Package org.apache.pdfbox.examples.signature

Class ShowSignature

java.lang.Object

org.apache.pdfbox.examples.signature.ShowSignature

public final class ShowSignature
extends Object

This will get the signature(s) from the document, do some verifications and show the signature(s) and the certificates. This is a complex topic - the code here is an example and not a production-ready solution.

Field Summary

Fields

Modifier and Type	Field	Description
private static final org.apache.commons.logging.Log	LOG
private final SimpleDateFormat	sdf

Constructor Summary

Constructors

Modifier	Constructor	Description
private	ShowSignature()

Method Summary

Modifier and Type	Method	Description
private void	analyseDSS(PDDocument document)	Analyzes the DSS-Dictionary (Document Security Store) of the document.
private void	checkContentValueWithFile(File file, int[] byteRange, byte[] contents)
private Set<X509Certificate>	getRootCertificates()
static void	main(String[] args)	This is the entry point for the application.
private void	printStreamsFromArray(COSArray elements, String description)	Go through the elements of a COSArray containing each an COSStream to print in Hex.
private void	showSignature(String[] args)
private static void	usage()	This will print a usage message.
private void	verifyETSIdotRFC3161(InputStream signedContentAsStream, byte[] contents)	Verify ETSI.RFC3161 TimeStampToken
private void	verifyPKCS7(InputStream signedContentAsStream, byte[] contents, PDSignature sig)	Verify a PKCS7 signature.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Details

LOG

private static final org.apache.commons.logging.Log LOG

sdf

private final SimpleDateFormat sdf

Constructor Details

ShowSignature

private ShowSignature()

Method Details

main

public static void main(String[] args)
                 throws IOException,
org.bouncycastle.tsp.TSPException,
CertificateVerificationException,
GeneralSecurityException

This is the entry point for the application.

Parameters:

args - The command-line arguments.

Throws:

IOException - If there is an error reading the file.

org.bouncycastle.tsp.TSPException

CertificateVerificationException

GeneralSecurityException

showSignature

private void showSignature(String[] args)
                    throws IOException,
GeneralSecurityException,
org.bouncycastle.tsp.TSPException,
CertificateVerificationException

Throws:

IOException

GeneralSecurityException

org.bouncycastle.tsp.TSPException

CertificateVerificationException

checkContentValueWithFile

private void checkContentValueWithFile(File file,
 int[] byteRange,
 byte[] contents)
                                throws IOException

Throws:

IOException

verifyETSIdotRFC3161

private void verifyETSIdotRFC3161(InputStream signedContentAsStream,
 byte[] contents)
                           throws org.bouncycastle.cms.CMSException,
NoSuchAlgorithmException,
IOException,
org.bouncycastle.tsp.TSPException,
org.bouncycastle.operator.OperatorCreationException,
CertificateVerificationException,
CertificateException

Verify ETSI.RFC3161 TimeStampToken

Parameters:

signedContentAsStream - the byte sequence that has been signed

contents - the /Contents field as a COSString

Throws:

org.bouncycastle.cms.CMSException

NoSuchAlgorithmException

IOException

org.bouncycastle.tsp.TSPException

org.bouncycastle.operator.OperatorCreationException

CertificateVerificationException

CertificateException

verifyPKCS7

private void verifyPKCS7(InputStream signedContentAsStream,
 byte[] contents,
 PDSignature sig)
                  throws org.bouncycastle.cms.CMSException,
org.bouncycastle.operator.OperatorCreationException,
CertificateVerificationException,
GeneralSecurityException,
org.bouncycastle.tsp.TSPException,
IOException

Verify a PKCS7 signature.

Parameters:

signedContentAsStream - the byte sequence that has been signed

contents - the /Contents field as a COSString

sig - the PDF signature (the /V dictionary)

Throws:

org.bouncycastle.cms.CMSException

org.bouncycastle.operator.OperatorCreationException

GeneralSecurityException

CertificateVerificationException

org.bouncycastle.tsp.TSPException

IOException

getRootCertificates

private Set<X509Certificate> getRootCertificates()
                                          throws GeneralSecurityException,
IOException

Throws:

GeneralSecurityException

IOException

analyseDSS

private void analyseDSS(PDDocument document)
                 throws IOException

Analyzes the DSS-Dictionary (Document Security Store) of the document. Which is used for signature validation. The DSS is defined in PAdES Part 4 - Long Term Validation.

Parameters:

document - PDDocument, to get the DSS from

Throws:

IOException

printStreamsFromArray

private void printStreamsFromArray(COSArray elements,
 String description)
                            throws IOException

Go through the elements of a COSArray containing each an COSStream to print in Hex.

Parameters:

elements - COSArray of elements containing a COS Stream

description - to append on Print

Throws:

IOException

usage

private static void usage()

This will print a usage message.