Java WSO2 ESB如何对自定义中介的消息进行签名

你好！ 我尝试用java在自定义中介中对XML进行签名，并在使用算法签名时使用政府SDK，它运行良好

但当我尝试使用算法签名时，我遇到了一个错误：

org.apache.xml.security.signature.XMLSignatureException: The requested algorithm http://www.w3.org/2001/04/xmldsig-more#gost34310-gost34311 does not exist. Original Message was: null
Original Exception was java.lang.NullPointerException
        at org.apache.xml.security.algorithms.SignatureAlgorithm.getSignatureAlgorithmSpi(SignatureAlgorithm.java:160)
        at org.apache.xml.security.algorithms.SignatureAlgorithm.<init>(SignatureAlgorithm.java:73)
        at org.apache.xml.security.signature.SignedInfo.<init>(SignedInfo.java:118)
        at org.apache.xml.security.signature.XMLSignature.<init>(XMLSignature.java:256)
        at org.apache.xml.security.signature.XMLSignature.<init>(XMLSignature.java:185)
        at kz.EsbGcvp.SignGcvp.SignXML(SignGcvp.java:113)

---

也许对某些人有用。

---

因为这段代码是作为独立的可运行JAR文件工作的，所以我提取了远程可运行JAR文件的逻辑，并将其作为添加工具添加到WSO2 ESB中，所以它工作得很好。可能会对WSO2 ESB的性能产生不良影响，但是我在使用Java和ESB方面没有丰富的经验。

也许它对某些人有用。 因为这段代码是作为独立的可运行JAR文件工作的，所以我提取了远程可运行JAR文件的逻辑，并将其作为添加工具添加到WSO2 ESB中，所以它工作得很好。可能会对WSO2 ESB的性能产生不良影响，但是我没有使用Java和ESB的丰富经验

private static String SignXML(String xmlDoc, String keyPath, String keyPass) throws TransformerFactoryConfigurationError, Exception
{

    KalkanProvider provider = new KalkanProvider();
    Security.addProvider(provider);
    KncaXS.loadXMLSecurity();       
    KeyStore ks = KeyStore.getInstance("PKCS12", provider.getName());
    System.getProperty("user.dir");
    ks.load(new FileInputStream(keyPath), keyPass.toCharArray());
    String alias = ks.aliases().nextElement();
    PrivateKey key = (PrivateKey) ks.getKey(alias, keyPass.toCharArray());
    X509Certificate certificate = (X509Certificate) ks.getCertificate(alias);
    String signMethod = null;
    String digestMethod = null;
    String sigAlgOid = certificate.getSigAlgOID();
    if (sigAlgOid.equals(PKCSObjectIdentifiers.sha1WithRSAEncryption.getId())) {
        signMethod =  Constants.MoreAlgorithmsSpecNS + "rsa-sha1";
        digestMethod = Constants.MoreAlgorithmsSpecNS + "sha1";
    } else if (sigAlgOid.equals(PKCSObjectIdentifiers.sha256WithRSAEncryption.getId())) {
        signMethod = Constants.MoreAlgorithmsSpecNS + "rsa-sha256";
        digestMethod = XMLCipherParameters.SHA256;
    } else {

        signMethod = Constants.MoreAlgorithmsSpecNS + "gost34310-gost34311";
        digestMethod = Constants.MoreAlgorithmsSpecNS + "gost34311";            
    }

    DocumentBuilderFactory dbf = DocumentBuilderFactory.newInstance();
    dbf.setNamespaceAware(true);
    DocumentBuilder documentBuilder = dbf.newDocumentBuilder();
    org.w3c.dom.Document doc = (org.w3c.dom.Document) documentBuilder.parse(new ByteArrayInputStream(xmlDoc.getBytes("UTF-8")));

    StringWriter os = new StringWriter();
    XMLSignature signature;
    try {

        signature = new XMLSignature(doc, "", signMethod);                      
        if (doc.getFirstChild() != null) {
            doc.getFirstChild().appendChild(signature.getElement());
            Transforms transforms = new Transforms(doc);
            transforms.addTransform(Transforms.TRANSFORM_ENVELOPED_SIGNATURE);          
            transforms.addTransform(XMLCipherParameters.N14C_XML_CMMNTS);
            signature.addDocument("", transforms, digestMethod);
            signature.addKeyInfo(certificate);
            signature.addKeyInfo(certificate.getPublicKey());
            signature.sign(key);
            TransformerFactory tf = TransformerFactory.newInstance();
            Transformer trans = tf.newTransformer();
            trans.transform(new DOMSource(doc), new StreamResult(os));
            os.close();
            return os.toString().replaceAll("\\<\\?xml(.+?)\\?\\>", "").trim();
        }
        else
        {
            throw new NullPointerException("doc.getFirstChild() value is null.");
        }
    } catch (Exception e) {

        e.printStackTrace();
        throw e;
    }
}