Assinar XML :: Certificados Digitais

FileInputStream in = null;
        try {
            String keyStore = "C:\\log\\vbvsignstore";
            String certFile = "C:\\log\\MPIclient_certificate.der";
            String keyStoreType = "jks";
            String keyStorePass = "vbvsignpass";
            String keyAlias = "vbvsign";
            LogI.log(dbgLevel, "getSignatureKeyPair: 1");
            KeyStore tokenKeyStore = KeyStore.getInstance(keyStoreType);
            if (tokenKeyStore == null) {
                LogI.log(dbgLevel, "getSignatureKeyPair: Got no key store. Ensure that the provider is properly configured and installed.");
                System.exit(0);
            }
            in = new FileInputStream(keyStore);
            tokenKeyStore.load(in, keyStorePass.toCharArray());
            // this call binds the keystore to the first instance of the IAIKPkcs11
            // provider
            // if you want ot bind it to a different instance, you have to provide the
            // provider name as stream
            // see the other RSASigningDemo classes for examples
            Enumeration aliases = tokenKeyStore.aliases();



            // and we take the first signature (private) key for simplicity
            while (aliases.hasMoreElements()) {
                
                FileInputStream fis = new FileInputStream(certFile);
                LogI.log(dbgLevel, "getSignatureKeyPair: 2");
                BufferedInputStream bis = new BufferedInputStream(fis);
                CertificateFactory cf = CertificateFactory.getInstance("X.509");
                LogI.log(dbgLevel, "getSignatureKeyPair: ERRO1->" + cf.getType().toString());
                X509Certificate cert = null;
                while (bis.available() > 0) {
                    cert = (X509Certificate) cf.generateCertificate(bis);
                }
                keyAlias = aliases.nextElement().toString();
                LogI.log(dbgLevel, "getSignatureKeyPair: keyAlias:" + keyAlias);
                Key key = tokenKeyStore.getKey(keyAlias, keyStorePass.toCharArray());
                if (key instanceof RSAPrivateKey && keyAlias.equals("MPIclientCA")) {
                    //tokenKeyStore.setCertificateEntry(keyAlias, cert);
                    LogI.log(dbgLevel, "getSignatureKeyPair: Chave privada RSA");
                    java.security.cert.Certificate[] certificateChain = tokenKeyStore.getCertificateChain(keyAlias);
                    X509Certificate signerCertificate = (X509Certificate) certificateChain[0];
                    signatureKey_ = (PrivateKey) key;
                    signerCertificate_ = signerCertificate;
                    break;
                }
            }

            if (signatureKey_ == null) {
                LogI.log(dbgLevel, "getSignatureKeyPair: Found no signature key. Ensure that a valid card is inserted.");
                System.exit(0);
            }
        } catch (KeyStoreException ex) {
            ex.printStackTrace();
            LogI.log(dbgLevel, "getSignatureKeyPair: ERRO1->" + ex);
        } catch (NoSuchAlgorithmException ex) {
            ex.printStackTrace();
            LogI.log(dbgLevel, "getSignatureKeyPair: ERRO2->" + ex);
        } catch (UnrecoverableKeyException ex) {
            ex.printStackTrace();
            LogI.log(dbgLevel, "getSignatureKeyPair: ERRO3->" + ex);
        } catch (IOException ex) {
            ex.printStackTrace();
            LogI.log(dbgLevel, "getSignatureKeyPair: ERRO4->" + ex);
        } catch (CertificateException ex) {
            ex.printStackTrace();
            LogI.log(dbgLevel, "getSignatureKeyPair: ERRO5->" + ex);
        }
    }