Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Xades-X-L and a xades-A support #146

Merged
merged 87 commits into from
Feb 26, 2018
Merged

Xades-X-L and a xades-A support #146

merged 87 commits into from
Feb 26, 2018

Commits on Jul 13, 2016

  1. fix test case broken by revision 247 (changed paths) 

    Signed-off-by: Tiago Rossi <[email protected]>
    @tomato42
    tomato42 authored and Tiago Rossi committed Jul 13, 2016
    Configuration menu
    Copy the full SHA
    9dae633 View commit details
    Browse the repository at this point in the history

  2. basic support for XAdES-X signature verification 

    Signed-off-by: Tiago Rossi <[email protected]>
    @tomato42
    tomato42 authored and Tiago Rossi committed Jul 13, 2016
    Configuration menu
    Copy the full SHA
    dc1a599 View commit details
    Browse the repository at this point in the history

  3. add tests for enriching C form to X and verification of X form 

    Signed-off-by: Tiago Rossi <[email protected]>
    @tomato42
    tomato42 authored and Tiago Rossi committed Jul 13, 2016
    Configuration menu
    Copy the full SHA
    4f4f285 View commit details
    Browse the repository at this point in the history

  4. preliminary support for XAdES-X-L form verification 

    Signed-off-by: Tiago Rossi <[email protected]>
    @tomato42
    tomato42 authored and Tiago Rossi committed Jul 13, 2016
    Configuration menu
    Copy the full SHA
    db4a610 View commit details
    Browse the repository at this point in the history

  5. extract certs and CRLs from -X-L form tags 

    CertificateValues and RevocationValues contain certificates, CRLs and OCSP
responses that can be useful in validation of Signature. Parse them
and add to intermediate certs and CRLs CertStore for later use

Signed-off-by: Tiago Rossi <[email protected]>
    @tomato42
    tomato42 authored and Tiago Rossi committed Jul 13, 2016
    Configuration menu
    Copy the full SHA
    c392ca8 View commit details
    Browse the repository at this point in the history

  6. add support for AttrAuthoritiesCertValues and AttributeRevocationValues 

    Signed-off-by: Tiago Rossi <[email protected]>
    @tomato42
    tomato42 authored and Tiago Rossi committed Jul 13, 2016
    Configuration menu
    Copy the full SHA
    bf1fa0d View commit details
    Browse the repository at this point in the history

  7. test creation of optional -X-L form properties 

    Signed-off-by: Tiago Rossi <[email protected]>
    @tomato42
    tomato42 authored and Tiago Rossi committed Jul 13, 2016
    Configuration menu
    Copy the full SHA
    56c50bb View commit details
    Browse the repository at this point in the history

  8. add certificates and CRLs used in verification of TimeStamps to -X-L … 

    …form

Signed-off-by: Tiago Rossi <[email protected]>
    @tomato42
    tomato42 authored and Tiago Rossi committed Jul 13, 2016
    Configuration menu
    Copy the full SHA
    f368348 View commit details
    Browse the repository at this point in the history

  9. separate certificate verifiers for TimeStamps and Signature 

    Signed-off-by: Tiago Rossi <[email protected]>
    @tomato42
    tomato42 authored and Tiago Rossi committed Jul 13, 2016
    Configuration menu
    Copy the full SHA
    177a5ce View commit details
    Browse the repository at this point in the history

  10. backend for generating our own certificates for tests 

    Signed-off-by: Tiago Rossi <[email protected]>
    @tomato42
    tomato42 authored and Tiago Rossi committed Jul 13, 2016
    Configuration menu
    Copy the full SHA
    1db7b94 View commit details
    Browse the repository at this point in the history

  11. test XAdES-X-L form with minimal trust anchors 

    XAdES-X-L form should contain all the data needed to verify
both the Attributes (TimeStamps) and Signature, the only data needed
are the CAs that validate the CRLs and leaf certificates (user and TSA)

uses minimal validity periods (certificate loose their validity as soon
as they're not needed) and minimum of verification anchors (during
validaton only one leaf certificate is valid at a time)

Signed-off-by: Tiago Rossi <[email protected]>
    @tomato42
    tomato42 authored and Tiago Rossi committed Jul 13, 2016
    Configuration menu
    Copy the full SHA
    0210c81 View commit details
    Browse the repository at this point in the history

  12. add tests of CertPathBuilder 

    Signed-off-by: Tiago Rossi <[email protected]>
    @tomato42
    tomato42 authored and Tiago Rossi committed Jul 13, 2016
    Configuration menu
    Copy the full SHA
    bb7cd96 View commit details
    Browse the repository at this point in the history

  13. fix test01_T_ver2 caused by bug in X509CRLSelector 

    Sun implementation of X509CRLSelector doesn't return CRLs published
after the date provided to it using the setDateAndTime() method
this makes it very hard to validate certificates in the past (one
needs CRL from time of verification) and impossible to enforce grace
period (which requires using CRLs published after the time of
verification). The correct behaviour is in Bouncy Castle provider, so
use it instead.

http://java.sun.com/javase/6/docs/technotes/guides/security/certpath/CertPathProgGuide.html#X509CRLSelector
http://www.bouncycastle.org/jira/browse/BJA-249

Signed-off-by: Tiago Rossi <[email protected]>
    @tomato42
    tomato42 authored and Tiago Rossi committed Jul 13, 2016
    Configuration menu
    Copy the full SHA
    1231d52 View commit details
    Browse the repository at this point in the history

  14. use the new verifier implementation 

    Use new verifier implementation, for now it's mostly a copy of the old
verifier.

Signed-off-by: Tiago Rossi <[email protected]>
    @tomato42
    tomato42 authored and Tiago Rossi committed Jul 13, 2016
    Configuration menu
    Copy the full SHA
    1126b58 View commit details
    Browse the repository at this point in the history

  15. create hybrid approach unmarshaller 

    default unmarshaller doesn't remember relations between
properties and XML nodes, create one that does

To make it possible, we need property data collector that can store
relationship between property and XML node, add such one

Signed-off-by: Tiago Rossi <[email protected]>
    @tomato42
    tomato42 authored and Tiago Rossi committed Jul 13, 2016
    Configuration menu
    Copy the full SHA
    1e57ae6 View commit details
    Browse the repository at this point in the history

  16. create hybrid verifier 

    default verifier doesn't know how to use the Elements that
HybridQualifyingPropertiesUnmarshaller collected, add one that knows how
to use them and pass this additional informatino to property verifiers

Signed-off-by: Tiago Rossi <[email protected]>
    @tomato42
    tomato42 authored and Tiago Rossi committed Jul 13, 2016
    Configuration menu
    Copy the full SHA
    34cfade View commit details
    Browse the repository at this point in the history

  17. provide XML location information to TimeStampVerifiers 

    SigAndRefsTimeStamp must take properties in the order of appearence within
the signature. Previous mechanism used deterministic algorithm to put
properties in specific order.

Signed-off-by: Tiago Rossi <[email protected]>
    @tomato42
    tomato42 authored and Tiago Rossi committed Jul 13, 2016
    Configuration menu
    Copy the full SHA
    300677b View commit details
    Browse the repository at this point in the history

  18. constraints on time stamps, certificates and CRLs 

    Signed-off-by: Tiago Rossi <[email protected]>
    @tomato42
    tomato42 authored and Tiago Rossi committed Jul 13, 2016
    Configuration menu
    Copy the full SHA
    57515b7 View commit details
    Browse the repository at this point in the history

  19. allow for creation of C form from T form with current CRLs 

    Sun X509CRLSelector doesn't return CRLs that were published "in future",
but to properly validate signature we have to use time from earliest
valid time stamp

implement custom CRLSelector that returns usable CRLs

Signed-off-by: Tiago Rossi <[email protected]>
    @tomato42
    tomato42 authored and Tiago Rossi committed Jul 13, 2016
    Configuration menu
    Copy the full SHA
    257c457 View commit details
    Browse the repository at this point in the history

  20. make PKIX certificate validator more tolerant of input 

    If we're validating advanced forms of XAdES (C and above),
we can sometimes get CRLs that look as if they came from future

Signed-off-by: Tiago Rossi <[email protected]>
    @tomato42
    tomato42 authored and Tiago Rossi committed Jul 13, 2016
    Configuration menu
    Copy the full SHA
    53d07d9 View commit details
    Browse the repository at this point in the history

  21. PKIX cert validator should be tolerant of input 

    If we're validating advanced forms of XAdES, we need to provide
validator with certificates and CRLs we found in Properties,
they can be empty so we should be able handle this case gracefully

Signed-off-by: Tiago Rossi <[email protected]>
    @tomato42
    tomato42 authored and Tiago Rossi committed Jul 13, 2016
    Configuration menu
    Copy the full SHA
    5ea45dd View commit details
    Browse the repository at this point in the history

  22. make verifiers of EncapsulatedPKIData collect the PKI data 

    when dealing with XAdES-X-L form, we may have full revocation data
at hand, then the verification needs only trust anchors (CA certificates)
but we must allow for collection of those certificates and CRLs during
validation of the EncapsulatedPKIData properties: CertificateValues,
RevocationValues, AttrAuthoritiesCertValues and AttributeRevocationValues

Signed-off-by: Tiago Rossi <[email protected]>
    @tomato42
    tomato42 authored and Tiago Rossi committed Jul 13, 2016
    Configuration menu
    Copy the full SHA
    8aacc5c View commit details
    Browse the repository at this point in the history

  23. fix XadesVerifierErrosTest tests 

    change of verificato to soft-fail made the exception thrown different

Signed-off-by: Tiago Rossi <[email protected]>
    @tomato42
    tomato42 authored and Tiago Rossi committed Jul 13, 2016
    Configuration menu
    Copy the full SHA
    bff7f81 View commit details
    Browse the repository at this point in the history

  24. extend XadesHybridVerifier to XAdES-X-L support 

    Signed-off-by: Tiago Rossi <[email protected]>
    @tomato42
    tomato42 authored and Tiago Rossi committed Jul 13, 2016
    Configuration menu
    Copy the full SHA
    ffc46e4 View commit details
    Browse the repository at this point in the history

  25. documentation fixes 

    Signed-off-by: Tiago Rossi <[email protected]>
    @tomato42
    tomato42 authored and Tiago Rossi committed Jul 13, 2016
    Configuration menu
    Copy the full SHA
    32e34da View commit details
    Browse the repository at this point in the history

  26. add tests for basic A form 

    Signed-off-by: Tiago Rossi <[email protected]>
    @tomato42
    tomato42 authored and Tiago Rossi committed Jul 13, 2016
    Configuration menu
    Copy the full SHA
    6c0ea57 View commit details
    Browse the repository at this point in the history

  27. add support for validating ArchiveTimeStamp property 

    Signed-off-by: Tiago Rossi <[email protected]>
    @tomato42
    tomato42 authored and Tiago Rossi committed Jul 13, 2016
    Configuration menu
    Copy the full SHA
    3432c01 View commit details
    Browse the repository at this point in the history

  28. Align implementation with version 1.4.2 of the standard 

    Signed-off-by: Tiago Rossi <[email protected]>
    @tomato42
    tomato42 authored and Tiago Rossi committed Jul 13, 2016
    Configuration menu
    Copy the full SHA
    903c1d4 View commit details
    Browse the repository at this point in the history

  29. update form checker to XAdES-A support 

    Signed-off-by: Tiago Rossi <[email protected]>
    @tomato42
    tomato42 authored and Tiago Rossi committed Jul 13, 2016
    Configuration menu
    Copy the full SHA
    73209ff View commit details
    Browse the repository at this point in the history

  30. add ArchiveTimeStamp unmarshaller 

    Signed-off-by: Tiago Rossi <[email protected]>
    @tomato42
    tomato42 authored and Tiago Rossi committed Jul 13, 2016
    Configuration menu
    Copy the full SHA
    b41dfe1 View commit details
    Browse the repository at this point in the history

  31. add ability to extend X-L form to basic A form 

    Signed-off-by: Tiago Rossi <[email protected]>
    @tomato42
    tomato42 authored and Tiago Rossi committed Jul 13, 2016
    Configuration menu
    Copy the full SHA
    65ba11e View commit details
    Browse the repository at this point in the history

  32. allow for the validation of timestamp to change time 

    When validating XAdES-A, we need to be able to change verification
time after verifying the time stamp

in case of all other time stamps, we can do this only after validating
all time stamps of specific type, this is ensured by
QualifyingPropertiesVerifier

Signed-off-by: Tiago Rossi <[email protected]>
    @tomato42
    tomato42 authored and Tiago Rossi committed Jul 13, 2016
    Configuration menu
    Copy the full SHA
    a7afa61 View commit details
    Browse the repository at this point in the history

  33. add XAdES-A tests with past timestamps 

    add more detailed tests that test currentTime passing in verification
context

Signed-off-by: Tiago Rossi <[email protected]>
    @tomato42
    tomato42 authored and Tiago Rossi committed Jul 13, 2016
    Configuration menu
    Copy the full SHA
    5ba94f9 View commit details
    Browse the repository at this point in the history

  34. add note about grace time and verification 

    If we want to create small XAdES signatures (KiB wise) then we
shouldn't add revocation data that will be useless in future,
especially when the verificator enforces grace period for signatures

Signed-off-by: Tiago Rossi <[email protected]>
    @tomato42
    tomato42 authored and Tiago Rossi committed Jul 13, 2016
    Configuration menu
    Copy the full SHA
    bde3816 View commit details
    Browse the repository at this point in the history

  35. add TimeStampValidationData property 

    Signed-off-by: Tiago Rossi <[email protected]>
    @tomato42
    tomato42 authored and Tiago Rossi committed Jul 13, 2016
    Configuration menu
    Copy the full SHA
    d446f08 View commit details
    Browse the repository at this point in the history

  36. add support for XAdES 1.4.1 ValidationDataType 

    Signed-off-by: Tiago Rossi <[email protected]>
    @tomato42
    tomato42 authored and Tiago Rossi committed Jul 13, 2016
    Configuration menu
    Copy the full SHA
    176413d View commit details
    Browse the repository at this point in the history

  37. unmarshalling of TimeStampValidationData property 

    Signed-off-by: Tiago Rossi <[email protected]>
    @tomato42
    tomato42 authored and Tiago Rossi committed Jul 13, 2016
    Configuration menu
    Copy the full SHA
    a2c09e2 View commit details
    Browse the repository at this point in the history

  38. add ValidationData property structure verifier 

    Signed-off-by: Tiago Rossi <[email protected]>
    @tomato42
    tomato42 authored and Tiago Rossi committed Jul 13, 2016
    Configuration menu
    Copy the full SHA
    9b0ab83 View commit details
    Browse the repository at this point in the history

  39. add TimeStampValidationData verifier 

    Signed-off-by: Tiago Rossi <[email protected]>
    @tomato42
    tomato42 authored and Tiago Rossi committed Jul 13, 2016
    Configuration menu
    Copy the full SHA
    4e4edc4 View commit details
    Browse the repository at this point in the history

  40. emphisise that TimeStampValidationData is from 1.4.1 

    Signed-off-by: Tiago Rossi <[email protected]>
    @tomato42
    tomato42 authored and Tiago Rossi committed Jul 13, 2016
    Configuration menu
    Copy the full SHA
    62d6066 View commit details
    Browse the repository at this point in the history

  41. add TimeStampValidationData marshaller 

    Signed-off-by: Tiago Rossi <[email protected]>
    @tomato42
    tomato42 authored and Tiago Rossi committed Jul 13, 2016
    Configuration menu
    Copy the full SHA
    8a64130 View commit details
    Browse the repository at this point in the history

  42. TimeStampValidationData property generator 

    Signed-off-by: Tiago Rossi <[email protected]>
    @tomato42
    tomato42 authored and Tiago Rossi committed Jul 13, 2016
    Configuration menu
    Copy the full SHA
    92986f7 View commit details
    Browse the repository at this point in the history

  43. allow for adding TimeStampValidationData 

    add a fake transition from A form to A-VD form that will add
TimeStampValidationData but won't change the form, as returned by
XAdESFormChecker

Signed-off-by: Tiago Rossi <[email protected]>
    @tomato42
    tomato42 authored and Tiago Rossi committed Jul 13, 2016
    Configuration menu
    Copy the full SHA
    2e7f582 View commit details
    Browse the repository at this point in the history

  44. add test for creation and consumption of TimeStampValidationData 

    Signed-off-by: Tiago Rossi <[email protected]>
    @tomato42
    tomato42 authored and Tiago Rossi committed Jul 13, 2016
    Configuration menu
    Copy the full SHA
    35b924c View commit details
    Browse the repository at this point in the history

  45. add support for A form properties to ArchiveTimeStampVerifier 

    Signed-off-by: Tiago Rossi <[email protected]>
    @tomato42
    tomato42 authored and Tiago Rossi committed Jul 13, 2016
    Configuration menu
    Copy the full SHA
    66fe05e View commit details
    Browse the repository at this point in the history

  46. add simple test for TimeStampStampValidationData prop creation 

    Signed-off-by: Tiago Rossi <[email protected]>
    @tomato42
    tomato42 authored and Tiago Rossi committed Jul 13, 2016
    Configuration menu
    Copy the full SHA
    32bf4aa View commit details
    Browse the repository at this point in the history

  47. align ValidationDataType with version 1.4.2 of standard 

    Signed-off-by: Tiago Rossi <[email protected]>
    @tomato42
    tomato42 authored and Tiago Rossi committed Jul 13, 2016
    Configuration menu
    Copy the full SHA
    0b8d4c3 View commit details
    Browse the repository at this point in the history

  48. update old unmarshaller 

    Signed-off-by: Tiago Rossi <[email protected]>
    @tomato42
    tomato42 authored and Tiago Rossi committed Jul 13, 2016
    Configuration menu
    Copy the full SHA
    a288b70 View commit details
    Browse the repository at this point in the history

  49. fix message in AgedTimeStampTest 

    Signed-off-by: Tiago Rossi <[email protected]>
    @tomato42
    tomato42 authored and Tiago Rossi committed Jul 13, 2016
    Configuration menu
    Copy the full SHA
    58163e7 View commit details
    Browse the repository at this point in the history

  50. add test for A-TimeStamping already A-TimeStamped document 

    Signed-off-by: Tiago Rossi <[email protected]>
    @tomato42
    tomato42 authored and Tiago Rossi committed Jul 13, 2016
    Configuration menu
    Copy the full SHA
    6e3b65e View commit details
    Browse the repository at this point in the history

  51. add support for A-timeStamping already A-timeStamped document 

    Signed-off-by: Tiago Rossi <[email protected]>
    @tomato42
    tomato42 authored and Tiago Rossi committed Jul 13, 2016
    Configuration menu
    Copy the full SHA
    289c4d4 View commit details
    Browse the repository at this point in the history

  52. don't require optional properties in ArchiveTimeStamp 

    For ArchiveTimeStamp only CertificateValues and RevocationValues MUST
be present

Signed-off-by: Tiago Rossi <[email protected]>
    @tomato42
    tomato42 authored and Tiago Rossi committed Jul 13, 2016
    Configuration menu
    Copy the full SHA
    58f93d6 View commit details
    Browse the repository at this point in the history

  53. add support for creating multiple timeStamps of T and X type 

    while we can verify documents with multiple timeStamps (because
the verificator uses soft-fail approach) we weren't able to
create multiple T- or X-form timestamps by extending signature

Signed-off-by: Tiago Rossi <[email protected]>
    @tomato42
    tomato42 authored and Tiago Rossi committed Jul 13, 2016
    Configuration menu
    Copy the full SHA
    6807b7e View commit details
    Browse the repository at this point in the history

  54. save validation data with time stamp property 

    To ease the life of library users, return validation data used to
verify time stamp properties in the property object itself.
As a small bonus, gets rid of method invocation by reflection in
TimeStampVerifierBase.

Signed-off-by: Tiago Rossi <[email protected]>
    @tomato42
    tomato42 authored and Tiago Rossi committed Jul 13, 2016
    Configuration menu
    Copy the full SHA
    c6ddb9f View commit details
    Browse the repository at this point in the history

  55. clean up SurrogateTimeStampTokenProvider 

    Signed-off-by: Tiago Rossi <[email protected]>
    @tomato42
    tomato42 authored and Tiago Rossi committed Jul 13, 2016
    Configuration menu
    Copy the full SHA
    63ce052 View commit details
    Browse the repository at this point in the history

  56. update JavaDocs to reflect support for XAdES-A 

    Signed-off-by: Tiago Rossi <[email protected]>
    @tomato42
    tomato42 authored and Tiago Rossi committed Jul 13, 2016
    Configuration menu
    Copy the full SHA
    4284c92 View commit details
    Browse the repository at this point in the history

  57. make certs and CRLs saved in properties unique 

    If there are multiple timestamps signed by the same TSA, both the
certificate and CRL used to veriy it will be saved multiple times.

Signed-off-by: Tiago Rossi <[email protected]>
    @tomato42
    tomato42 authored and Tiago Rossi committed Jul 13, 2016
    Configuration menu
    Copy the full SHA
    3c99612 View commit details
    Browse the repository at this point in the history

  58. add only non duplicated data to A-VD form 

    We only need to add a certificate once to XAdES signature. This change
makes the generated signatures smaller.

Signed-off-by: Tiago Rossi <[email protected]>
    @tomato42
    tomato42 authored and Tiago Rossi committed Jul 13, 2016
    Configuration menu
    Copy the full SHA
    4e6ae87 View commit details
    Browse the repository at this point in the history

  59. consider parameters individually in tsValDataProp 

    Signed-off-by: Tiago Rossi <[email protected]>
    @tomato42
    tomato42 authored and Tiago Rossi committed Jul 13, 2016
    Configuration menu
    Copy the full SHA
    47f4f40 View commit details
    Browse the repository at this point in the history

  60. don't assume presence of data in TSValData property 

    Signed-off-by: Tiago Rossi <[email protected]>
    @tomato42
    tomato42 authored and Tiago Rossi committed Jul 13, 2016
    Configuration menu
    Copy the full SHA
    72ad4f3 View commit details
    Browse the repository at this point in the history

  61. don't try to create empty TSVerData property 

    Signed-off-by: Tiago Rossi <[email protected]>
    @tomato42
    tomato42 authored and Tiago Rossi committed Jul 13, 2016
    Configuration menu
    Copy the full SHA
    4b333a7 View commit details
    Browse the repository at this point in the history

  62. remove verifyAextendAVD test 

    because those tests are made using current time and
the same TSA, TimeStampVerificationData won't have
any data and as such won't be created

Signed-off-by: Tiago Rossi <[email protected]>
    @tomato42
    tomato42 authored and Tiago Rossi committed Jul 13, 2016
    Configuration menu
    Copy the full SHA
    3f30b7a View commit details
    Browse the repository at this point in the history

  63. update AgedTimeStampTest for new TSValData creator 

    TimeStampValidationData creator tries not to put CRLs
that weren't published after last time stamping of
the document, because of that, tests that use certificates with very
short validity (and quickly extends to advanced forms) can't depend on
certificates and CRLs added by TimeStampValidationData

Signed-off-by: Tiago Rossi <[email protected]>
    @tomato42
    tomato42 authored and Tiago Rossi committed Jul 13, 2016
    Configuration menu
    Copy the full SHA
    1f418e6 View commit details
    Browse the repository at this point in the history

  64. fix subCA cert creation 

    Signed-off-by: Tiago Rossi <[email protected]>
    @tomato42
    tomato42 authored and Tiago Rossi committed Jul 13, 2016
    Configuration menu
    Copy the full SHA
    a866046 View commit details
    Browse the repository at this point in the history

  65. realistic tests 

    add tests with time stamp validity measured in years,
multiple timestamps per each form, etc.

Signed-off-by: Tiago Rossi <[email protected]>
    @tomato42
    tomato42 authored and Tiago Rossi committed Jul 13, 2016
    Configuration menu
    Copy the full SHA
    38b6303 View commit details
    Browse the repository at this point in the history

  66. fix variable names in PropertiesUtils 

    Signed-off-by: Tiago Rossi <[email protected]>
    @tomato42
    tomato42 authored and Tiago Rossi committed Jul 13, 2016
    Configuration menu
    Copy the full SHA
    63d29c0 View commit details
    Browse the repository at this point in the history

  67. clean imports and add code comments 

    Signed-off-by: Tiago Rossi <[email protected]>
    @tomato42
    tomato42 authored and Tiago Rossi committed Jul 13, 2016
    Configuration menu
    Copy the full SHA
    0fa8667 View commit details
    Browse the repository at this point in the history

  68. add validation data before validating all properties 

    Because we validate properties in reverse order, but they are created in
chronological order, the certificates or CRLs may not yet be available,
to work around this problem, first add all certificates and CRLs to
verification context (as untrusted certificates) and only then validate
all properties.

fixes test case test04_3AVD_ver2 and test04_3AVD_ver4 from
AgedTimeStampTest

Signed-off-by: Tiago Rossi <[email protected]>
    @tomato42
    tomato42 authored and Tiago Rossi committed Jul 13, 2016
    Configuration menu
    Copy the full SHA
    f686109 View commit details
    Browse the repository at this point in the history

  69. don't fail windows-only tests on non-windows platforms 

    Signed-off-by: Tiago Rossi <[email protected]>
    @tomato42
    tomato42 authored and Tiago Rossi committed Jul 13, 2016
    Configuration menu
    Copy the full SHA
    c9e73a3 View commit details
    Browse the repository at this point in the history

  70. Fix A form validation. 

    From: Hubert Kario <[email protected]>
There is a major issue with validation of the A from.
It fails for enveloping signature because of not correctly implementing XAdES
v1.4.2 specification clause G.2.2.16.2.4, point 1) of particular rules for
implicit mechanism.
Here's a patch fixing the problem, to be applied on top of aforementioned
patches.
    Tiago Rossi committed Jul 13, 2016
    Configuration menu
    Copy the full SHA
    53b75c2 View commit details
    Browse the repository at this point in the history

Commits on Jul 14, 2016

  1. Merge branch 'master' into xades_a_support 

    Conflicts:
	src/main/java/xades4j/providers/impl/DefaultTimeStampVerificationProvider.java
	src/main/java/xades4j/verification/XadesVerifier.java
	src/main/java/xades4j/verification/XadesVerifierImpl.java
	src/main/java/xades4j/xml/bind/xades/XmlUnsignedSignaturePropertiesType.java
	src/main/java/xades4j/xml/bind/xades/XmlValidationDataType.java
	src/test/java/xades4j/production/SignerTTest.java
	src/test/java/xades4j/providers/impl/PKCS11KeyStoreKeyingDataProviderTest.java
	src/test/java/xades4j/verification/VerifyExternalSigsTest.java
	src/test/java/xades4j/verification/XadesVerifierErrorsTest.java
	src/test/java/xades4j/verification/XadesVerifierImplTest.java
    Tiago Rossi committed Jul 14, 2016
    Configuration menu
    Copy the full SHA
    8614e48 View commit details
    Browse the repository at this point in the history

  2. Add new crl for rootgva

    Tiago Rossi committed Jul 14, 2016
    Configuration menu
    Copy the full SHA
    c7f3115 View commit details
    Browse the repository at this point in the history

Commits on Jul 15, 2016

  1. Update trusted CAs and CRLs

    Tiago Rossi committed Jul 15, 2016
    Configuration menu
    Copy the full SHA
    af0f391 View commit details
    Browse the repository at this point in the history

  2. Fix some tests.

    Tiago Rossi committed Jul 15, 2016
    Configuration menu
    Copy the full SHA
    81c60c1 View commit details
    Browse the repository at this point in the history

Commits on Aug 4, 2016

  1. Fix some tests

    Leandro Souza Costa committed Aug 4, 2016
    Configuration menu
    Copy the full SHA
    f4fa329 View commit details
    Browse the repository at this point in the history

Commits on Aug 18, 2016

  1. Remove DO_BREAK_LINES from Base64 marshaller

    Leandro Souza Costa committed Aug 18, 2016
    Configuration menu
    Copy the full SHA
    bd7bcb8 View commit details
    Browse the repository at this point in the history

  2. Update bouncycastle and adds support for proxy configuration in tests

    Tiago Rossi committed Aug 18, 2016
    Configuration menu
    Copy the full SHA
    bb5ccdd View commit details
    Browse the repository at this point in the history

  3. Prepare sun-jax.episode for external usage

    Tiago Rossi committed Aug 18, 2016
    Configuration menu
    Copy the full SHA
    b25e9dd View commit details
    Browse the repository at this point in the history

Commits on Sep 16, 2016

  1. Select the right certificate from ds:KeyInfo

    Leandro Souza Costa committed Sep 16, 2016
    Configuration menu
    Copy the full SHA
    1272a69 View commit details
    Browse the repository at this point in the history

Commits on Sep 23, 2016

  1. Add custom unsigned properties to ArchiveTimeStamp digest

    Leandro Souza Costa committed Sep 23, 2016
    Configuration menu
    Copy the full SHA
    282d302 View commit details
    Browse the repository at this point in the history

Commits on Nov 21, 2016

  1. Close files after adding to FileSystemDirectoryCertStore

    Leandro Souza Costa committed Nov 21, 2016
    Configuration menu
    Copy the full SHA
    ad41df4 View commit details
    Browse the repository at this point in the history

Commits on Feb 6, 2017

  1. Update test tstoken, crls and xmls

    Tiago Rossi committed Feb 6, 2017
    Configuration menu
    Copy the full SHA
    9732eaa View commit details
    Browse the repository at this point in the history

  2. Changes DefaultTimeStampTokenProvider to non final to 

    permit add monitoring off tsa service
    Tiago Rossi committed Feb 6, 2017
    Configuration menu
    Copy the full SHA
    232bb6a View commit details
    Browse the repository at this point in the history

  3. Merge remote-tracking branch 'silegis/xades_a_support' into xades_a_s… 

    …upport
    Tiago Rossi committed Feb 6, 2017
    Configuration menu
    Copy the full SHA
    37b32f1 View commit details
    Browse the repository at this point in the history

Commits on Apr 11, 2017

  1. DefaultTimeStampTokenProvider.getHttpConnection is now protected.

    Tiago Rossi committed Apr 11, 2017
    Configuration menu
    Copy the full SHA
    6cc7332 View commit details
    Browse the repository at this point in the history

Commits on Feb 5, 2018

  1. Merge branch 'master' of https://github.com/luisgoncalves/xades4j.git … 

    …into feature/xades-x-l-a

# Conflicts:
#	pom.xml
#	src/main/java/xades4j/providers/impl/AuthenticatedTimeStampTokenProvider.java
#	src/main/java/xades4j/providers/impl/DefaultTimeStampTokenProvider.java
#	src/main/java/xades4j/verification/CommitmentTypeVerifier.java
#	src/main/java/xades4j/verification/QualifyingPropertiesVerifierImpl.java
#	src/main/java/xades4j/verification/SignatureUtils.java
#	src/main/java/xades4j/verification/XadesVerificationProfile.java
#	src/test/cert/csrc.nist/readme.txt
#	src/test/cert/csrc.nist/trustAnchor
#	src/test/cert/gva/readme.txt
#	src/test/cert/gva/rootgva_der.crl
#	src/test/cert/gva/rootgva_der_0?2?_05_2011 .crl
#	src/test/cert/my/myStore
#	src/test/cert/my/readme.txt
#	src/test/java/xades4j/production/SignerBESTest.java
#	src/test/java/xades4j/verification/VerifierTestBase.java
#	src/test/java/xades4j/verification/XadesVerifierImplTest.java
#	src/test/xml/detached.bes.xml
#	src/test/xml/detached.c.xml
#	src/test/xml/document.signed.bes.extres.xml
#	src/test/xml/document.signed.bes.xml
#	src/test/xml/document.signed.c.xml
#	src/test/xml/document.signed.epes.xml
#	src/test/xml/document.signed.t.bes.xml
#	src/test/xml/document.signed.t.epes.xml
    Tiago Rossi committed Feb 5, 2018
    Configuration menu
    Copy the full SHA
    f854856 View commit details
    Browse the repository at this point in the history

Commits on Feb 6, 2018

  1. Remove BoucyCastleProvider from test

    Tiago Rossi committed Feb 6, 2018
    Configuration menu
    Copy the full SHA
    56c36bd View commit details
    Browse the repository at this point in the history