Class PKCS7SignedData

public static final OID PKCS7_SIGNED_DATA

public PKCS7SignedData(BERReader ber)
            throws CRLException,
                   CertificateException,
                   IOException

Parse an encoded PKCS#7 SignedData object. The ASN.1 format of this object is:

 SignedData ::= SEQUENCE {
   version           Version, -- always 1 for PKCS7 v1.5
   digestAlgorithms  DigestAlgorithmIdentifiers,
   contentInfo       ContentInfo,
   certificates  [0] IMPLICIT ExtendedCertificatesAndCertificates OPTIONAL,
   crls          [1] IMPLICIT CertificateRevocationLists OPTIONAL,
   signerInfos       SignerInfos }

 Version ::= INTEGER

 DigestAlgorithmIdentifiers ::= SET OF DigestAlgorithmIdentifier

 DigestAlgorithmIdentifier ::= AlgorithmIdentifier

 ContentInfo ::= SEQUENCE {
   contentType   ContentType,
   content   [0] EXPLICIT ANY DEFINED BY contentType OPTIONAL }

 ContentType ::= OBJECT IDENTIFIER

 ExtendedCertificatesAndCertificates ::=
   SET OF ExtendedCertificatesAndCertificate

 ExtendedCertificatesAndCertificate ::= CHOICE {
   certificate             Certificate, -- from X.509
   extendedCertificate [0] IMPLICIT ExtendedCertificate }

 CertificateRevocationLists ::= SET OF CertificateRevocationList
   -- from X.509

 SignerInfos ::= SET OF SignerInfo

 SignerInfo ::= SEQUENCE {
   version                       Version, -- always 1 for PKCS7 v1.5
   issuerAndSerialNumber         IssuerAndSerialNumber,
   digestAlgorithm               DigestAlgorithmIdentifier,
   authenticatedAttributes   [0] IMPLICIT Attributes OPTIONAL,
   digestEncryptionAlgorithm     DigestEncryptionAlgorithmIdentifier,
   encryptedDigest               EncryptedDigest,
   unauthenticatedAttributes [1] IMPLICIT Attributes OPTIONAL }

 EncryptedDigest ::= OCTET STRING
 

(Readers who are confused as to why it takes 40 levels of indirection to specify "data with a signature", rest assured that the present author is as confused as you are).

public PKCS7SignedData(InputStream in)
            throws CRLException,
                   CertificateException,
                   IOException

public PKCS7SignedData(Set<E> digestAlgorithms,
                       PKCS7Data data,
                       Certificate[] certificates,
                       X509CRL[] crls,
                       Set<E> signerInfos)

Constructs a new instance of PKCS7SignedData given a designated set of fields.

Parameters:

digestAlgorithms - the collection of DigestAlgorithm elements. Each DigestAlgorithm is a List of two elements, the first is an OID while the second is dependent on the value of the OID element.

data - an instance of a PKCS#7 (non-signed) data. In its simplest form such an ASN.1 structure would consist of just the OID of a non-signed PKCS#7 Data.

certificates - the array of Certificates used to authenticate the enclosed (or referenced, in case the content is null) data.

crls - the array of certificate-revocation lists of the used certificates.

signerInfos - a set of SignerInfo elements, one per signer of the data referenced by this PKCS7SignedData instance.

public void encode(OutputStream out)
            throws IOException,
                   CRLException,
                   CertificateEncodingException

Writes to the designated output stream the DER encoding of the current contents of this instance.

Parameters:

out - the destination output stream.

Throws:

IOException - if an I/O related exception occurs during the process.

CRLException - if an exception occurs while encoding the certificate revocation lists associated with this instance.

CertificateEncodingException - if an exception occurs while encoding the certificate chains associated with this instance.

public Certificate[] getCertificates()

public byte[] getContent()

public OID getContentType()

public Set<E> getDigestAlgorithms()

public Set<E> getSignerInfos()

public BigInteger getVersion()