| java.lang.Object
 org.bouncycastle.jce.PKCS7SignedData
| PKCS7SignedData | | public class PKCS7SignedData implements PKCSObjectIdentifiers(Code) | | Represents a PKCS#7 object - specifically the "Signed Data"
type.
How to use it? To verify a signature, do:
PKCS7SignedData pkcs7 = new PKCS7SignedData(der_bytes); // Create it
pkcs7.update(bytes, 0, bytes.length); // Update checksum
boolean verified = pkcs7.verify(); // Does it add up?
To sign, do this:
PKCS7SignedData pkcs7 = new PKCS7SignedData(privKey, certChain, "MD5");
pkcs7.update(bytes, 0, bytes.length); // Update checksum
pkcs7.sign(); // Create digest
bytes = pkcs7.getEncoded(); // Write it somewhere
This class is pretty close to obsolete, for a much better (and more complete)
implementation of PKCS7 have a look at the org.bouncycastle.cms package.
|
| Constructor Summary | |
| public | PKCS7SignedData(byte[] in)
Read an existing PKCS#7 object from a DER encoded byte array using
the BC provider. | | public | PKCS7SignedData(byte[] in, String provider)
| | public | PKCS7SignedData(PrivateKey privKey, Certificate[] certChain, String hashAlgorithm)
Create a new PKCS#7 object from the specified key using the BC provider.
Parameters:
privKey - the private key to be used for signing.
Parameters:
certChain - the certificate chain associated with the private key.
Parameters:
hashAlgorithm - the hashing algorithm used to compute the message digest. | | public | PKCS7SignedData(PrivateKey privKey, Certificate[] certChain, String hashAlgorithm, String provider)
Create a new PKCS#7 object from the specified key.
Parameters:
privKey - the private key to be used for signing.
Parameters:
certChain - the certificate chain associated with the private key.
Parameters:
hashAlgorithm - the hashing algorithm used to compute the message digest. | | public | PKCS7SignedData(PrivateKey privKey, Certificate[] certChain, CRL[] crlList, String hashAlgorithm, String provider)
Create a new PKCS#7 object from the specified key.
Parameters:
privKey - the private key to be used for signing.
Parameters:
certChain - the certificate chain associated with the private key.
Parameters:
crlList - the crl list associated with the private key.
Parameters:
hashAlgorithm - the hashing algorithm used to compute the message digest. |
| PKCS7SignedData | | public PKCS7SignedData(PrivateKey privKey, Certificate[] certChain, CRL[] crlList, String hashAlgorithm, String provider) throws SecurityException, InvalidKeyException, NoSuchProviderException, NoSuchAlgorithmException(Code) | | Create a new PKCS#7 object from the specified key.
Parameters:
privKey - the private key to be used for signing.
Parameters:
certChain - the certificate chain associated with the private key.
Parameters:
crlList - the crl list associated with the private key.
Parameters:
hashAlgorithm - the hashing algorithm used to compute the message digest. Must be "MD5", "MD2", "SHA1" or "SHA"
Parameters:
provider - the provider to use. |
| getCRLs | | public Collection getCRLs()(Code) | | Get the X.509 certificate revocation lists associated with this PKCS#7 object
|
| getCertificates | | public Certificate[] getCertificates()(Code) | | Get the X.509 certificates associated with this PKCS#7 object
|
| getDigestAlgorithm | | public String getDigestAlgorithm()(Code) | | Get the algorithm used to calculate the message digest
|
| getEncoded | | public byte[] getEncoded()(Code) | | return the bytes for the PKCS7SignedData object.
|
| getSigningCertificate | | public X509Certificate getSigningCertificate()(Code) | | Get the X.509 certificate actually used to sign the digest.
|
| getSigningInfoVersion | | public int getSigningInfoVersion()(Code) | | Get the version of the PKCS#7 "SignerInfo" object. Always 1
|
| getVersion | | public int getVersion()(Code) | | Get the version of the PKCS#7 object. Always 1
|
| reset | | public void reset()(Code) | | Resets the PKCS7SignedData object to it's initial state, ready
to sign or verify a new buffer.
|
| update | | public void update(byte buf) throws SignatureException(Code) | | Update the digest with the specified byte. This method is used both for signing and verifying
|
| update | | public void update(byte[] buf, int off, int len) throws SignatureException(Code) | | Update the digest with the specified bytes. This method is used both for signing and verifying
|
|
|