Package eu.europa.esig.dss.spi
Class DSSUtils
java.lang.Object
eu.europa.esig.dss.spi.DSSUtils
-
Field Summary
FieldsModifier and TypeFieldDescriptionstatic final byteRepresents a carriage return '\r' characterstatic final byte[]Empty byte arraystatic final byteRepresents a new line '\n' characterstatic final StringThe URN OID prefix (RFC 3061)static final StringRFC 3339 DateTime format used by defaultstatic final TimeZoneThe UTC timezone (GMT+0), used by defaultstatic final StringThe UTF-8 encoding name string -
Method Summary
Modifier and TypeMethodDescriptionstatic voidassertSPUserNoticeConfigurationValid(UserNotice userNotice) This method verifies the validity of thw providedUserNoticeobjectstatic SignatureValueconvertECSignatureValue(SignatureAlgorithm expectedAlgorithm, SignatureValue signatureValue) This method ensures theSignatureValuehas an expected format and converts it when requiredstatic byte[]convertToDER(String pemContent) This method converts a PEM encoded certificate/crl/... to DER encodedstatic StringconvertToPEM(CertificateToken cert) This method converts the given certificate into its PEM string.static StringThis method decodes a URI to be compliant with the RFC 3986 (see DSS-2411 for details)static byte[]digest(DigestAlgorithm digestAlgorithm, byte[] data) This method allows to digest the data with the given algorithm.static byte[]digest(DigestAlgorithm digestAlgorithm, byte[]... data) Computes the digest on the data concatenationstatic byte[]digest(DigestAlgorithm digestAlgorithm, DSSDocument document) Computes the digests for thedocumentstatic byte[]digest(DigestAlgorithm digestAlgo, InputStream inputStream) This method allows to digest the data in theInputStreamwith the given algorithm.static byte[]encodeRSADigest(DigestAlgorithm digestAlgorithm, byte[] digest) This method wraps the digest value in a DigestInfo (combination of digest algorithm and value).static StringThis method encodes a URI to be compliant with the RFC 3986 (see DSS-1475 for details)static <T> voidenrichCollection(Collection<T> currentCollection, Collection<T> toAddCollection) Adds all objects fromtoAddCollectionintocurrentCollectionwithout duplicatesstatic StringformatDateToRFC(Date date) Formats a date to use according to RFC 3339.static StringformatDateWithCustomFormat(Date date, String format) Formats the date according to the given format (with system TimeZone)static StringformatDateWithCustomFormat(Date date, String format, String timeZone) Formats the date according to the given format and timeZone asString.static StringformatDateWithCustomFormat(Date date, String format, TimeZone timeZone) Formats the date according to the given format andTimeZoneNOTE : When null TimeZone is provided, the system default timezone is used!static StringgetCounterSignatureDeterministicId(Date signingTime, TokenIdentifier id, String masterSignatureId) Return a unique id for a counter signature.static StringgetDeterministicId(Date signingTime, TokenIdentifier id) Return a unique id for a date and the certificateToken id.static DigestgetDigest(DigestAlgorithm digestAlgo, DSSDocument dssDocument) ReturnsDigestof thedssDocumentgetDocumentNames(List<DSSDocument> dssDocuments) Returns a list of document names from the given document liststatic DSSDocumentgetDocumentWithLastName(List<DSSDocument> documents) Returns the last document in the alphabetical ascendant orderstatic DSSDocumentgetDocumentWithName(List<DSSDocument> documents, String fileName) Returns a document with the givenfileNamefrom the list ofdocuments, when presentstatic SignatureAlgorithmgetEdDSASignatureAlgorithm(byte[] signatureValue) This method returns aSignatureAlgorithmused to create thesignatureValueNOTE: Only EdDSA algorithm is being returned by this method.static StringReturns a message retrieved from an exception, its cause message if the first is not defined, or exception class name if non of them is specifiedstatic longgetFileByteSize(DSSDocument dssDocument) Returns byte size of the given documentstatic StringgetMD5Digest(byte[] bytes) Returns a Hex encoded of the MD5 digest of binariesstatic MessageDigestgetMessageDigest(DigestAlgorithm digestAlgorithm) Gets the message digest from theDigestAlgorithmstatic StringThis method replaces all special characters by an underscorestatic StringgetObjectIdentifierValue(String oidOrUriString) Normalizes and retrieves aStringidentifier (to be used for non-XAdES processing).static StringgetObjectIdentifierValue(String oidOrUriString, ObjectIdentifierQualifier qualifier) This method returns a URI value of theoidOrUriStringtaking into account the definedObjectIdentifierQualifier(to be used for XAdES processing).static StringgetOidCode(String urnOid) Keeps only code of the oid string e.g.static StringgetSHA1Digest(String stringToDigest) This method digests the given string with SHA1 algorithm and encode returned array of bytes as hex string.static DategetUtcDate(int year, int month, int day) This method returns an UTC date base on the year, the month and the day.static X500PrincipalgetX500PrincipalOrNull(String x500PrincipalString) This method returns theX500Principalcorresponding to the given string ornullif the conversion is not possible.static booleanisEmpty(DSSDocument document) This method verifies if the document is empty (does not have body)static booleanisLineBreakByte(byte b) This method verifies if the given byte represents a line break character (new line or a carriage return)static booleanChecks if the givenoidis a valid OID Ex.: 1.3.6.1.4.1.343 = valid 25.25 = invalid http://sample.com = invalid Source: regexr.com/38m0v (OID Validator)static booleanisSHA1Digest(String str) This method checks if the providedstrrepresents a SHA-1 digeststatic booleanThis method returns true if the inputStream starts with an ASN.1 Sequencestatic booleanisTimestampToken(DSSDocument document) Checks if the document contains a TimeStampTokenstatic booleanChecks if the given id is a URN representation of OID according to IETF RFC 3061static CertificateTokenloadCertificate(byte[] input) This method loads a certificate from the byte array.static CertificateTokenloadCertificate(File file) This method loads a certificate from the given location.static CertificateTokenloadCertificate(InputStream inputStream) This method loads a certificate from the given location.static CertificateTokenloadCertificateFromBase64EncodedString(String base64Encoded) This method loads a certificate from a base 64 encoded Stringstatic List<CertificateToken> Loads a collection of certificates from a p7c sourcestatic DateparseRFCDate(String str) Parses aStringdate toDatestatic voidThis method lists all defined security providers.static longreadAvailableBytes(DSSDocument dssDocument, byte[] b) Read the requested number of bytes fromDSSDocumentaccording to the size of the providedbyte[] buffer and validates success of the operationstatic longreadAvailableBytes(InputStream is, byte[] b) Read the requested number of bytes fromInputStreamaccording to the size of the providedbyte[] buffer and validates success of the operationstatic longreadAvailableBytes(InputStream is, byte[] b, int off, int len) Read the requested number of bytes fromInputStreamand validates success of the operationstatic bytereadFirstByte(DSSDocument dssDocument) Reads the first byte from the DSSDocumentstatic StringReplaces null ASCII characters 00-31 and 127 with ''static StringreplaceAllNonAlphanumericCharacters(String str, String replacement) Replaces all non-alphanumeric characters in thestrby thereplacementstatic voidsaveToFile(byte[] bytes, File file) This method saves the given array ofbyteto the providedFile.static longskipAvailableBytes(InputStream is, int n) Skip the definednnumber of bytes from theInputStreamand validates success of the operationstatic DSSDocumentsplitDocument(DSSDocument origin, int start, int end) This method create a new document from a sub-part of another documentstatic StringstripFirstLeadingOccurrence(String text, String leading) Trims the leading string if it is a leading part of the textstatic List<BigInteger> toBigIntegerList(int[] integers) Transforms the given array of integers to a list ofBigIntegersstatic byte[]toByteArray(DSSDocument document) Get the contents of anDSSDocumentas abyte[].static byte[]toByteArray(File file) FROM: Apache Reads the contents of a file into a byte array.static byte[]toByteArray(InputStream inputStream) Get the contents of anInputStreamas abyte[].static InputStreamtoByteArrayInputStream(File file) This method returns anInputStreamwhich does not need to be closed, based onByteArrayInputStream.static org.bouncycastle.cms.CMSSignedDatatoCMSSignedData(byte[] encoded) CreatesCMSSignedDatafrom the DER-encoded binaries representing CMSstatic org.bouncycastle.cms.CMSSignedDatatoCMSSignedData(DSSDocument document) Gets CMSSignedData from thedocumentbytesstatic org.bouncycastle.cms.CMSSignedDatatoCMSSignedData(InputStream inputStream) Gets CMSSignedData from theInputStreamstatic DigestDocumenttoDigestDocument(DigestAlgorithm digestAlgorithm, byte[] digestValue) Creates aDigestDocumentwith the providedDigestAlgorithmanddigestValuestatic DigestDocumenttoDigestDocument(Digest digest) Creates aDigestDocumentwith the providedDigeststatic StringtoHex(byte[] value) Converts an array of bytes into a String representing the hexadecimal values of each byte in order.static InputStreamtoInputStream(File file) This method returns anInputStreamwhich needs to be closed, based onFileInputStream.static StringReturns a URN URI generated from the given OID: Ex.: OID = 1.2.4.5.6.8 becomes URI = urn:oid:1.2.4.5.6.8 Note: see RFC 3061 "A URN Namespace of Object Identifiers"static StringTrims whitespaces and new line characters
-
Field Details
-
EMPTY_BYTE_ARRAY
public static final byte[] EMPTY_BYTE_ARRAYEmpty byte array -
CARRIAGE_RETURN
public static final byte CARRIAGE_RETURNRepresents a carriage return '\r' character- See Also:
-
LINE_FEED
public static final byte LINE_FEEDRepresents a new line '\n' character- See Also:
-
RFC3339_TIME_FORMAT
-
UTC_TIMEZONE
The UTC timezone (GMT+0), used by default -
UTF8_ENCODING
-
OID_NAMESPACE_PREFIX
-
-
Method Details
-
formatDateToRFC
-
parseRFCDate
-
formatDateWithCustomFormat
-
formatDateWithCustomFormat
Formats the date according to the given format and timeZone asString. NOTE : When null or empty string is provided, the system default timezone is used! -
formatDateWithCustomFormat
Formats the date according to the given format andTimeZoneNOTE : When null TimeZone is provided, the system default timezone is used! -
toHex
Converts an array of bytes into a String representing the hexadecimal values of each byte in order. The returned String will be double the length of the passed array, as it takes two characters to represent any given byte. If the input array is null then null is returned. The obtained string is converted to uppercase.- Parameters:
value- the value to be converted to hexadecimal- Returns:
- the hexadecimal String
-
convertToPEM
This method converts the given certificate into its PEM string.- Parameters:
cert- the token to be converted to PEM- Returns:
- PEM encoded certificate
-
isStartWithASN1SequenceTag
This method returns true if the inputStream starts with an ASN.1 Sequence- Parameters:
is- the inputstream to be tested- Returns:
- true if DER encoded
-
convertToDER
This method converts a PEM encoded certificate/crl/... to DER encoded- Parameters:
pemContent- the String which contains the PEM encoded object- Returns:
- the binaries of the DER encoded object
-
loadCertificate
This method loads a certificate from the given location. The certificate must be DER-encoded and may be supplied in binary or printable (PEM / Base64) encoding. If the certificate is provided in Base64 encoding, it must be bounded at the beginning by-----BEGIN CERTIFICATE-----, and must be bounded at the end by-----END CERTIFICATE-----.- Parameters:
file- the file with the certificate- Returns:
- the certificate token
-
loadCertificate
This method loads a certificate from the given location. The certificate must be DER-encoded and may be supplied in binary or printable (PEM / Base64) encoding. If the certificate is provided in Base64 encoding, it must be bounded at the beginning by-----BEGIN CERTIFICATE-----, and must be bounded at the end by-----END CERTIFICATE-----.- Parameters:
inputStream- input stream containing the certificate- Returns:
- the certificate token
-
loadCertificateFromP7c
Loads a collection of certificates from a p7c source- Parameters:
is-InputStreamp7c- Returns:
- a list of
CertificateTokens
-
loadCertificate
This method loads a certificate from the byte array. The certificate must be DER-encoded and may be supplied in binary or printable (Base64) encoding. If the certificate is provided in Base64 encoding, it must be bounded at the beginning by -----BEGIN CERTIFICATE-----, and must be bounded at the end by -----END CERTIFICATE-----. It throws anDSSExceptionor returnnullwhen the certificate cannot be loaded.- Parameters:
input- array of bytes containing the certificate- Returns:
- the certificate token
-
loadCertificateFromBase64EncodedString
This method loads a certificate from a base 64 encoded String- Parameters:
base64Encoded- the base64 encoded certificate- Returns:
- the certificate token
-
getSHA1Digest
-
isSHA1Digest
-
digest
This method allows to digest the data with the given algorithm.- Parameters:
digestAlgorithm- the algorithm to usedata- the data to digest- Returns:
- digested array of bytes
-
getMessageDigest
Gets the message digest from theDigestAlgorithm- Parameters:
digestAlgorithm-DigestAlgorithm- Returns:
MessageDigest
-
toDigestDocument
Creates aDigestDocumentwith the providedDigest- Parameters:
digest-Digestto use to create aDigestDocument- Returns:
DigestDocumentcontainingDigest
-
toDigestDocument
Creates aDigestDocumentwith the providedDigestAlgorithmanddigestValue- Parameters:
digestAlgorithm-DigestAlgorithmdigestValue- byte array containing digest value- Returns:
DigestDocumentcontaining the given digest value with the defined algorithm
-
encodeRSADigest
This method wraps the digest value in a DigestInfo (combination of digest algorithm and value). This encapsulation is required to operate NONEwithRSA signatures.- Parameters:
digestAlgorithm- the used digest algorithmdigest- the digest value- Returns:
- DER encoded binaries of the related digest info
-
digest
This method allows to digest the data in theInputStreamwith the given algorithm.- Parameters:
digestAlgo- the algorithm to useinputStream- the data to digest- Returns:
- digested array of bytes
-
digest
Computes the digests for thedocument- Parameters:
digestAlgorithm-DigestAlgorithmto usedocument-DSSDocumentto calculate the digest on- Returns:
- digest value
-
digest
Computes the digest on the data concatenation- Parameters:
digestAlgorithm-DigestAlgorithmto usedata- a sequence of byte arrays to compute digest on- Returns:
- digest value
-
toInputStream
This method returns anInputStreamwhich needs to be closed, based onFileInputStream.- Parameters:
file-Fileto read.- Returns:
- an
InputStreammaterialized by aFileInputStreamrepresenting the contents of the file @ if an I/O error occurred
-
toByteArrayInputStream
This method returns anInputStreamwhich does not need to be closed, based onByteArrayInputStream.- Parameters:
file-Fileto read- Returns:
InputStreambased onByteArrayInputStream
-
toByteArray
FROM: Apache Reads the contents of a file into a byte array. The file is always closed.- Parameters:
file- the file to read, must not benull- Returns:
- the file contents, never
null
-
splitDocument
This method create a new document from a sub-part of another document- Parameters:
origin- the original documentstart- the start position to retrieveend- the end position to retrieve- Returns:
- a new DSSDocument
-
toByteArray
Get the contents of anDSSDocumentas abyte[].- Parameters:
document- the document to read- Returns:
- the content as byte array
-
toByteArray
Get the contents of anInputStreamas abyte[].- Parameters:
inputStream- the inputstream to read- Returns:
- the content of the inputstream as byte array
-
toCMSSignedData
Gets CMSSignedData from theInputStream- Parameters:
inputStream-InputStreamcontained CMSSignedData- Returns:
CMSSignedData
-
toCMSSignedData
Gets CMSSignedData from thedocumentbytes- Parameters:
document-DSSDocumentcontained CMSSignedData- Returns:
CMSSignedData
-
toCMSSignedData
public static org.bouncycastle.cms.CMSSignedData toCMSSignedData(byte[] encoded) CreatesCMSSignedDatafrom the DER-encoded binaries representing CMS- Parameters:
encoded- byte array representing CMSSignedData- Returns:
CMSSignedData
-
isEmpty
This method verifies if the document is empty (does not have body)- Parameters:
document-DSSDocumentto check- Returns:
- TRUE if the document is empty, FALSE otherwise
-
isTimestampToken
Checks if the document contains a TimeStampToken- Parameters:
document- theDSSDocumentto be checked- Returns:
- true if the document is a timestamp
-
getFileByteSize
Returns byte size of the given document- Parameters:
dssDocument-DSSDocumentto get size for- Returns:
- long size of the given document
-
saveToFile
This method saves the given array ofbyteto the providedFile.- Parameters:
bytes- the binary to savefile- the file where to store
-
getNormalizedString
-
getDeterministicId
Return a unique id for a date and the certificateToken id.- Parameters:
signingTime- the signing timeid- the token identifier- Returns:
- a unique string
-
getCounterSignatureDeterministicId
public static String getCounterSignatureDeterministicId(Date signingTime, TokenIdentifier id, String masterSignatureId) Return a unique id for a counter signature.- Parameters:
signingTime- the signing timeid- the token identifiermasterSignatureId- id of a signature to be counter-signed- Returns:
- a unique string
-
getMD5Digest
Returns a Hex encoded of the MD5 digest of binaries- Parameters:
bytes- the bytes to be digested- Returns:
- the hex encoded MD5 digest
-
getX500PrincipalOrNull
This method returns theX500Principalcorresponding to the given string ornullif the conversion is not possible.- Parameters:
x500PrincipalString- aStringrepresentation of theX500Principal- Returns:
X500Principalor null
-
getUtcDate
This method returns an UTC date base on the year, the month and the day. The year must be encoded as 1978... and not 78- Parameters:
year- the value used to set the YEAR calendar field.month- the month. Month value is 0-based. e.g., 0 for January.day- the value used to set the DAY_OF_MONTH calendar field.- Returns:
- the UTC date base on parameters
-
printSecurityProviders
public static void printSecurityProviders()This method lists all defined security providers. -
readFirstByte
Reads the first byte from the DSSDocument- Parameters:
dssDocument- the document- Returns:
- the first byte
-
decodeURI
-
skipAvailableBytes
Skip the definednnumber of bytes from theInputStreamand validates success of the operation- Parameters:
is-InputStreamto skip bytes fromn-intnumber bytes to skip- Returns:
- actual number of bytes have been skipped
- Throws:
IllegalStateException- in case ofInputStreamreading error
-
readAvailableBytes
public static long readAvailableBytes(DSSDocument dssDocument, byte[] b) throws IllegalStateException Read the requested number of bytes fromDSSDocumentaccording to the size of the providedbyte[] buffer and validates success of the operation- Parameters:
dssDocument-DSSDocumentto read bytes fromb-byte[] buffer to fill- Returns:
- the total number of bytes read into buffer
- Throws:
IllegalStateException- in case ofInputStreamreading error
-
readAvailableBytes
Read the requested number of bytes fromInputStreamaccording to the size of the providedbyte[] buffer and validates success of the operation- Parameters:
is-InputStreamto read bytes fromb-byte[] buffer to fill- Returns:
- the total number of bytes read into buffer
- Throws:
IllegalStateException- in case ofInputStreamreading error
-
readAvailableBytes
public static long readAvailableBytes(InputStream is, byte[] b, int off, int len) throws IllegalStateException Read the requested number of bytes fromInputStreamand validates success of the operation- Parameters:
is-InputStreamto read bytes fromb-byte[] buffer to filloff-intoffset in the destination arraylen-intnumber of bytes to read- Returns:
- the total number of bytes read into buffer
- Throws:
IllegalStateException- in case ofInputStreamreading error
-
encodeURI
-
getExceptionMessage
-
getDigest
ReturnsDigestof thedssDocument- Parameters:
digestAlgo-DigestAlgorithmto usedssDocument-DSSDocumentto compute digest on- Returns:
Digest
-
removeControlCharacters
-
replaceAllNonAlphanumericCharacters
-
isUrnOid
-
isOidCode
Checks if the givenoidis a valid OID Ex.: 1.3.6.1.4.1.343 = valid 25.25 = invalid http://sample.com = invalid Source: regexr.com/38m0v (OID Validator)- Parameters:
oid-Stringoid to verify- Returns:
- TRUE if the string is a valid OID code, FALSE otherwise
-
getOidCode
-
toUrnOid
-
getObjectIdentifierValue
Normalizes and retrieves aStringidentifier (to be used for non-XAdES processing). Examples: "http://website.com" = "http://website.com" "urn:oid:1.2.3" = "1.2.3" "1.2.3" = "1.2.3" -
getObjectIdentifierValue
public static String getObjectIdentifierValue(String oidOrUriString, ObjectIdentifierQualifier qualifier) This method returns a URI value of theoidOrUriStringtaking into account the definedObjectIdentifierQualifier(to be used for XAdES processing). Examples: "http://nowina.lu/policy" = "http://nowina.lu/policy" "1.2.3.4.5" = "1.2.3.4.5" "urn:oid:1.2.3.4.5" = "1.2.3.4.5"- Parameters:
oidOrUriString-Stringidentifier valuequalifier-ObjectIdentifierQualifierwhen present- Returns:
StringURI
-
trimWhitespacesAndNewlines
-
stripFirstLeadingOccurrence
-
getDocumentNames
Returns a list of document names from the given document list- Parameters:
dssDocuments- a list ofDSSDocuments to get names of- Returns:
- a list of
Stringdocument names
-
getDocumentWithName
Returns a document with the givenfileNamefrom the list ofdocuments, when present- Parameters:
documents- a list ofDSSDocumentsfileName-Stringname of the document to extract- Returns:
DSSDocumentwhen found, NULL otherwise
-
getDocumentWithLastName
Returns the last document in the alphabetical ascendant order- Parameters:
documents- a list ofDSSDocuments- Returns:
DSSDocument
-
enrichCollection
public static <T> void enrichCollection(Collection<T> currentCollection, Collection<T> toAddCollection) Adds all objects fromtoAddCollectionintocurrentCollectionwithout duplicates- Type Parameters:
T- an Object- Parameters:
currentCollection- a collection to enrichtoAddCollection- a collection to add values from
-
convertECSignatureValue
public static SignatureValue convertECSignatureValue(SignatureAlgorithm expectedAlgorithm, SignatureValue signatureValue) This method ensures theSignatureValuehas an expected format and converts it when required- Parameters:
expectedAlgorithm-SignatureAlgorithmthe target SignatureAlgorithmsignatureValue-SignatureValuethe obtained SignatureValue- Returns:
SignatureValuewith the targetSignatureAlgorithm
-
getEdDSASignatureAlgorithm
This method returns aSignatureAlgorithmused to create thesignatureValueNOTE: Only EdDSA algorithm is being returned by this method. For non-EdDSA or unsupported format, NULL will be returned- Parameters:
signatureValue- byte array representing the signature value- Returns:
SignatureAlgorithm
-
assertSPUserNoticeConfigurationValid
public static void assertSPUserNoticeConfigurationValid(UserNotice userNotice) throws IllegalArgumentException This method verifies the validity of thw providedUserNoticeobject- Parameters:
userNotice-UserNoticeto check- Throws:
IllegalArgumentException- in case of an invalid configuration
-
toBigIntegerList
Transforms the given array of integers to a list ofBigIntegers- Parameters:
integers- array of integers- Returns:
- a list of
BigIntegers
-
isLineBreakByte
public static boolean isLineBreakByte(byte b) This method verifies if the given byte represents a line break character (new line or a carriage return)- Parameters:
b- byte to verify- Returns:
- TRUE if the byte represents a line break char, FALSE otherwise
-