hash签名 java,使用Java和iText对PDF哈希签名

I have an application that generates a PDF, and that needs to be signed.

We have not the certificates to sign the document, because they're in a HSM, and the only way we could make use of the certificates is using a webservice.

PdfReader reader = new PdfReader(src);

reader.setAppendable(true);

ByteArrayOutputStream baos = new ByteArrayOutputStream();

FileOutputStream fout = new FileOutputStream(dest);

PdfStamper stamper = PdfStamper.createSignature(reader, fout, '\0');

PdfSignatureAppearance appearance = stamper.getSignatureAppearance();

appearance.setReason("Test");

appearance.setLocation("footer");

appearance.setVisibleSignature(new Rectangle(100, 100, 200, 200), 1, null);

appearance.setCertificate(certChain[0]);

PdfSignature dic = new PdfSignature(PdfName.ADOBE_PPKLITE, PdfName.ADBE_PKCS7_DETACHED);

dic.setReason(appearance.getReason());

dic.setLocation(appearance.getLocation());

dic.setContact(appearance.getContact());

dic.setDate(new PdfDate(appearance.getSignDate()));

appearance.setCryptoDictionary(dic);

HashMap exc = new HashMap();

exc.put(PdfName.CONTENTS, new Integer(8192 * 2 + 2));

appearance.preClose(exc);

ExternalDigest externalDigest = new ExternalDigest()

{

public MessageDigest getMessageDigest(String hashAlgorithm) throws GeneralSecurityException

{

return DigestAlgorithms.getMessageDigest(hashAlgorithm, null);

}

};

PdfPKCS7 sgn = new PdfPKCS7(null, certChain, "SHA256", null, externalDigest, false);

InputStream data = appearance.getRangeStream();

byte[] hash = DigestAlgorithms.digest(data, externalDigest.getMessageDigest("SHA256"));

Calendar cal = Calendar.getInstance();

byte[] sh = sgn.getAuthenticatedAttributeBytes