From 8ed8e4e931c1cb3d3c814a53a07f73b566c3b719 Mon Sep 17 00:00:00 2001
From: Alexander Marsalek <amarsalek@iaik.tugraz.at>
Date: Fri, 2 Jul 2021 14:06:44 +0200
Subject: v4.2.0

---
 .../CertificateAndRequestParameterResolver.java    | 99 ++++++++++++++++++++++
 1 file changed, 99 insertions(+)
 create mode 100644 pdf-as-lib/src/main/java/at/gv/egiz/pdfas/lib/impl/stamping/CertificateAndRequestParameterResolver.java

(limited to 'pdf-as-lib/src/main/java/at/gv/egiz/pdfas/lib/impl/stamping/CertificateAndRequestParameterResolver.java')

diff --git a/pdf-as-lib/src/main/java/at/gv/egiz/pdfas/lib/impl/stamping/CertificateAndRequestParameterResolver.java b/pdf-as-lib/src/main/java/at/gv/egiz/pdfas/lib/impl/stamping/CertificateAndRequestParameterResolver.java
new file mode 100644
index 00000000..c53a9a4f
--- /dev/null
+++ b/pdf-as-lib/src/main/java/at/gv/egiz/pdfas/lib/impl/stamping/CertificateAndRequestParameterResolver.java
@@ -0,0 +1,99 @@
+/*******************************************************************************
+ * <copyright> Copyright 2014 by E-Government Innovation Center EGIZ, Graz, Austria </copyright>
+ * PDF-AS has been contracted by the E-Government Innovation Center EGIZ, a
+ * joint initiative of the Federal Chancellery Austria and Graz University of
+ * Technology.
+ * 
+ * Licensed under the EUPL, Version 1.1 or - as soon they will be approved by
+ * the European Commission - subsequent versions of the EUPL (the "Licence");
+ * You may not use this work except in compliance with the Licence.
+ * You may obtain a copy of the Licence at:
+ * http://www.osor.eu/eupl/
+ * 
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the Licence is distributed on an "AS IS" basis,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the Licence for the specific language governing permissions and
+ * limitations under the Licence.
+ * 
+ * This product combines work with different licenses. See the "NOTICE" text
+ * file for details on the various modules and licenses.
+ * The "NOTICE" text file is part of the distribution. Any derivative works
+ * that you distribute must include a readable copy of the "NOTICE" text file.
+ ******************************************************************************/
+package at.gv.egiz.pdfas.lib.impl.stamping;
+
+import at.gv.egiz.pdfas.common.settings.IProfileConstants;
+import at.gv.egiz.pdfas.common.settings.SignatureProfileSettings;
+import at.gv.egiz.pdfas.common.utils.DNUtils;
+import at.gv.egiz.pdfas.common.utils.OgnlUtils;
+import at.gv.egiz.pdfas.lib.impl.status.OperationStatus;
+import iaik.x509.X509Certificate;
+import ognl.AbstractMemberAccess;
+import ognl.MemberAccess;
+import ognl.OgnlContext;
+import org.slf4j.Logger;
+import org.slf4j.LoggerFactory;
+
+import javax.naming.InvalidNameException;
+import java.lang.reflect.Member;
+import java.lang.reflect.Modifier;
+import java.util.HashMap;
+import java.util.Map;
+
+public class CertificateAndRequestParameterResolver implements IResolver {
+
+    private static final Logger logger = LoggerFactory.getLogger(CertificateAndRequestParameterResolver.class);
+
+    private OgnlContext ctx;
+    private X509Certificate certificate;
+
+    public CertificateAndRequestParameterResolver(X509Certificate certificate, OperationStatus operationStatus) {
+        this.certificate = certificate;
+
+        MemberAccess memberAccess = new AbstractMemberAccess() {
+            @Override
+            public boolean isAccessible(Map context, Object target, Member member, String propertyName) {
+                int modifiers = member.getModifiers();
+                return Modifier.isPublic(modifiers);
+            }
+        };
+                
+        this.ctx = new OgnlContext(null, null, memberAccess);
+
+        this.ctx = new OgnlContext(null, null, memberAccess);
+        Map<String, String> map = operationStatus.getSignParamter().getDynamicSignatureBlockArguments();
+        if(map == null)
+            map = new HashMap<>();
+        this.ctx.put(IProfileConstants.SIGNATURE_BLOCK_PARAMETER, map);
+
+        this.ctx.put("sn", this.certificate.getSerialNumber().toString());
+        
+        try {
+            Map<String, String> issuerDNMap = DNUtils.dnToMap(certificate.getIssuerDN().getName());
+            this.ctx.put("issuer", issuerDNMap);
+        } catch (InvalidNameException e) {
+            logger.warn("Failed to build issuer Map", e);
+        }
+
+        try {
+            Map<String, String> subjectDNMap = DNUtils.dnToMap(certificate.getSubjectDN().getName());
+            this.ctx.put("subject", subjectDNMap);
+        } catch (InvalidNameException e) {
+            logger.warn("Failed to build subject Map", e);
+        }
+
+        Map<String, String> iuiMap = new HashMap<String, String>();
+        try {
+        	iuiMap.put("pdfVersion", operationStatus.getPdfObject().getPDFVersion());
+        } catch(Throwable e) {
+        	logger.warn("Cannot determine pdfVersion: " + e.getMessage());
+        }
+        this.ctx.put("iui", iuiMap);
+    }
+
+    public String resolve(String key, String value, SignatureProfileSettings settings) {
+        return OgnlUtils.resolvsOgnlExpression(value, this.ctx);
+    }
+
+}
-- 
cgit v1.2.3