How to Sign Just a part of XML File - Java XMLSignature

Question

I'm newbie and I'm in a hurry. I'm just trying to digital sign a part of an XML.

The XML to sign is like this:

    
//XML to sing
............ 

 //Part to exclude
......

, in order to get an structure like this:

        
    //XML to sing
    ............ 

    
    
    
    
        
            
        
        
        vMg+tzKiwC8epApusLGo23at0ss=
    

dVqqHp437r7jAeEOB6mxgSOKnpT6EITRscd0mzA/zDep3Wkg1CM/m0ojDHnlkC7l
    
     //Part to exclude
    ......

This is the code I'm using to try to sign it, but I need to sign only the part of XML and put the result inside this tag.

This is the code I'm using:

//Create a DOM XMLSignatureFactory that will be used to
        // generate the enveloped signature.
        XMLSignatureFactory fac = XMLSignatureFactory.getInstance("DOM");
        // Create a Reference to the enveloped document (in this case,
        // you are signing the whole document, so a URI of "" signifies
        // that, and also specify the SHA1 digest algorithm and
        // the ENVELOPED Transform.
        try {
            List xpaths = new ArrayList();
            xpaths.add(new XPathType("//ns0:CFE", XPathType.Filter.INTERSECT));
            Reference ref = fac.newReference("", 
                                             fac.newDigestMethod(DigestMethod.SHA1, null),
                                             Collections.singletonList(fac.newTransform(Transform.ENVELOPED, 
                                                                                        (TransformParameterSpec) null)),null,null);
            //ori
            //Reference ref = fac.newReference("", fac.newDigestMethod(DigestMethod.SHA1, null));
            // Create the SignedInfo
            SignedInfo si = fac.newSignedInfo(fac.newCanonicalizationMethod(CanonicalizationMethod.INCLUSIVE, 
                                                                            (C14NMethodParameterSpec)null), 
                                              fac.newSignatureMethod(SignatureMethod.RSA_SHA1, null), 
                                              Collections.singletonList(ref));

            // Load the KeyStore and get the signing key and certificate.
            String p12Password = clave;
            KeyStore ks = KeyStore.getInstance("PKCS12");
            ks.load(new FileInputStream(keyStoreName), p12Password.toCharArray());
            KeyStore.PrivateKeyEntry keyEntry = (KeyStore.PrivateKeyEntry)ks.getEntry(alias, 
                                                                                      new KeyStore.PasswordProtection(p12Password.toCharArray()));
            X509Certificate cert = (X509Certificate)keyEntry.getCertificate();

            // Create the KeyInfo containing the X509Data.
            KeyInfoFactory kif = fac.getKeyInfoFactory();
            List x509Content = new ArrayList();
            x509Content.add(cert.getSubjectX500Principal().getName());
            x509Content.add(cert);
            X509Data xd = kif.newX509Data(x509Content);
            javax.xml.crypto.dsig.keyinfo.KeyInfo ki = kif.newKeyInfo(Collections.singletonList(xd));

            // Instantiate the document to be signed.
            DocumentBuilderFactory dbf = DocumentBuilderFactory.newInstance();
            dbf.setNamespaceAware(true);
            Document doc = dbf.newDocumentBuilder().parse(new FileInputStream(xmlEntrada));
            // Create a DOMSignContext and specify the RSA PrivateKey and
            // location of the resulting XMLSignature's parent element.
            DOMSignContext dsc = new DOMSignContext(keyEntry.getPrivateKey(), doc.getDocumentElement());
            // Create the XMLSignature, but don't sign it yet.
            XMLSignature signature = fac.newXMLSignature(si, ki);
            // Marshal, generate, and sign the enveloped signature.
            signature.sign(dsc);

            // Output the resulting document.
            OutputStream os = new FileOutputStream(xmlSalida);
            TransformerFactory tf = TransformerFactory.newInstance();
            Transformer trans = tf.newTransformer();
            trans.transform(new DOMSource(doc), new StreamResult(os));

Any help will be very appreciated.

Regards

How to Sign Just a part of XML File - Java XMLSignature

Answers (1)

Related Questions