javax.xml.crypto.URIReferenceException:无法解析带有ID对象的元素

时间:2019-09-10 15:43:29

标签: java rsa digital-signature

我想通过

在XML文件上进行数字签名
  1. 使用SHA-256进行单向哈希处理

  2. 规范化方法算法=“ http://www.w3.org/2001/10/xmlexcc14n#”

  3. RSA数字签名
  4. 2048位私钥
  5. W3C建议XML签名语法
  6. 封装类型签名。

我遵循提到的here签名API!

但是我收到以下错误

com.sun.org.apache.xml.internal.security.utils.resolver.ResourceResolverException:无法解析具有ID对象的元素

我已经尝试了Element.setIdAttributeNode作为“ ID”以及setIdAttributeNS,但没有帮助

下面一行是引发错误的地方

DocumentBuilderFactory dbFactory = DocumentBuilderFactory.newInstance();
dbFactory.setNamespaceAware ( false );  
Document doc = dbFactory.newDocumentBuilder().parse(new FileInputStream(filePath));

String providerName = System.getProperty("jsr105Provider", "org.jcp.xml.dsig.internal.dom.XMLDSigRI");

XMLSignatureFactory fac = XMLSignatureFactory.getInstance("DOM", (Provider) Class.forName(providerName).newInstance());

// Next, create a Reference to a same-document URI that is an Object element and specify the SHA256 digest algorithm
DigestMethod digestMethod = fac.newDigestMethod(DigestMethod.SHA256, null);
Reference reference = fac.newReference("#CBC",digestMethod);
SignatureMethod signatureMethod = fac.newSignatureMethod("http://www.w3.org/2001/04/xmldsig-more#rsa-sha256", null);
CanonicalizationMethod canonicalizationMethod = fac.newCanonicalizationMethod(CanonicalizationMethod.INCLUSIVE_WITH_COMMENTS, (C14NMethodParameterSpec) null);

// Create the SignedInfo
SignedInfo si = fac.newSignedInfo(canonicalizationMethod, signatureMethod, Collections.singletonList(reference));

// Create a RSA KeyPair
KeyPairGenerator kpg = KeyPairGenerator.getInstance("RSA");
kpg.initialize(2048);
KeyPair kp = kpg.generateKeyPair();

// Create a KeyValue containing the RSA PublicKey that was generated
KeyInfoFactory kif = fac.getKeyInfoFactory();
KeyValue kv = kif.newKeyValue(kp.getPublic());

// Create a KeyInfo and add the KeyValue to it
KeyInfo ki = kif.newKeyInfo(Collections.singletonList(kv));
DOMSignContext dsc = new DOMSignContext(kp.getPrivate(), doc);
//dsc.setDefaultNamespacePrefix("dsig");

// Create the XMLSignature and sign it
XMLSignature signature = fac.newXMLSignature(si, ki,Collections.singletonList(obj), null, null);
signature.sign(dsc);

TransformerFactory tf = TransformerFactory.newInstance();
Transformer trans = tf.newTransformer();

错误发生在下面的行

signature.sign(dsc)

1 个答案:

答案 0 :(得分:0)

我添加了以下两行,它解决了这个问题。

XMLStructure content = new DOMStructure(doc.getDocumentElement());
XMLObject obj = fac.newXMLObject(Collections.singletonList(content), "CBC", null, null);