Package com.itextpdf.text.pdf.security

Class LtvVerification

java.lang.Object

com.itextpdf.text.pdf.security.LtvVerification

public class LtvVerification
extends Object

Add verification according to PAdES-LTV (part 4)

Nested Class Summary

Nested Classes

Modifier and Type	Class	Description
static enum	LtvVerification.CertificateInclusion	Certificate inclusion in the DSS and VRI dictionaries in the CERT and CERTS keys
static enum	LtvVerification.CertificateOption	Options for how many certificates to include
static enum	LtvVerification.Level	What type of verification to include
private static class	LtvVerification.ValidationData

Field Summary

Fields

Modifier and Type	Field	Description
private AcroFields	acroFields
private Logger	LOGGER
private PdfReader	reader
private PdfStamper	stp
private boolean	used
private Map<PdfName,LtvVerification.ValidationData>	validated
private PdfWriter	writer

Constructor Summary

Constructors

Constructor	Description
LtvVerification(PdfStamper stp)	The verification constructor.

Method Summary

Modifier and Type	Method	Description
boolean	addVerification(String signatureName, OcspClient ocsp, CrlClient crl, LtvVerification.CertificateOption certOption, LtvVerification.Level level, LtvVerification.CertificateInclusion certInclude)	Add verification for a particular signature
boolean	addVerification(String signatureName, Collection<byte[]> ocsps, Collection<byte[]> crls, Collection<byte[]> certs)	Alternative addVerification.
private static byte[]	buildOCSPResponse(byte[] BasicOCSPResponse)
private void	createDss()
private static void	deleteOldReferences(PdfArray all, PdfArray toDelete)
private X509Certificate	getParent(X509Certificate cert, Certificate[] certs)	Returns the issuing certificate for a child certificate.
private PdfName	getSignatureHashKey(String signatureName)
private static byte[]	hashBytesSha1(byte[] b)
void	merge()	Merges the validation with any validation already in the document or creates a new one.
private void	outputDss(PdfDictionary dss, PdfDictionary vrim, PdfArray ocsps, PdfArray crls, PdfArray certs)
private void	updateDss()

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Details

LOGGER

private Logger LOGGER

stp

private PdfStamper stp

writer

private PdfWriter writer

reader

private PdfReader reader

acroFields

private AcroFields acroFields

validated

private Map<PdfName,LtvVerification.ValidationData> validated

used

private boolean used

Constructor Details

LtvVerification

public LtvVerification(PdfStamper stp)

The verification constructor. This class should only be created with PdfStamper.getLtvVerification() otherwise the information will not be added to the Pdf.

Parameters:

stp - the PdfStamper to apply the validation to

Method Details

addVerification

public boolean addVerification(String signatureName,
 OcspClient ocsp,
 CrlClient crl,
 LtvVerification.CertificateOption certOption,
 LtvVerification.Level level,
 LtvVerification.CertificateInclusion certInclude)
                        throws IOException,
GeneralSecurityException

Add verification for a particular signature

Parameters:

signatureName - the signature to validate (it may be a timestamp)

ocsp - the interface to get the OCSP

crl - the interface to get the CRL

certOption -

level - the validation options to include

certInclude -

Returns:

true if a validation was generated, false otherwise

Throws:

GeneralSecurityException

IOException

getParent

private X509Certificate getParent(X509Certificate cert,
 Certificate[] certs)

Returns the issuing certificate for a child certificate.

Parameters:

cert - the certificate for which we search the parent

certs - an array with certificates that contains the parent

Returns:

the partent certificate

addVerification

public boolean addVerification(String signatureName,
 Collection<byte[]> ocsps,
 Collection<byte[]> crls,
 Collection<byte[]> certs)
                        throws IOException,
GeneralSecurityException

Alternative addVerification. I assume that inputs are deduplicated.

Throws:

IOException

GeneralSecurityException

buildOCSPResponse

private static byte[] buildOCSPResponse(byte[] BasicOCSPResponse)
                                 throws IOException

Throws:

IOException

getSignatureHashKey

private PdfName getSignatureHashKey(String signatureName)
                             throws NoSuchAlgorithmException,
IOException

Throws:

NoSuchAlgorithmException

IOException

hashBytesSha1

private static byte[] hashBytesSha1(byte[] b)
                             throws NoSuchAlgorithmException

Throws:

NoSuchAlgorithmException

merge

public void merge()
           throws IOException

Merges the validation with any validation already in the document or creates a new one.

Throws:

IOException

updateDss

private void updateDss()
                throws IOException

Throws:

IOException

deleteOldReferences

private static void deleteOldReferences(PdfArray all,
 PdfArray toDelete)

createDss

private void createDss()
                throws IOException

Throws:

IOException

outputDss

private void outputDss(PdfDictionary dss,
 PdfDictionary vrim,
 PdfArray ocsps,
 PdfArray crls,
 PdfArray certs)
                throws IOException

Throws:

IOException