net.jsign.SignatureAssert.java Source code

Introduction

Here is the source code for net.jsign.SignatureAssert.java

Source

/**
 * Copyright 2017 Emmanuel Bourg
 *
 * Licensed under the Apache License, Version 2.0 (the "License");
 * you may not use this file except in compliance with the License.
 * You may obtain a copy of the License at
 *
 *     http://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS,
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 * See the License for the specific language governing permissions and
 * limitations under the License.
 */

package net.jsign;

import junit.framework.Assert;
import org.bouncycastle.asn1.cms.Attribute;
import org.bouncycastle.asn1.cms.AttributeTable;
import org.bouncycastle.asn1.cms.CMSAttributes;
import org.bouncycastle.cms.CMSSignedData;
import org.bouncycastle.cms.SignerInformation;

import net.jsign.asn1.authenticode.AuthenticodeObjectIdentifiers;

public class SignatureAssert {

    public static void assertTimestamped(String message, CMSSignedData signedData) {
        SignerInformation signerInformation = signedData.getSignerInfos().getSigners().iterator().next();

        AttributeTable unsignedAttributes = signerInformation.getUnsignedAttributes();
        Assert.assertNotNull(message + " (missing unauthenticated attributse)", unsignedAttributes);

        Attribute authenticodeTimestampAttribute = unsignedAttributes.get(CMSAttributes.counterSignature);
        Attribute rfc3161TimestampAttribute = unsignedAttributes
                .get(AuthenticodeObjectIdentifiers.SPC_RFC3161_OBJID);

        Assert.assertTrue(message + " (no counter signature attribute found)",
                authenticodeTimestampAttribute != null || rfc3161TimestampAttribute != null);

        if (authenticodeTimestampAttribute != null) {
            Assert.assertNotNull(message + " (counter signature attribute value is null)",
                    authenticodeTimestampAttribute.getAttributeValues());
            Assert.assertTrue(message + " (counter signature attribute value is empty)",
                    authenticodeTimestampAttribute.getAttributeValues().length > 0);
        } else {
            Assert.assertNotNull(message + " (counter signature attribute value is null)",
                    rfc3161TimestampAttribute.getAttributeValues());
            Assert.assertTrue(message + " (counter signature attribute value is empty)",
                    rfc3161TimestampAttribute.getAttributeValues().length > 0);
        }

    }
}