Constructor Detail

• CreateSignatureBase

  public CreateSignatureBase(KeyStore keystore,
                     char[] pin)
                      throws KeyStoreException,
                             UnrecoverableKeyException,
                             NoSuchAlgorithmException,
                             IOException,
                             CertificateException

  Initialize the signature creator with a keystore (pkcs12) and pin that should be used for the signature.

  Parameters:

  keystore - is a pkcs12 keystore.

  pin - is the pin for the keystore / private key

  Throws:

  KeyStoreException - if the keystore has not been initialized (loaded)

  NoSuchAlgorithmException - if the algorithm for recovering the key cannot be found

  UnrecoverableKeyException - if the given password is wrong

  CertificateException - if the certificate is not valid as signing time

  IOException - if no certificate could be found

Method Detail

• setPrivateKey

  public final void setPrivateKey(PrivateKey privateKey)

• setCertificate

  public final void setCertificate(Certificate certificate)

• setCertificateChain

  public final void setCertificateChain(Certificate[] certificateChain)

• setTsaClient

  public void setTsaClient(TSAClient tsaClient)

• getTsaClient

  public TSAClient getTsaClient()

• sign

  public byte[] sign(InputStream content)
              throws IOException

  SignatureInterface implementation. This method will be called from inside of the pdfbox and create the PKCS #7 signature. The given InputStream contains the bytes that are given by the byte range. This method is for internal use only. Use your favorite cryptographic library to implement PKCS #7 signature creation.

  Specified by:

  sign in interface SignatureInterface

  Parameters:

  content - is the content as a (Filter)InputStream

  Returns:

  signature as a byte array

  Throws:

  IOException

• setExternalSigning

  public void setExternalSigning(boolean externalSigning)

  Set if external signing scenario should be used. If false, SignatureInterface would be used for signing.

  Default: false

  Parameters:

  externalSigning - true if external signing should be performed

• isExternalSigning

  public boolean isExternalSigning()

• getMDPPermission

  public int getMDPPermission(PDDocument doc)

  Get the access permissions granted for this document in the DocMDP transform parameters dictionary. Details are described in the table "Entries in the DocMDP transform parameters dictionary" in the PDF specification.

  Parameters:

  doc - document.

  Returns:

  the permission value. 0 means no DocMDP transform parameters dictionary exists. Other return values are 1, 2 or 3. 2 is also returned if the DocMDP transform parameters dictionary is found but did not contain a /P entry, or if the value is outside the valid range.

• setMDPPermission

  public void setMDPPermission(PDDocument doc,
                      PDSignature signature,
                      int accessPermissions)