api-console-assets

<html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"> <style> .KEYW {color: #933;} .COMM {color: #bbb; font-style: italic;} .NUMB {color: #393;} .STRN {color: #393;} .REGX {color: #339;} .line {border-right: 1px dotted #666; color: #666; font-style: normal;} </style></head><body><pre> 1 /* asn1cades-1.0.3.js (c) 2014-2017 Kenji Urushima | kjur.github.com/jsrsasign/license 2 */ 3 /* 4 * asn1cades.js - ASN.1 DER encoder classes for RFC 5126 CAdES long term signature 5 * 6 * Copyright (c) 2014-2017 Kenji Urushima (kenji.urushima@gmail.com) 7 * 8 * This software is licensed under the terms of the MIT License. 9 * https://kjur.github.io/jsrsasign/license 10 * 11 * The above copyright and license notice shall be 12 * included in all copies or substantial portions of the Software. 13 */ 14 15 /** 16 * @fileOverview 17 * @name asn1cades-1.0.js 18 * @author Kenji Urushima kenji.urushima@gmail.com 19 * @version jsrsasign 7.2.1 asn1cades 1.0.3 (2017-Jun-03) 20 * @since jsrsasign 4.7.0 21 * @license <a href="https://kjur.github.io/jsrsasign/license/">MIT License</a> 22 */ 23 24 /** 25 * kjur's class library name space 26 * // already documented in asn1-1.0.js 27 * @name KJUR 28 * @namespace kjur's class library name space 29 */ 30 if (typeof KJUR == "undefined" || !KJUR) KJUR = {}; 31 32 /** 33 * kjur's ASN.1 class library name space 34 * // already documented in asn1-1.0.js 35 * @name KJUR.asn1 36 * @namespace 37 */ 38 if (typeof KJUR.asn1 == "undefined" || !KJUR.asn1) KJUR.asn1 = {}; 39 40 /** 41 * kjur's ASN.1 class for RFC 5126 CAdES long term signature 42 * 43 * This name space provides 44 * <a href="https://tools.ietf.org/html/rfc5126">RFC 5126 45 * CAdES(CMS Advanced Electronic Signature)</a> generator. 46 * 47 * <h4>SUPPORTED FORMATS</h4> 48 * Following CAdES formats is supported by this library. 49 * <ul> 50 * <li>CAdES-BES - CAdES Basic Electronic Signature</li> 51 * <li>CAdES-EPES - CAdES Explicit Policy-based Electronic Signature</li> 52 * <li>CAdES-T - Electronic Signature with Time</li> 53 * </ul> 54 * 55 * 56 * <h4>PROVIDED ATTRIBUTE CLASSES</h4> 57 * <ul> 58 * <li>{@link KJUR.asn1.cades.SignaturePolicyIdentifier} - for CAdES-EPES</li> 59 * <li>{@link KJUR.asn1.cades.SignatureTimeStamp} - for CAdES-T</li> 60 * <li>{@link KJUR.asn1.cades.CompleteCertificateRefs} - for CAdES-C(for future use)</li> 61 * </ul> 62 * NOTE: Currntly CAdES-C is not supported since parser can't 63 * handle unsigned attribute. 64 * 65 * <h4>OTHER CLASSES</h4> 66 * <ul> 67 * <li>{@link KJUR.asn1.cades.OtherHashAlgAndValue}</li> 68 * <li>{@link KJUR.asn1.cades.OtherHash}</li> 69 * <li>{@link KJUR.asn1.cades.OtherCertID}</li> 70 * <li>{@link KJUR.asn1.cades.CAdESUtil} - utilities for CAdES</li> 71 * </ul> 72 * 73 * <h4>GENERATE CAdES-BES</h4> 74 * To generate CAdES-BES, {@link KJUR.asn.cades} namespace 75 * classes are not required and already {@link KJUR.asn.cms} namespace 76 * provides attributes for CAdES-BES. 77 * Create {@link KJUR.asn1.cms.SignedData} with following 78 * mandatory attribute in CAdES-BES: 79 * <ul> 80 * <li>{@link KJUR.asn1.cms.ContentType}</li> 81 * <li>{@link KJUR.asn1.cms.MessageDigest}</li> 82 * <li>{@link KJUR.asn1.cms.SigningCertificate} or </li> 83 * <li>{@link KJUR.asn1.cms.SigningCertificateV2}</li> 84 * </ul> 85 * CMSUtil.newSignedData method is very useful to generate CAdES-BES. 86 * <pre> 87 * sd = KJUR.asn1.cms.CMSUtil.newSignedData({ 88 * content: {str: "aaa"}, 89 * certs: [certPEM], 90 * signerInfos: [{ 91 * hashAlg: 'sha256', 92 * sAttr: {SigningCertificateV2: {array: [certPEM]}}, 93 * signerCert: certPEM, 94 * sigAlg: 'SHA256withRSA', 95 * signerPrvKey: pkcs8PrvKeyPEM 96 * }] 97 * }); 98 * signedDataHex = sd.getContentInfoEncodedHex(); 99 * </pre> 100 * NOTE: ContentType and MessageDigest signed attributes 101 * are automatically added by default. 102 * 103 * <h4>GENERATE CAdES-BES with multiple signers</h4> 104 * If you need signature by multiple signers, you can 105 * specify one or more items in 'signerInfos' property as below. 106 * <pre> 107 * sd = KJUR.asn1.cms.CMSUtil.newSignedData({ 108 * content: {str: "aaa"}, 109 * certs: [certPEM1, certPEM2], 110 * signerInfos: [{ 111 * hashAlg: 'sha256', 112 * sAttr: {SigningCertificateV2: {array: [certPEM1]}}, 113 * signerCert: certPEM1, 114 * sigAlg: 'SHA256withRSA', 115 * signerPrvKey: pkcs8PrvKeyPEM1 116 * },{ 117 * hashAlg: 'sha1', 118 * sAttr: {SigningCertificateV2: {array: [certPEM2]}}, 119 * signerCert: certPEM2, 120 * sigAlg: 'SHA1withRSA', 121 * signerPrvKey: pkcs8PrvKeyPEM2 122 * }] 123 * }); 124 * signedDataHex = sd.getContentInfoEncodedHex(); 125 * </pre> 126 * 127 * <h4>GENERATE CAdES-EPES</h4> 128 * When you need a CAdES-EPES signature, 129 * you just need to add 'SignaturePolicyIdentifier' 130 * attribute as below. 131 * <pre> 132 * sd = KJUR.asn1.cms.CMSUtil.newSignedData({ 133 * content: {str: "aaa"}, 134 * certs: [certPEM], 135 * signerInfos: [{ 136 * hashAlg: 'sha256', 137 * sAttr: { 138 * SigningCertificateV2: {array: [certPEM]}, 139 * SignaturePolicyIdentifier: { 140 * oid: '1.2.3.4.5', 141 * hash: {alg: 'sha1', hash: 'b1b2b3b4b...'} 142 * }, 143 * }, 144 * signerCert: certPEM, 145 * sigAlg: 'SHA256withRSA', 146 * signerPrvKey: pkcs8PrvKeyPEM 147 * }] 148 * }); 149 * signedDataHex = sd.getContentInfoEncodedHex(); 150 * </pre> 151 * 152 * <h4>GENERATE CAdES-T</h4> 153 * After a signed CAdES-BES or CAdES-EPES signature have been generated, 154 * you can generate CAdES-T by adding SigningTimeStamp unsigned attribute. 155 * <pre> 156 * beshex = "30..."; // hex of CAdES-BES or EPES data 157 * info = KJUR.asn1.cades.CAdESUtil.parseSignedDataForAddingUnsigned(beshex); 158 * // You can refer a hexadecimal string of signature value 159 * // in the first signerInfo in the CAdES-BES/EPES with a variable: 160 * // 'info.si[0].sigval'. You need to get RFC 3161 TimeStampToken 161 * // from a trusted time stamp authority. Otherwise you can also 162 * // get it by 'KJUR.asn1.tsp' module. We suppose that we could 163 * // get proper time stamp. 164 * tsthex0 = "30..."; // hex of TimeStampToken for signerInfo[0] sigval 165 * si0 = info.obj.signerInfoList[0]; 166 * si0.addUnsigned(new KJUR.asn1.cades.SignatureTimeStamp({tst: tsthex0}); 167 * esthex = info.obj.getContentInfoEncodedHex(); // CAdES-T 168 * </pre> 169 * 170 * 171 * <h4>SAMPLE CODES</h4> 172 * <ul> 173 * <li><a href="../../tool_cades.html">demo program for CAdES-BES/EPES/T generation</a></li> 174 * <li><a href="../../test/qunit-do-asn1cades.html">Unit test code for KJUR.asn1.cades package</a></li> 175 * <li><a href="../../test/qunit-do-asn1tsp.html">Unit test code for KJUR.asn1.tsp package (See SimpleTSAAdaptor test)</a></li> 176 * <li><a href="../../test/qunit-do-asn1cms.html">Unit test code for KJUR.asn1.cms package (See newSignedData test)</a></li> 177 * </ul> 178 * 179 * @name KJUR.asn1.cades 180 * @namespace 181 */ 182 if (typeof KJUR.asn1.cades == "undefined" || !KJUR.asn1.cades) KJUR.asn1.cades = {}; 183 184 /** 185 * class for RFC 5126 CAdES SignaturePolicyIdentifier attribute 186 * @name KJUR.asn1.cades.SignaturePolicyIdentifier 187 * @class class for RFC 5126 CAdES SignaturePolicyIdentifier attribute 188 * @param {Array} params associative array of parameters 189 * @extends KJUR.asn1.cms.Attribute 190 * @since jsrsasign 4.7.0 asn1cades 1.0.0 191 * @description 192 * <pre> 193 * SignaturePolicyIdentifier ::= CHOICE { 194 * signaturePolicyId SignaturePolicyId, 195 * signaturePolicyImplied SignaturePolicyImplied } -- not used 196 * 197 * SignaturePolicyImplied ::= NULL 198 * SignaturePolicyId ::= SEQUENCE { 199 * sigPolicyId SigPolicyId, 200 * sigPolicyHash SigPolicyHash, 201 * sigPolicyQualifiers SEQUENCE SIZE (1..MAX) OF 202 * SigPolicyQualifierInfo OPTIONAL } 203 * SigPolicyId ::= OBJECT IDENTIFIER 204 * SigPolicyHash ::= OtherHashAlgAndValue 205 * </pre> 206 * @example 207 * var o = new KJUR.asn1.cades.SignaturePolicyIdentifier({ 208 * oid: '1.2.3.4.5', 209 * hash: {alg: 'sha1', hash: 'a1a2a3a4...'} 210 * }); 211 */ 212 /* 213 * id-aa-ets-sigPolicyId OBJECT IDENTIFIER ::= { iso(1) 214 * member-body(2) us(840) rsadsi(113549) pkcs(1) pkcs9(9) 215 * smime(16) id-aa(2) 15 } 216 * 217 * signature-policy-identifier attribute values have ASN.1 type 218 * SignaturePolicyIdentifier: 219 * 220 * SigPolicyQualifierInfo ::= SEQUENCE { 221 * sigPolicyQualifierId SigPolicyQualifierId, 222 * sigQualifier ANY DEFINED BY sigPolicyQualifierId } 223 * 224 * sigpolicyQualifierIds defined in the present document: 225 * SigPolicyQualifierId ::= OBJECT IDENTIFIER 226 * id-spq-ets-uri OBJECT IDENTIFIER ::= { iso(1) 227 * member-body(2) us(840) rsadsi(113549) pkcs(1) pkcs9(9) 228 * smime(16) id-spq(5) 1 } 229 * 230 * SPuri ::= IA5String 231 * 232 * id-spq-ets-unotice OBJECT IDENTIFIER ::= { iso(1) 233 * member-body(2) us(840) rsadsi(113549) pkcs(1) pkcs9(9) 234 * smime(16) id-spq(5) 2 } 235 * 236 * SPUserNotice ::= SEQUENCE { 237 * noticeRef NoticeReference OPTIONAL, 238 * explicitText DisplayText OPTIONAL} 239 * 240 * NoticeReference ::= SEQUENCE { 241 * organization DisplayText, 242 * noticeNumbers SEQUENCE OF INTEGER } 243 * 244 * DisplayText ::= CHOICE { 245 * visibleString VisibleString (SIZE (1..200)), 246 * bmpString BMPString (SIZE (1..200)), 247 * utf8String UTF8String (SIZE (1..200)) } 248 */ 249 KJUR.asn1.cades.SignaturePolicyIdentifier = function(params) { 250 var _KJUR = KJUR, 251 _KJUR_asn1 = _KJUR.asn1, 252 _DERObjectIdentifier = _KJUR_asn1.DERObjectIdentifier, 253 _DERSequence = _KJUR_asn1.DERSequence, 254 _KJUR_asn1_cades = _KJUR_asn1.cades, 255 _OtherHashAlgAndValue = _KJUR_asn1_cades.OtherHashAlgAndValue; 256 257 _KJUR_asn1_cades.SignaturePolicyIdentifier.superclass.constructor.call(this); 258 this.attrTypeOid = "1.2.840.113549.1.9.16.2.15"; 259 260 if (params !== undefined) { 261 if (typeof params.oid == "string" && 262 typeof params.hash == "object") { 263 var dOid = new _DERObjectIdentifier({oid: params.oid}); 264 var dHash = new _OtherHashAlgAndValue(params.hash); 265 var seq = new _DERSequence({array: [dOid, dHash]}); 266 this.valueList = [seq]; 267 } 268 } 269 }; 270 YAHOO.lang.extend(KJUR.asn1.cades.SignaturePolicyIdentifier, 271 KJUR.asn1.cms.Attribute); 272 273 /** 274 * class for OtherHashAlgAndValue ASN.1 object 275 * @name KJUR.asn1.cades.OtherHashAlgAndValue 276 * @class class for OtherHashAlgAndValue ASN.1 object 277 * @param {Array} params associative array of parameters 278 * @extends KJUR.asn1.ASN1Object 279 * @since jsrsasign 4.7.0 asn1cades 1.0.0 280 * @description 281 * <pre> 282 * OtherHashAlgAndValue ::= SEQUENCE { 283 * hashAlgorithm AlgorithmIdentifier, 284 * hashValue OtherHashValue } 285 * OtherHashValue ::= OCTET STRING 286 * </pre> 287 */ 288 KJUR.asn1.cades.OtherHashAlgAndValue = function(params) { 289 var _KJUR = KJUR, 290 _KJUR_asn1 = _KJUR.asn1, 291 _DERSequence = _KJUR_asn1.DERSequence, 292 _DEROctetString = _KJUR_asn1.DEROctetString, 293 _KJUR_asn1_x509 = _KJUR_asn1.x509, 294 _AlgorithmIdentifier = _KJUR_asn1_x509.AlgorithmIdentifier, 295 _KJUR_asn1_cades = _KJUR_asn1.cades, 296 _OtherHashAlgAndValue = _KJUR_asn1_cades.OtherHashAlgAndValue; 297 298 _OtherHashAlgAndValue.superclass.constructor.call(this); 299 300 this.dAlg = null; 301 this.dHash = null; 302 303 this.getEncodedHex = function() { 304 var seq = new _DERSequence({array: [this.dAlg, this.dHash]}); 305 this.hTLV = seq.getEncodedHex(); 306 return this.hTLV; 307 }; 308 309 if (params !== undefined) { 310 if (typeof params.alg == "string" && 311 typeof params.hash == "string") { 312 this.dAlg = new _AlgorithmIdentifier({name: params.alg}); 313 this.dHash = new _DEROctetString({hex: params.hash}); 314 } 315 } 316 }; 317 YAHOO.lang.extend(KJUR.asn1.cades.OtherHashAlgAndValue, KJUR.asn1.ASN1Object); 318 319 /** 320 * class for RFC 5126 CAdES SignatureTimeStamp attribute 321 * @name KJUR.asn1.cades.SignatureTimeStamp 322 * @class class for RFC 5126 CAdES SignatureTimeStamp attribute 323 * @param {Array} params associative array of parameters 324 * @extends KJUR.asn1.cms.Attribute 325 * @since jsrsasign 4.7.0 asn1cades 1.0.0 326 * @description 327 * <pre> 328 * id-aa-signatureTimeStampToken OBJECT IDENTIFIER ::= 329 * 1.2.840.113549.1.9.16.2.14 330 * SignatureTimeStampToken ::= TimeStampToken 331 * </pre> 332 */ 333 KJUR.asn1.cades.SignatureTimeStamp = function(params) { 334 var _KJUR = KJUR, 335 _KJUR_asn1 = _KJUR.asn1, 336 _ASN1Object = _KJUR_asn1.ASN1Object, 337 _KJUR_asn1_x509 = _KJUR_asn1.x509, 338 _KJUR_asn1_cades = _KJUR_asn1.cades; 339 340 _KJUR_asn1_cades.SignatureTimeStamp.superclass.constructor.call(this); 341 this.attrTypeOid = "1.2.840.113549.1.9.16.2.14"; 342 this.tstHex = null; 343 344 if (params !== undefined) { 345 if (params.res !== undefined) { 346 if (typeof params.res == "string" && 347 params.res.match(/^[0-9A-Fa-f]+$/)) { 348 } else if (params.res instanceof _ASN1Object) { 349 } else { 350 throw "res param shall be ASN1Object or hex string"; 351 } 352 } 353 if (params.tst !== undefined) { 354 if (typeof params.tst == "string" && 355 params.tst.match(/^[0-9A-Fa-f]+$/)) { 356 var d = new _ASN1Object(); 357 this.tstHex = params.tst; 358 d.hTLV = this.tstHex; 359 d.getEncodedHex(); 360 this.valueList = [d]; 361 } else if (params.tst instanceof _ASN1Object) { 362 } else { 363 throw "tst param shall be ASN1Object or hex string"; 364 } 365 } 366 } 367 }; 368 YAHOO.lang.extend(KJUR.asn1.cades.SignatureTimeStamp, 369 KJUR.asn1.cms.Attribute); 370 371 /** 372 * class for RFC 5126 CAdES CompleteCertificateRefs attribute 373 * @name KJUR.asn1.cades.CompleteCertificateRefs 374 * @class class for RFC 5126 CAdES CompleteCertificateRefs attribute 375 * @param {Array} params associative array of parameters 376 * @extends KJUR.asn1.cms.Attribute 377 * @since jsrsasign 4.7.0 asn1cades 1.0.0 378 * @description 379 * <pre> 380 * id-aa-ets-certificateRefs OBJECT IDENTIFIER = 381 * 1.2.840.113549.1.9.16.2.21 382 * CompleteCertificateRefs ::= SEQUENCE OF OtherCertID 383 * </pre> 384 * @example 385 * o = new KJUR.asn1.cades.CompleteCertificateRefs([certPEM1,certPEM2]); 386 */ 387 KJUR.asn1.cades.CompleteCertificateRefs = function(params) { 388 var _KJUR = KJUR, 389 _KJUR_asn1 = _KJUR.asn1, 390 _KJUR_asn1_cades = _KJUR_asn1.cades; 391 392 _KJUR_asn1_cades.CompleteCertificateRefs.superclass.constructor.call(this); 393 this.attrTypeOid = "1.2.840.113549.1.9.16.2.21"; 394 395 /** 396 * set value by array 397 * @name setByArray 398 * @memberOf KJUR.asn1.cades.CompleteCertificateRefs 399 * @function 400 * @param {Array} a array of {@link KJUR.asn1.cades.OtherCertID} argument