用手动签名入口创建Xades

Question

我正在尝试使用我的身份证签名创建一个数字签名的XML文档。

我有两个程序的两个部分。第一个是从ID中获取文件的证书和签名。 为此，我正在使用类似的东西使用Python PKCS11库：

with open("input.xml", "rb") as f:
    data = f.read()

lib = lib('path/to/pkcs11/lib.dylib')
token = lib.get_token('name of token')

with token.open(PIN) as session:
    certificate = None

    for obj in session.get_objects({Attribute.CLASS: ObjectClass.CERTIFICATE}):
        certificate = obj
        der_bytes = certificate[Attribute.VALUE]

    with open('certificate.der', "wb") as f:
        f.write(der_bytes)

    # calculate SHA256 of data
    digest = session.digest(data, mechanism=Mechanism.SHA256)

    for obj in session.get_objects({Attribute.CLASS: ObjectClass.PRIVATE_KEY}):
        private_key = obj

    signature = private_key.sign(digest, mechanism=Mechanism.RSA_PKCS)

    with open('signature', "wb") as f:
        f.write(signature)

生成certift.der和signature文件，并且正在正常工作（至少我认为）

XML生成第一部分我正在使用Java中的欧洲DSS库：

DSSDocument toSignDocument = new FileDocument("input.xml");

// Preparing parameters for the XAdES signature
XAdESSignatureParameters parameters = new XAdESSignatureParameters();

// We choose the level of the signature (-B, -T, -LT, -LTA).     
parameters.setSignatureLevel(SignatureLevel.XAdES_BASELINE_B);

// We choose the type of the signature packaging (ENVELOPED, ENVELOPING, DETACHED).
parameters.setSignaturePackaging(SignaturePackaging.ENVELOPED);

// We set the digest algorithm to use with the signature algorithm. You must use the
// same parameter when you invoke the method sign on the token. The default value is SHA256 parameters.setDigestAlgorithm(DigestAlgorithm.SHA256);

CertificateFactory certFactory = CertificateFactory.getInstance("X.509");
InputStream in = new FileInputStream("certificate.der");
X509Certificate cert = (X509Certificate) certFactory.generateCertificate(in);

// We set the signing certificate
parameters.setSigningCertificate(new CertificateToken(cert));

// Create common certificate verifier
CommonCertificateVerifier commonCertificateVerifier = new CommonCertificateVerifier();

// Create XAdES service for signature
XAdESService service = new XAdESService(commonCertificateVerifier);

// Get the SignedInfo XML segment that need to be signed.
ToBeSigned dataToSign = service.getDataToSign(toSignDocument, parameters);

File file = new File("signature");
SignatureValue signatureValue = new SignatureValue(SignatureAlgorithm.RSA_SHA256, Files.readAllBytes(file.toPath()));

// We invoke the service to sign the document with the signature value obtained in
// the previous step.
DSSDocument signedDocument = service.signDocument(toSignDocument, parameters, signatureValue);

File signedFile = new File("output.xml");
signedFile.createNewFile();
signedDocument.writeTo(new FileOutputStream(signedFile, false));

创建Xades文件，但是当我尝试验证签名时（例如，使用 this ）它失败了，说签名不是完整的。

我在做什么错？

Answer 1

您不使用dataTosign完全用于签名值创建。

您应该做的是使用与创建证书相对应的专用密钥来实际签署消化的dataTosign。即，

File file = new File("signature");
SignatureValue signatureValue = new SignatureValue(SignatureAlgorithm.RSA_SHA256, Files.readAllBytes(file.toPath()));

您应该做这样的事情（使用上面的示例）：

# calculate SHA256 of data
digest = session.digest(dataToSign, mechanism=Mechanism.SHA256)

for obj in session.get_objects({Attribute.CLASS: ObjectClass.PRIVATE_KEY}):
    private_key = obj

signatureValue = private_key.sign(digest, mechanism=Mechanism.RSA_PKCS)

请注意，您应签署原始文档，而是dataToSign，因为它包含对原始的引用文档（其摘要），但也签署了参数，以确保符合ADES格式。

我希望这对您有帮助。

此致，
Aleksandr。