使用Java管理XAdES签名的库

问题描述

我正在寻找一个允许创建和验证XAdES签名的Java库(格式越多越好:XAdES-BES，XAdES-C，XAdES-X-L等).

I'm looking for a Java library that allows the creation and verification of XAdES signatures (the more formats, the better: XAdES-BES, XAdES-C, XAdES-X-L, etc.).

我发现的最有趣的实现是:

The most interesting implementations I found are:

• 基于以下XML Java数字签名API(JSR 105)(Java SE 6中包含的API)；
• Apache Santuario( http://santuario.apache.org/)，仅提供有用的支持基本功能；
• XAdES4j( http://code.google.com/p/xades4j/，漂亮的演示文稿: http://prezi.com/06vyxbgohncv/xades4j-en/)，似乎很有趣，因为它使能以主要XAdES形式生成，验证和扩展签名:XAdES-BES，XAdES-EPES，XAdES-T和XAdES-C.而且，扩展形式通过丰富现有签名来提供支持.".但是，这是thesys的结果，并且仅由开发人员执行；
• eID数字签名服务( http://code.google.com/p/eid-dss/)，由比利时联邦ICT部门开发，并支持XAdES-XL格式.

• Java XML Digital Signature API (JSR 105) (= the one included in Java SE 6), which is based on the following one;
• Apache Santuario (http://santuario.apache.org/), which provides an useful support only for basic features;
• XAdES4j (http://code.google.com/p/xades4j/, nice presentation: http://prezi.com/06vyxbgohncv/xades4j-en/), which seems to be interesting, because it "enables producing, verifying and extending signatures in the main XAdES forms: XAdES-BES, XAdES-EPES, XAdES-T and XAdES-C. Also, extended forms are supported through the enrichment of an existing signature". However it's the result of a thesys and it's followed only by a developer;
• eID Digital Signature Service (http://code.google.com/p/eid-dss/), which is developed by the Belgium Federal ICT Department and supports the XAdES-X-L format.

您建议使用哪个或以哪个为基础?

Which one would you suggest to use or to build on?

推荐答案

我们最近完成了一个使用XAdES-BES签名的信封和信封形式的项目.我们选择XAdES4j项目是因为它看起来最完整，而XAdES是核心要求.

We have recently completed a project using XAdES-BES signatures in both enveloped and enveloping forms. We chose the XAdES4j project because it seemed the most complete, and XAdES was a core requirement.

Q& A部分中的支持有时会很慢，并且只有最明显的用例才能有据可查.也就是说，该库经过了良好的测试，设计精良且非常有用.

The support on the Q&A section is sometimes slow, and and only the most obvious use case is well documented. That said the library is well tested, excellently designed, and very useful.

我们花了几个星期来解决这个问题，现在我推荐它为平台.

We spent a couple of weeks getting our heads around it and I would now recommend it as a platform.

唯一的警告是(正如您所说)这是一个学术项目的成果，因此任何人都可以猜到它将来会获得多少支持.如果您选择购买它，然后考虑做出贡献，它可能会加快速度.

The only caveat is that (as you say) it is the production of an academic project, so how much support it will receive in the future is anyone's guess. If you pick it up and buy into it then consider contributing, and it might pick up a bit of speed.

这篇关于使用Java管理XAdES签名的库的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持！