Download - Svetlin Nakov

try {
privateKeyAndCertChain =
getPrivateKeyAndCertChain(userKeyStore, password);
} catch (GeneralSecurityException gsex) {
String errorMessage = "Can not extract certification chain and " +
"corresponding private key from the specified keystore file " +
"with given password. Probably the password is incorrect.";
throw new DocumentSignException(errorMessage, gsex);
}
// Check if a private key is available in the keystore
PrivateKey privateKey = privateKeyAndCertChain.mPrivateKey;
if (privateKey == null) {
String errorMessage = "Can not find the private key in the " +
"specified file " + keyStoreFileName + ".";
throw new DocumentSignException(errorMessage);
}
// Check if X.509 certification chain is available
Certificate[] certChain =
privateKeyAndCertChain.mCertificationChain;
if (certChain == null) {
String errorMessage = "Can not find neither certificate nor " +
"certification chain in the file " + keyStoreFileName + ".";
throw new DocumentSignException(errorMessage);
}
// Create the result object
CertificationChainAndSignatureInBase64 signingResult =
new CertificationChainAndSignatureInBase64();
// Save X.509 certification chain in the result encoded in Base64
try {
signingResult.mCertChain = encodeX509CertChainToBase64(certChain);
}
catch (CertificateException cee) {
String errorMessage = "Invalid certification chain found in the " +
"file " + keyStoreFileName + ".";
throw new DocumentSignException(errorMessage);
}
// Calculate the digital signature of the file,
// encode it in Base64 and save it in the result
try {
byte[] signature = signDocument(documentToSign, privateKey);
signingResult.mSignature = Base64Utils.base64Encode(signature);
} catch (GeneralSecurityException gsex) {
String errorMessage = "Error signing file " + aFileName + ".";
throw new DocumentSignException(errorMessage, gsex);
}
}
// Document signing completed succesfully
return signingResult;
}
else {
// Document signing canceled by the user
return null;
}
/**
* Loads a keystore from .PFX or .P12 file (file format should be PKCS#12)
* using given keystore password.
*/
79