_template = FileHelper.readFromFile(SettingsReader.relocateFile(verify_request_filename));

+      if (this.verify_request_template == null)

+      {

+        throw new ConnectorException(300, "Can not read the verify xml request template"); //$NON-NLS-1$

+      }

+

+      String verify_filename = getConnectorValueFromProfile(settings, profile, VERIFY_TEMPLATE_KEY);

+      this.verify_template = FileHelper.readFromFile(SettingsReader.relocateFile(verify_filename));

+      if (this.verify_template == null)

+      {

+        throw new ConnectorException(300, "Can not read the verify template"); //$NON-NLS-1$

+      }

+

+      this.verify_url = getConnectorValueFromProfile(settings, profile, VERIFY_URL_KEY);

+

+      this.verify_trust_profile_id = settings.getValueFromKey(VERIFY_TRUST_PROFILE_ID);

+

+      this.cert_alg_ecdsa = settings.getValueFromKey(ECDSA_CERT_ALG_KEY);

+

+      this.cert_alg_rsa = settings.getValueFromKey(RSA_CERT_ALG_KEY);

+

+    }

+

+    /**

+     * Returns the sign key identifier.

+     * 

+     * @return Returns the sign key identifier.

+     */

+    public String getSignKeyIdentifier()

+    {

+      return this.sign_key_identifier;

+    }

+

+    /**

+     * Returns the sign request template.

+     * 

+     * @return Returns the sign request template.

+     */

+    public String getSignRequestTemplate()

+    {

+      return this.sign_request_template;

+    }

+

+    /**

+     * Returns the sign URL.

+     * 

+     * @return Returns the sign URL.

+     */

+    public String getSignURL()

+    {

+      return this.sign_url;

+    }

+

+    /**

+     * Returns the verify request template.

+     * 

+     * @return Returns the verify request template.

+     */

+    public String getVerifyRequestTemplate()

+    {

+      return this.verify_request_template;

+    }

+

+    /**

+     * Returns the verify template.

+     * 

+     * @return Returns the verify template.

+     */

+    public String getVerifyTemplate()

+    {

+      return this.verify_template;

+    }

+

+    /**

+     * Returns the verify URL.

+     * 

+     * @return Returns the verify URL.

+     */

+    public String getVerifyURL()

+    {

+      return this.verify_url;

+    }

+

+    /**

+     * Returns the verify trust profile id.

+     * 

+     * @return Returns the verify trust profile id.

+     */

+    public String getVerifyTrustProfileId()

+    {

+      return this.verify_trust_profile_id;

+    }

+

+    /**

+     * Returns the ecdsa cert alg property.

+     * 

+     * @return Returns the ecdsa cert alg property.

+     */

+    public String getCertAlgEcdsa()

+    {

+      return this.cert_alg_ecdsa;

+    }

+

+    /**

+     * Returns the rsa cert alg property.

+     * 

+     * @return Returns the rsa cert alg property.

+     */

+    public String getCertAlgRsa()

+    {

+      return this.cert_alg_rsa;

+    }

+

+    /**

+     * Reads the configuration entry given by the key, first from the given

+     * profile, if not found from the defaults.

+     * 

+     * @param settings

+     *          The settings.

+     * @param profile

+     *          The profile.

+     * @param key

+     *          The configuration key.

+     * @return Returns the configuration entry.

+     */

+    public static String getConnectorValueFromProfile(SettingsReader settings,

+        String profile, String key)

+    {

+      String value = settings.getValueFromKey("sig_obj." + profile + "." + key); //$NON-NLS-1$//$NON-NLS-2$

+      if (value == null)

+      {

+        value = settings.getValueFromKey(key);

+      }

+      return value;

+    }

+

+  }

+

+}