org.bouncycastle.tsp

Class TimeStampToken

java.lang.Object

org.bouncycastle.tsp.TimeStampToken

public class TimeStampToken
extends Object

Carrier class for a TimeStampToken.

Constructor Summary

Constructors

Constructor and Description
TimeStampToken(CMSSignedData signedData)
TimeStampToken(ContentInfo contentInfo)

Method Summary

Methods

Modifier and Type	Method and Description
Store	getAttributeCertificates()
Store	getCertificates()
Store	getCRLs()
byte[]	getEncoded() Return a ASN.1 encoded byte stream representing the encoded object.
SignerId	getSID()
AttributeTable	getSignedAttributes()
TimeStampTokenInfo	getTimeStampInfo()
AttributeTable	getUnsignedAttributes()
boolean	isSignatureValid(SignerInformationVerifier sigVerifier) Return true if the signature on time stamp token is valid.
CMSSignedData	toCMSSignedData() Return the underlying CMSSignedData object.
void	validate(SignerInformationVerifier sigVerifier) Validate the time stamp token.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

TimeStampToken

public TimeStampToken(ContentInfo contentInfo)
               throws TSPException,
                      IOException

Throws:

TSPException

IOException

TimeStampToken

public TimeStampToken(CMSSignedData signedData)
               throws TSPException,
                      IOException

Throws:

TSPException

IOException

Method Detail

getTimeStampInfo

public TimeStampTokenInfo getTimeStampInfo()

getSID

public SignerId getSID()

getSignedAttributes

public AttributeTable getSignedAttributes()

getUnsignedAttributes

public AttributeTable getUnsignedAttributes()

getCertificates

public Store getCertificates()

getCRLs

public Store getCRLs()

getAttributeCertificates

public Store getAttributeCertificates()

validate

public void validate(SignerInformationVerifier sigVerifier)
              throws TSPException,
                     TSPValidationException

Validate the time stamp token.

To be valid the token must be signed by the passed in certificate and the certificate must be the one referred to by the SigningCertificate attribute included in the hashed attributes of the token. The certificate must also have the ExtendedKeyUsageExtension with only KeyPurposeId.id_kp_timeStamping and have been valid at the time the timestamp was created.

A successful call to validate means all the above are true.

Parameters:

sigVerifier - the content verifier create the objects required to verify the CMS object in the timestamp.

Throws:

TSPException - if an exception occurs in processing the token.

TSPValidationException - if the certificate or signature fail to be valid.

IllegalArgumentException - if the sigVerifierProvider has no associated certificate.

isSignatureValid

public boolean isSignatureValid(SignerInformationVerifier sigVerifier)
                         throws TSPException

Return true if the signature on time stamp token is valid.

Note: this is a much weaker proof of correctness than calling validate().

Parameters:

sigVerifier - the content verifier create the objects required to verify the CMS object in the timestamp.

Returns:

true if the signature matches, false otherwise.

Throws:

TSPException - if the signature cannot be processed or the provider cannot match the algorithm.

toCMSSignedData

public CMSSignedData toCMSSignedData()

Return the underlying CMSSignedData object.

Returns:

the underlying CMS structure.

getEncoded

public byte[] getEncoded()
                  throws IOException

Return a ASN.1 encoded byte stream representing the encoded object.

Throws:

IOException - if encoding fails.