1 files changed, 220 insertions, 0 deletions
diff --git a/pdf-as-moa/src/main/java/at/gv/egiz/pdfas/moa/MOAConnector.java b/pdf-as-moa/src/main/java/at/gv/egiz/pdfas/moa/MOAConnector.java
new file mode 100644
index 00000000..1b4064a5
--- /dev/null
+++ b/pdf-as-moa/src/main/java/at/gv/egiz/pdfas/moa/MOAConnector.java
@@ -0,0 +1,220 @@
+/*******************************************************************************
+ * <copyright> Copyright 2014 by E-Government Innovation Center EGIZ, Graz, Austria </copyright>
+ * PDF-AS has been contracted by the E-Government Innovation Center EGIZ, a
+ * joint initiative of the Federal Chancellery Austria and Graz University of
+ * Technology.
+ * 
+ * Licensed under the EUPL, Version 1.1 or - as soon they will be approved by
+ * the European Commission - subsequent versions of the EUPL (the "Licence");
+ * You may not use this work except in compliance with the Licence.
+ * You may obtain a copy of the Licence at:
+ * http://www.osor.eu/eupl/
+ * 
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the Licence is distributed on an "AS IS" basis,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the Licence for the specific language governing permissions and
+ * limitations under the Licence.
+ * 
+ * This product combines work with different licenses. See the "NOTICE" text
+ * file for details on the various modules and licenses.
+ * The "NOTICE" text file is part of the distribution. Any derivative works
+ * that you distribute must include a readable copy of the "NOTICE" text file.
+ ******************************************************************************/
+package at.gv.egiz.pdfas.moa;
+
+import iaik.x509.X509Certificate;
+
+import java.io.File;
+import java.io.FileInputStream;
+import java.io.FileNotFoundException;
+import java.io.IOException;
+import java.net.MalformedURLException;
+import java.net.URL;
+import java.security.cert.CertificateException;
+
+import javax.xml.ws.BindingProvider;
+
+import org.slf4j.Logger;
+import org.slf4j.LoggerFactory;
+
+import at.gv.e_government.reference.namespace.moa._20020822.CMSContentBaseType;
+import at.gv.e_government.reference.namespace.moa._20020822.CMSDataObjectInfoType.DataObject;
+import at.gv.e_government.reference.namespace.moa._20020822.CreateCMSSignatureRequest;
+import at.gv.e_government.reference.namespace.moa._20020822.CreateCMSSignatureRequestType.SingleSignatureInfo;
+import at.gv.e_government.reference.namespace.moa._20020822.CreateCMSSignatureRequestType.SingleSignatureInfo.DataObjectInfo;
+import at.gv.e_government.reference.namespace.moa._20020822.CreateCMSSignatureResponseType;
+import at.gv.e_government.reference.namespace.moa._20020822.ErrorResponseType;
+import at.gv.e_government.reference.namespace.moa._20020822.MetaInfoType;
+import at.gv.e_government.reference.namespace.moa._20020822_.MOAFault;
+import at.gv.e_government.reference.namespace.moa._20020822_.SignatureCreationPortType;
+import at.gv.e_government.reference.namespace.moa._20020822_.SignatureCreationService;
+import at.gv.egiz.pdfas.common.exceptions.PdfAsException;
+import at.gv.egiz.pdfas.common.exceptions.PdfAsMOAException;
+import at.gv.egiz.pdfas.common.exceptions.PdfAsSignatureException;
+import at.gv.egiz.pdfas.common.exceptions.PdfAsWrappedIOException;
+import at.gv.egiz.pdfas.common.settings.ISettings;
+import at.gv.egiz.pdfas.common.utils.StreamUtils;
+import at.gv.egiz.pdfas.lib.api.Configuration;
+import at.gv.egiz.pdfas.lib.api.IConfigurationConstants;
+import at.gv.egiz.pdfas.lib.api.sign.SignParameter;
+import at.gv.egiz.pdfas.lib.api.verify.VerifyResult;
+import at.gv.egiz.pdfas.lib.impl.status.RequestedSignature;
+import at.gv.egiz.pdfas.lib.util.SignatureUtils;
+import at.gv.egiz.sl.util.ISignatureConnector;
+
+public class MOAConnector implements ISignatureConnector,
+		IConfigurationConstants {
+
+	private static final Logger logger = LoggerFactory
+			.getLogger(MOAConnector.class);
+
+	private X509Certificate certificate;
+	private String moaEndpoint;
+	private String keyIdentifier;
+
+	public MOAConnector(Configuration config) throws CertificateException,
+			FileNotFoundException, IOException {
+		if (config.getValue(MOA_SIGN_CERTIFICATE) == null) {
+			logger.error(MOA_SIGN_CERTIFICATE
+					+ " not configured for MOA connector");
+			throw new PdfAsWrappedIOException(new PdfAsException(
+					"Please configure: " + MOA_SIGN_CERTIFICATE
+							+ " to use MOA connector"));
+		}
+
+		if (!(config instanceof ISettings)) {
+			logger.error("Configuration is no instance of ISettings");
+			throw new PdfAsWrappedIOException(new PdfAsException(
+					"Configuration is no instance of ISettings"));
+		}
+
+		ISettings settings = (ISettings) config;
+
+		String certificateValue = config.getValue(MOA_SIGN_CERTIFICATE);
+
+		if (certificateValue.startsWith("http")) {
+			logger.info("Loading certificate from url: " + certificateValue);
+			
+			try {
+				URL certificateURL = new URL(certificateValue);
+			
+				this.certificate = new X509Certificate(certificateURL.openStream());
+			} catch(MalformedURLException e) {
+				logger.error(certificateValue
+						+ " is not a valid url but!");
+				throw new PdfAsWrappedIOException(new PdfAsException(
+						certificateValue
+						+ " is not a valid url but!"));
+			}
+		} else {
+
+			File certFile = new File(certificateValue);
+			if (!certFile.isAbsolute()) {
+				certificateValue = settings.getWorkingDirectory() + "/"
+						+ config.getValue(MOA_SIGN_CERTIFICATE);
+				certFile = new File(certificateValue);
+			}
+
+			logger.info("Loading certificate from file: " + certificateValue);
+
+			this.certificate = new X509Certificate(
+					new FileInputStream(certFile));
+		}
+		this.moaEndpoint = config.getValue(MOA_SIGN_URL);
+		this.keyIdentifier = config.getValue(MOA_SIGN_KEY_ID);
+	}
+
+	public X509Certificate getCertificate(SignParameter parameter)
+			throws PdfAsException {
+		return this.certificate;
+	}
+
+	public byte[] sign(byte[] input, int[] byteRange, SignParameter parameter,
+			RequestedSignature requestedSignature) throws PdfAsException {
+		
+		logger.info("signing with MOA @ " + this.moaEndpoint);
+		URL moaUrl;
+		try {
+			moaUrl = new URL(this.moaEndpoint);
+		} catch (MalformedURLException e1) {
+			throw new PdfAsException("Invalid MOA endpoint!", e1);
+		}
+		SignatureCreationService service = new SignatureCreationService(moaUrl);
+		
+		SignatureCreationPortType creationPort = service.getSignatureCreationPort();
+		BindingProvider provider = (BindingProvider) creationPort;
+		provider.getRequestContext().put(BindingProvider.ENDPOINT_ADDRESS_PROPERTY, this.moaEndpoint);
+		
+		CreateCMSSignatureRequest request = new CreateCMSSignatureRequest();
+		request.setKeyIdentifier(this.keyIdentifier.trim());
+		SingleSignatureInfo sigInfo = new SingleSignatureInfo();
+		sigInfo.setSecurityLayerConformity(Boolean.TRUE);
+		DataObjectInfo dataObjectInfo = new DataObjectInfo();
+		dataObjectInfo.setStructure("detached");
+		DataObject dataObject = new DataObject();
+		MetaInfoType metaInfoType = new MetaInfoType();
+		
+		metaInfoType.setMimeType("application/pdf");
+		
+		dataObject.setMetaInfo(metaInfoType);
+		
+		CMSContentBaseType content = new CMSContentBaseType();
+		content.setBase64Content(input);
+		
+		dataObject.setContent(content);
+		
+		dataObjectInfo.setDataObject(dataObject);
+		sigInfo.setDataObjectInfo(dataObjectInfo);
+		request.getSingleSignatureInfo().add(sigInfo);
+		
+		CreateCMSSignatureResponseType response;
+		try {
+			response = creationPort.createCMSSignature(request);
+		} catch (MOAFault e) {
+			logger.error("MOA signing failed!", e);
+			if(e.getFaultInfo() != null) {
+				throw new PdfAsMOAException(e.getFaultInfo().getErrorCode().toString(), 
+					e.getFaultInfo().getInfo(),
+					"", "");
+			} else {
+				throw new PdfAsMOAException("", 
+						e.getMessage(),
+						"", "");
+			}
+		}
+		
+		if(response.getCMSSignatureOrErrorResponse().size() != 1) {
+			throw new PdfAsException("Invalid Response Count [" + response.getCMSSignatureOrErrorResponse().size()
+					+ "] from MOA!");
+		}
+		
+		Object resp = response.getCMSSignatureOrErrorResponse().get(0);
+		if(resp instanceof byte[]) {
+			// done the signature!
+			byte[] cmsSignatureData = (byte[])resp;
+
+			VerifyResult verifyResult = SignatureUtils
+					.verifySignature(cmsSignatureData, input);
+
+			if (!StreamUtils.dataCompare(requestedSignature
+					.getCertificate().getFingerprintSHA(),
+					((X509Certificate) verifyResult
+							.getSignerCertificate())
+							.getFingerprintSHA())) {
+				throw new PdfAsSignatureException(
+						"Certificates missmatch!");
+			}
+
+			return cmsSignatureData;
+		} else if(resp instanceof ErrorResponseType) {
+			ErrorResponseType err = (ErrorResponseType) resp;
+			
+			throw new PdfAsMOAException("", "",
+					err.getInfo(), err.getErrorCode().toString());
+			
+		} else {
+			throw new PdfAsException("MOA response is not byte[] nor error but: " + resp.getClass().getName());
+		}
+	}
+}