-
Notifications
You must be signed in to change notification settings - Fork 133
Signed Audit Design
Endi S. Dewata edited this page Jan 4, 2023
·
2 revisions
The signature is initialized in LogFile.setupSigning()
:
CryptoManager cm = CryptoManager.getInstance(); X509Certificate cert = cm.findCertByNickname(nickname); PrivateKey signingKey = cm.findPrivKeyByCert(cert); String signingAlgorithm; if (signingKey instanceof RSAPrivateKey) { signingAlgorithm = "SHA-256/RSA"; } else if (signingKey instanceof DSAPrivateKey) { signingAlgorithm = "SHA-256/DSA"; } Signature signature = Signature.getInstance(signingAlgorithm, "Mozilla-JSS"); signature.initSign(signingKey); String logEntry = getLastSignature(); if (lastSignature != null) { signature.update(logEntry.getBytes("UTF-8")); signature.update(LINE_SEP_BYTE); }
The signature is updated in LogFile.doLog()
:
signature.update(logEntry.getBytes("UTF-8")); signature.update(LINE_SEP_BYTE);
The signature is generated in LogFile.pushSignature()
:
bytes = signature.sign(); signature.initSign(signingKey); ... store base-64-encoded bytes ...
Tip
|
To find a page in the Wiki, enter the keywords in search field, press Enter, then click Wikis. |