Signature Attributes

The attributes listed in the standarts can be added to XAdES signatures.

The sample codes are in the package tr.gov.tubitak.uekae.esya.api.xades.example.attributes.

It adds the time of signature creation ,which is stated by the signer, to the signed document

See SigningTimeAttribute.

// create context with working directory
Context context = createContext();

// create signature according to context,
// with default type (XADES_BES)
XMLSignature signature = new XMLSignature(context);

// add document as reference, but do not embed it
// into the signature (embed=false)
signature.addDocument("./sample.txt", "text/plain", false);

signature.getSignedInfo().setSignatureMethod(SignatureMethod.RSA_SHA256);

// false-true gets non-qualified certificates while true-false gets qualified ones
X509Certificate cert = JSmartCardManager.getInstance().getSignatureCertificate(true, false);

// add certificate to show who signed the document
signature.addKeyInfo(new ECertificate(cert.getEncoded()));

// add signing time
signature.getQualifyingProperties().getSignedSignatureProperties().setSigningTime(getTime());

// now sign it by using smart card
signature.sign(JSmartCardManager.getInstance().getSigner(PIN, cert));

signature.write(new FileOutputStream(BASE_DIR + SIGNATURE_FILENAME));

It states the location of the signature creation.

See SignatureProductionPlaceAttribute .

// add signature production place
signature.getQualifyingProperties().getSignedSignatureProperties().setSignatureProductionPlace(
		new SignatureProductionPlace(context, "Istanbul", "Marmara", "34470", "Turkey"));

It contains additional information about the signer.

See SignerRoleAttribute.

// add signer role
signature.getQualifyingProperties().getSignedSignatureProperties().setSignerRole(
        new SignerRole(context, new ClaimedRole[]{new ClaimedRole(context, "Manager")}));

It specifies the commitment type of the signed document.

See CommitmentTypeIndicationAttribute.

// create context with working directory
Context context = createContext();

// create signature according to context,
// with default type (XADES_BES)
XMLSignature signature = new XMLSignature(context);

// add document
String ref1 = "#"+signature.addDocument("./sample.txt", "text/plain", true);
String objId2 = signature.addPlainObject("Test data 1.", "text/plain", null);
String ref2 = "#"+signature.addDocument("#"+objId2, null, false);

signature.getSignedInfo().setSignatureMethod(SignatureMethod.RSA_SHA256);

// false-true gets non-qualified certificates while true-false gets qualified ones
X509Certificate cert = JSmartCardManager.getInstance().getSignatureCertificate(true, false);

// add certificate to show who signed the document
signature.addKeyInfo(new ECertificate(cert.getEncoded()));

// add commitment type indication
signature.getQualifyingProperties().getSignedProperties().createOrGetSignedDataObjectProperties().
		addCommitmentTypeIndication(createTestCTI(context,ref1,ref2));

// now sign it by using smart card
signature.sign(JSmartCardManager.getInstance().getSigner(PIN, cert));

signature.write(new FileOutputStream(BASE_DIR + SIGNATURE_FILENAME));

It contains the timestamp for all documents.

See AllDataObjectsTimeStampAttribute.

// add all data objects timestamp
signature.getQualifyingProperties().getSignedProperties().createOrGetSignedDataObjectProperties().
        addAllDataObjectsTimeStamp(new AllDataObjectsTimeStamp(context,signature));

It contains the timestamp taken overs the documents seperately.

See IndividualDataObjectTimeStampAttribute.

// create context with working directory
Context context = createContext();

// create signature according to context,
// with default type (XADES_BES)
XMLSignature signature = new XMLSignature(context);

// add document into the signature and get the reference
String ref1 = "#" + signature.addDocument("./sample.txt", "text/plain", true);

// add another object
String objId2 = signature.addPlainObject("Test Data 1", "text/plain", null);
String ref2 = "#" + signature.addDocument("#"+objId2, null, false);

signature.getSignedInfo().setSignatureMethod(SignatureMethod.RSA_SHA256);

// false-true gets non-qualified certificates while true-false gets qualified ones
X509Certificate cert = JSmartCardManager.getInstance().getSignatureCertificate(true, false);

// add certificate to show who signed the document
signature.addKeyInfo(new ECertificate(cert.getEncoded()));

// create new individual data objects timestamp structure
IndividualDataObjectsTimeStamp timestamp = new IndividualDataObjectsTimeStamp(context);

// add objects to timestamp structure
timestamp.addInclude(new Include(context, ref1, Boolean.TRUE));
timestamp.addInclude(new Include(context, ref2, Boolean.TRUE));

// get encapsulated timestamp to individual data objects timestamp
timestamp.addEncapsulatedTimeStamp(signature);

// add individual data objects timestamp to signature
signature.getQualifyingProperties().getSignedProperties().createOrGetSignedDataObjectProperties().
		addIndividualDataObjectsTimeStamp(timestamp);

// optional - add timestamp validation data
signature.addTimeStampValidationData(timestamp, Calendar.getInstance());

// now sign it by using smart card
signature.sign(JSmartCardManager.getInstance().getSigner(PIN, cert));

signature.write(new FileOutputStream(BASE_DIR + SIGNATURE_FILENAME));