SecurityConstants.java

  1. /*
  2.  * GovWay - A customizable API Gateway 
  3.  * https://govway.org
  4.  * 
  5.  * Copyright (c) 2005-2025 Link.it srl (https://link.it). 
  6.  * 
  7.  * This program is free software: you can redistribute it and/or modify
  8.  * it under the terms of the GNU General Public License version 3, as published by
  9.  * the Free Software Foundation.
  10.  *
  11.  * This program is distributed in the hope that it will be useful,
  12.  * but WITHOUT ANY WARRANTY; without even the implied warranty of
  13.  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  14.  * GNU General Public License for more details.
  15.  *
  16.  * You should have received a copy of the GNU General Public License
  17.  * along with this program.  If not, see <http://www.gnu.org/licenses/>.
  18.  *
  19.  */

  21. package org.openspcoop2.security.message.constants;

  23. import java.util.ArrayList;
  24. import java.util.List;
  25. import java.util.Map;

  27. import javax.xml.namespace.QName;

  29. import org.apache.cxf.rs.security.jose.common.JoseConstants;
  30. import org.apache.cxf.rt.security.rs.RSSecurityConstants;
  31. import org.apache.wss4j.common.ConfigurationConstants;
  32. import org.apache.wss4j.common.WSS4JConstants;
  33. import org.apache.wss4j.dom.handler.WSHandlerConstants;
  34. import org.openspcoop2.core.constants.CostantiDB;
  35. import org.openspcoop2.core.constants.CostantiLabel;
  36. import org.openspcoop2.security.keystore.MerlinProvider;
  37. import org.openspcoop2.utils.certificate.hsm.HSMUtils;
  38. import org.openspcoop2.utils.digest.Constants;

  40. /**
  41.  * WSSConstants
  42.  *
  43.  * @author Andrea Poli (apoli@link.it)
  44.  * @author Tommaso Burlon (tommaso.burlon@link.it)
  45.  * @author $Author$
  46.  * @version $Rev$, $Date$
  47.  */
  48. public class SecurityConstants {
  49.     
  50.     private SecurityConstants() {}

  52.     public static final String ACTION = ConfigurationConstants.ACTION;
  53.         
  54.     public static final String TIPO_SECURITY_ENGINE_SEPARATOR = " ";
  55.     public static final String TIPO_SECURITY_ACTION_SEPARATOR = ",";
  56.     public static String convertActionToString(Map<String, Object> flow){
  57.         if(flow!=null &&
  58.             flow.containsKey(ACTION)){
  59.                 
  60.             String engine = SECURITY_ENGINE_WSS4J;
  61.             if(flow.containsKey(SECURITY_ENGINE)){
  62.                 Object o = flow.get(SECURITY_ENGINE);
  63.                 if(o instanceof String){
  64.                     engine = (String) o;
  65.                 }
  66.             }
  67.             
  68.             Object o = flow.get(ACTION);
  69.             if(o instanceof String){
  70.                 String actions = (String) o;
  71.                 return getActionValue(actions, engine);
  72.             }
  73.         }
  74.         return null;
  75.     }
  76.     private static String getActionValue(String actions, String engine) {
  77.         actions = actions.trim();
  78.         if(actions.contains(" ")){
  79.             String [] tmp = actions.split(" ");
  80.             StringBuilder bf = new StringBuilder();
  81.             bf.append(engine);
  82.             bf.append(TIPO_SECURITY_ENGINE_SEPARATOR);
  83.             for (int i = 0; i < tmp.length; i++) {
  84.                 if(tmp[i]!=null){
  85.                     if(i>0){
  86.                         bf.append(TIPO_SECURITY_ACTION_SEPARATOR);
  87.                     }
  88.                     bf.append(tmp[i].trim());
  89.                 }
  90.             }
  91.             return bf.toString();
  92.         }
  93.         else{
  94.             return engine + TIPO_SECURITY_ENGINE_SEPARATOR + actions; // una sola azione presente
  95.         }
  96.     }
  97.     
  98.     public static final String SECURITY_ENGINE = "securityEngine";
  99.     public static final String SECURITY_ENGINE_WSS4J = "wss4j";
  100.     public static final String SECURITY_ENGINE_SOAPBOX = "soapbox";
  101.     public static final String SECURITY_ENGINE_DSS = "dss";
  102.     public static final String SECURITY_ENGINE_JOSE = "jose";
  103.     public static final String SECURITY_ENGINE_XML = "xml";
  104.     
  105.     public static final String NORMALIZE_TO_SAAJ_IMPL = "normalizeToSaajImpl";
  106.     
  107.     public static final String WSS_HEADER_ELEMENT = "Security";
  108.     public static final String WSS_HEADER_ELEMENT_NAMESPACE = "http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd";
  109.     public static final String WSS_HEADER_UTILITY_NAMESPACE = "http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd";
  110.     public static final QName QNAME_WSS_ELEMENT_SECURITY = new QName(WSS_HEADER_ELEMENT_NAMESPACE,WSS_HEADER_ELEMENT);
  111.     public static final String WSS_HEADER_ATTRIBUTE_REFERENCE_ID_WSSECURITY = "Id";
  112.     public static final String WSS_HEADER_DS_NAMESPACE = Constants.DS_NAMESPACE;
  113.     public static final String WSS_HEADER_DS_REFERENCE_ELEMENT = Constants.DS_REFERENCE_ELEMENT;
  114.     public static final String WSS_HEADER_DS_REFERENCE_ATTRIBUTE_URI = Constants.DS_REFERENCE_ATTRIBUTE_URI;
  115.     public static final String WSS_HEADER_DS_REFERENCE_DIGEST_VALUE_ELEMENT = Constants.DS_REFERENCE_DIGEST_VALUE_ELEMENT;
  116.     
  117.     public static final String ACTOR = ConfigurationConstants.ACTOR;
  118.     
  119.     public static final String MUST_UNDERSTAND = ConfigurationConstants.MUST_UNDERSTAND;
  120.     
  121.     public static final boolean SECURITY_CLIENT = true;
  122.     public static final boolean SECURITY_SERVER = false;
  123.     
  124.     public static final String USER = ConfigurationConstants.USER;
  125.     
  126.     public static final String CID_ATTACH_WSS4J = "cid:Attachments";
  127.     public static final String NAMESPACE_ATTACH = "Attach";
  128.     public static final String PART_CONTENT = "Content";
  129.     public static final String PART_COMPLETE = "Complete";
  130.     public static final String PART_ELEMENT = "Element";
  131.     public static final String ATTACHMENT_INDEX_ALL =  "*";
  132.     public static final String SOAP_NAMESPACE_TEMPLATE =  "SOAP_TEMPLATE_NS";
  133.     
  134.     public static final String SUFFIX_SSL = ".ssl";
  135.     public static final String SUFFIX_ALGORITHM = ".algorithm";
  136.     public static final String SUFFIX_PUBLIC_KEY = ".public";
  137.     public static final String SUFFIX_CRL = ".crl";
  138.     public static final String SUFFIX_OCSP = ".ocsp";
  139.     public static final String SUFFIX_BYOK = MerlinProvider.SUFFIX_BYOK;
  140.     
  141.     public static final String MODE_JSON = "json";
  142.     public static final String MODE_COMPACT = "compact";
  143.     
  144.     public static final String MULTI_USER_KEYWORD_PORTA_DOMINIO_FRUITORE = "#MultiPropUsePddFruitoreAsAlias#";
  145.     public static final String MULTI_USER_KEYWORD_PORTA_DOMINIO_EROGATORE = "#MultiPropUsePddErogatoreAsAlias#";
  146.     public static final String MULTI_USER_KEYWORD_IDENTIFICATIVO_PORTA_FRUITORE = "#MultiPropUseIdentificativoPortaFruitoreAsAlias#";
  147.     public static final String MULTI_USER_KEYWORD_IDENTIFICATIVO_PORTA_EROGATORE = "#MultiPropUseIdentificativoPortaErogatoreAsAlias#";
  148.     public static final String MULTI_USER_KEYWORD_FRUITORE = "#MultiPropUseFruitoreAsAlias#";
  149.     public static final String MULTI_USER_KEYWORD_EROGATORE = "#MultiPropUseErogatoreAsAlias#";
  150.     public static final String MULTI_USER_KEYWORD_FRUITORE_EROGATORE = "#MultiPropUseFruitoreErogatoreAsAlias#";
  151.     
  152.     public static final String PASSWORD_CALLBACK_CLASS = ConfigurationConstants.PW_CALLBACK_CLASS;
  153.     public static final String PASSWORD_CALLBACK_REF = ConfigurationConstants.PW_CALLBACK_REF;
  154.     
  155.     public static final String SYMMETRIC_KEY = "symmetricKey";
  156.     public static final String SYMMETRIC_KEY_TRUE = "true";
  157.     public static final String SYMMETRIC_KEY_FALSE = "false";
  158.     
  159.     public static final String ENABLE_REVOCATION = ConfigurationConstants.ENABLE_REVOCATION;
  160.     
  161.     public static final String ENCRYPTION_ACTION = ConfigurationConstants.ENCRYPTION;
  162.     @SuppressWarnings("deprecation")
  163.     public static final String ENCRYPT_ACTION_OLD = ConfigurationConstants.ENCRYPT; // modificato costante in wss4j 2.3.x
  164.     public static final String DECRYPTION_ACTION = "Decryption";  // modificato per adeguamento costante rispetto a wss4j 2.3.x
  165.     public static final String DECRYPT_ACTION_OLD = "Decrypt";  // modificato per adeguamento costante rispetto a wss4j 2.3.x
  166.     public static final String ENCRYPTION_USER = ConfigurationConstants.ENCRYPTION_USER;
  167.     public static final String ENCRYPTION_PASSWORD = "encryptionPassword";
  168.     public static final String ENCRYPTION_SOAP_FAULT = "encryptionSOAPFault";
  169.     public static final String ENCRYPTION_PROBLEM_DETAILS = "encryptionProblemDetails";
  170.     public static final String ENCRYPTION_PARTS = ConfigurationConstants.ENCRYPTION_PARTS;
  171.     public static final String ENCRYPTION_PARTS_VERIFY = "encryptionPartsVerify";
  172.     /** ENCRYPTION_ATTACHMENTS_PARTS: {Content/Complete}{indice} 
  173.     // utilizzo: {Content}{Attach}{*}
  174.     // o sintassi wss4j {}cid:Attachments
  175.     // Il valore * o '' puo' essere usato come indice per indicare qualsiasi, altrimenti l'indice indica la posizione dell'attachment*/
  176.     public static final String ENCRYPTION_NAMESPACE_ATTACH = NAMESPACE_ATTACH;
  177.     public static final String ENCRYPTION_PART_CONTENT = PART_CONTENT;
  178.     public static final String ENCRYPTION_PART_COMPLETE = PART_COMPLETE;
  179.     public static final String ENCRYPTION_PART_ELEMENT = PART_ELEMENT;
  180.     public static final String ENCRYPTION_JWK_SET_FILE = "encryptionJWKSetFile";
  181.     public static final String ENCRYPTION_PROPERTY_REF_ID = ConfigurationConstants.ENC_PROP_REF_ID;
  182.     public static final String ENCRYPTION_PROPERTY_FILE = ConfigurationConstants.ENC_PROP_FILE;
  183.     public static final String ENCRYPTION_TRUSTSTORE_PROPERTY_FILE = "encryptionTrustStorePropFile";
  184.     public static final String ENCRYPTION_TRUSTSTORE_PROPERTY_REF_ID= "encryptionTrustStorePropRefId";
  185.     public static final String ENCRYPTION_MULTI_PROPERTY_FILE = "encryptionMultiPropFile";
  186.     public static final String ENCRYPTION_SYMMETRIC_KEY_VALUE = "encryptionSymmetricKeyValue";
  187.     public static final String ENCRYPTION_SYMMETRIC = "encryptionSymmetricKey";
  188.     public static final String ENCRYPTION_SYMMETRIC_WRAPPED = "encryptionSymmetricKeyWrapped";
  189.     public static final String ENCRYPTION_SYMMETRIC_WRAPPED_TRUE = "true";
  190.     public static final String ENCRYPTION_SYMMETRIC_WRAPPED_FALSE = "false";
  191.     public static final String ENCRYPTION_KEY_SIZE = "encryptionKeySize";
  192.     public static final String ENCRYPTION_KEY_TRANSPORT_ALGORITHM = ConfigurationConstants.ENC_KEY_TRANSPORT;
  193.     public static final String ENCRYPTION_SYMMETRIC_ALGORITHM = ConfigurationConstants.ENC_SYM_ALGO;
  194.     public static final String ENCRYPTION_DIGEST_ALGORITHM = ConfigurationConstants.ENC_DIGEST_ALGO;
  195.     public static final String ENCRYPTION_C14N_ALGORITHM = "encryptionC14nAlgorithm";
  196.     public static final String ENCRYPTION_KEY_ALGORITHM = "encryptionKeyAlgorithm";
  197.     public static final String ENCRYPTION_CONTENT_ALGORITHM = "encryptionContentAlgorithm";
  198.     public static final String ENCRYPTION_ALGORITHM = "encryptionAlgorithm";
  199.     public static final String ENCRYPTION_KEY_IDENTIFIER = ConfigurationConstants.ENC_KEY_ID;
  200.     public static final String ENCRYPTION_MODE = "encryptionMode";
  201.     public static final String ENCRYPTION_MODE_JSON = MODE_JSON;
  202.     public static final String ENCRYPTION_MODE_COMPACT = MODE_COMPACT;
  203.     public static final String ENCRYPTION_DEFLATE = "deflate";
  204.     public static final String ENCRYPTION_DEFLATE_TRUE = "true";
  205.     public static final String ENCRYPTION_DEFLATE_FALSE = "false";
  206.     public static final String DECRYPTION_JWK_SET_FILE = "decryptionJWKSetFile";
  207.     public static final String DECRYPTION_PROPERTY_FILE = ConfigurationConstants.DEC_PROP_FILE;
  208.     public static final String DECRYPTION_PROPERTY_REF_ID = ConfigurationConstants.DEC_PROP_REF_ID;
  209.     public static final String DECRYPTION_TRUSTSTORE_PROPERTY_FILE = "decryptionTrustStorePropFile";
  210.     public static final String DECRYPTION_TRUSTSTORE_PROPERTY_REF_ID = "decryptionTrustStorePropRefId";
  211.     public static final String DECRYPTION_MULTI_PROPERTY_FILE = "decryptionMultiPropFile";
  212.     public static final String DECRYPTION_SYMMETRIC_KEY_VALUE = "decryptionSymmetricKeyValue";
  213.     public static final String DECRYPTION_SYMMETRIC_ALGORITHM = "decryptionSymAlgorithm";
  214.     public static final String DECRYPTION_USER = "decryptionUser";
  215.     public static final String DECRYPTION_PASSWORD = "decryptionPassword";
  216.     public static final String DECRYPTION_SYMMETRIC = "decryptionSymmetricKey";
  217.     public static final String DECRYPTION_SYMMETRIC_WRAPPED = "decryptionSymmetricKeyWrapped";
  218.     public static final String DECRYPTION_SYMMETRIC_WRAPPED_TRUE = "true";
  219.     public static final String DECRYPTION_SYMMETRIC_WRAPPED_FALSE = "false";
  220.     public static final String DECRYPTION_MODE = "decryptionMode";
  221.     public static final String DECRYPTION_MODE_JSON = MODE_JSON;
  222.     public static final String DECRYPTION_MODE_COMPACT = MODE_COMPACT;
  223.     
  224.     
  225.     public static final String SIGNATURE_ACTION = ConfigurationConstants.SIGNATURE;
  226.     public static final String SIGNATURE_USER = ConfigurationConstants.SIGNATURE_USER;
  227.     public static final String SIGNATURE_PASSWORD = "signaturePassword";
  228.     public static final String USE_REQ_SIG_CERT = ConfigurationConstants.USE_REQ_SIG_CERT;
  229.     public static final String SIGNATURE_SOAP_FAULT = "signatureSOAPFault";
  230.     public static final String SIGNATURE_PROBLEM_DETAILS = "signatureProblemDetails";
  231.     public static final String SIGNATURE_PARTS = ConfigurationConstants.SIGNATURE_PARTS;
  232.     public static final String SIGNATURE_PARTS_VERIFY = "signaturePartsVerify";
  233.     /** SIGNATURE_ATTACHMENTS_PARTS: {Content/Complete}{indice} 
  234.     // utilizzo: {Content}{Attach}{*}
  235.     // o sintassi wss4j {}cid:Attachments
  236.     // Il valore * o '' puo' essere usato come indice per indicare qualsiasi, altrimenti l'indice indica la posizione dell'attachment*/
  237.     public static final String SIGNATURE_NAMESPACE_ATTACH = NAMESPACE_ATTACH;
  238.     public static final String SIGNATURE_PART_CONTENT = PART_CONTENT;
  239.     public static final String SIGNATURE_PART_COMPLETE = PART_COMPLETE;
  240.     public static final String SIGNATURE_PART_ELEMENT = PART_ELEMENT;
  241.     public static final String SIGNATURE_JWK_SET_FILE = "signatureJWKSetFile";
  242.     public static final String SIGNATURE_PROPERTY_REF_ID = ConfigurationConstants.SIG_PROP_REF_ID;
  243.     public static final String SIGNATURE_PROPERTY_FILE = ConfigurationConstants.SIG_PROP_FILE;
  244.     public static final String SIGNATURE_TRUSTSTORE_PROPERTY_FILE = "signatureTrustStorePropFile";
  245.     public static final String SIGNATURE_TRUSTSTORE_PROPERTY_REF_ID = "signatureTrustStorePropRefId";
  246.     public static final String SIGNATURE_MULTI_PROPERTY_FILE = "signatureMultiPropFile";
  247.     public static final String SIGNATURE_C14N_ALGORITHM = "signatureC14nAlgorithm";
  248.     public static final String SIGNATURE_DIGEST_ALGORITHM = ConfigurationConstants.SIG_DIGEST_ALGO;
  249.     public static final String SIGNATURE_ALGORITHM = ConfigurationConstants.SIG_ALGO;
  250.     public static final String SIGNATURE_KEY_IDENTIFIER = ConfigurationConstants.SIG_KEY_ID;
  251.     public static final String SIGNATURE_VALIDITY_CHECK = "signatureValidityCheck";
  252.     public static final String SIGNATURE_CRL = "signatureCRL";
  253.     public static final String SIGNATURE_CRL_VALIDATE_ONLY_END_ENTITY = "signatureCRLValidateOnlyEndEntity";
  254.     public static final String SIGNATURE_OCSP = "signatureOCSP";
  255.     public static final String SIGNATURE_VERIFICATION_PROPERTY_REF_ID = ConfigurationConstants.SIG_VER_PROP_REF_ID;
  256.     public static final String SIGNATURE_VERIFICATION_PROPERTY_FILE = ConfigurationConstants.SIG_VER_PROP_FILE;
  257.     public static final String SIGNATURE_MODE = "signatureMode";
  258.     public static final String SIGNATURE_MODE_JSON = MODE_JSON;
  259.     public static final String SIGNATURE_MODE_COMPACT = MODE_COMPACT;
  260.     public static final String SIGNATURE_PAYLOAD_ENCODING = "signaturePayloadEncoding";
  261.     public static final String SIGNATURE_PAYLOAD_ENCODING_TRUE = "true";
  262.     public static final String SIGNATURE_PAYLOAD_ENCODING_FALSE = "false";
  263.     public static final String SIGNATURE_DETACHED = "signatureDetached";
  264.     public static final String SIGNATURE_DETACHED_TRUE = "true";
  265.     public static final String SIGNATURE_DETACHED_FALSE = "false";
  266.     public static final String SIGNATURE_DETACHED_BASE64 = "signatureDetachedBase64";
  267.     public static final String SIGNATURE_DETACHED_BASE64_TRUE = "true";
  268.     public static final String SIGNATURE_DETACHED_BASE64_FALSE = "false";
  269.     public static final boolean SIGNATURE_DETACHED_BASE64_DEFAULT = Boolean.parseBoolean(SIGNATURE_DETACHED_BASE64_TRUE);
  270.     public static final String SIGNATURE_DETACHED_HEADER = "signatureDetachedHeader";
  271.     public static final String SIGNATURE_DETACHED_PROPERTY_URL = "signatureDetachedPropertyURL";
  272.     public static final String SIGNATURE_XML_KEY_INFO = "keyInfo";
  273.     public static final String SIGNATURE_XML_KEY_INFO_ALIAS = "keyInfoAlias";
  274.     public static final String SIGNATURE_XML_KEY_INFO_X509 = "x509";
  275.     public static final String SIGNATURE_XML_KEY_INFO_RSA = "RSA";
  276.     
  277.     public static final String USERNAME_TOKEN_ACTION = ConfigurationConstants.USERNAME_TOKEN;
  278.     public static final String USERNAME_TOKEN_NO_PASSWORD_ACTION = ConfigurationConstants.USERNAME_TOKEN_NO_PASSWORD;
  279.     public static final String USERNAME_TOKEN_SIGNATURE_ACTION = ConfigurationConstants.USERNAME_TOKEN_SIGNATURE;
  280.     public static final String USERNAME_TOKEN_SOAP_FAULT = "UsernameTokenSOAPFault";
  281.     public static final String USERNAME_TOKEN_PROBLEM_DETAILS = "UsernameTokenProblemDetails"; 
  282.     
  283.     public static final String SAML_TOKEN_SIGNED_ACTION = ConfigurationConstants.SAML_TOKEN_SIGNED;
  284.     public static final String SAML_TOKEN_UNSIGNED_ACTION = ConfigurationConstants.SAML_TOKEN_UNSIGNED;
  285.     public static final String SAML_TOKEN_SOAP_FAULT = "SAMLTokenSOAPFault";
  286.     public static final String SAML_TOKEN_PROBLEM_DETAILS = "SAMLTokenProblemDetails"; 
  287.     
  288.     public static final String JOSE_KEYSTORE = RSSecurityConstants.RSSEC_KEY_STORE;
  289.     public static final String JOSE_KEYSTORE_JWKSET = JoseConstants.RSSEC_KEY_STORE_JWKSET;
  290.     public static final String JOSE_KEYSTORE_TYPE = RSSecurityConstants.RSSEC_KEY_STORE_TYPE;
  291.     public static final String JOSE_KEYSTORE_FILE = RSSecurityConstants.RSSEC_KEY_STORE_FILE;
  292.     public static final String JOSE_KEYSTORE_KEY_ALGORITHM = RSSecurityConstants.RSSEC_KEY_STORE_FILE+SUFFIX_ALGORITHM;
  293.     public static final String JOSE_KEYSTORE_PUBLIC_KEY = RSSecurityConstants.RSSEC_KEY_STORE_FILE+SUFFIX_PUBLIC_KEY;
  294.     public static final String JOSE_KEYSTORE_PSWD = RSSecurityConstants.RSSEC_KEY_STORE_PSWD;
  295.     public static final String JOSE_KEYSTORE_KEY_ALIAS = RSSecurityConstants.RSSEC_KEY_STORE_ALIAS;
  296.     public static final String JOSE_KEYSTORE_KEY_PSWD = RSSecurityConstants.RSSEC_KEY_PSWD;
  297.     public static final String JOSE_KEYSTORE_CRL = RSSecurityConstants.RSSEC_KEY_STORE+SUFFIX_CRL;
  298.     public static final String JOSE_KEYSTORE_OCSP_POLICY = RSSecurityConstants.RSSEC_KEY_STORE+SUFFIX_OCSP;
  299.     public static final String JOSE_KEYSTORE_BYOK_POLICY = RSSecurityConstants.RSSEC_KEY_STORE_FILE+SecurityConstants.SUFFIX_BYOK;
  300.     
  301.     public static final String JOSE_TRUSTSTORE_SSL_TYPE = RSSecurityConstants.RSSEC_KEY_STORE_TYPE+SUFFIX_SSL;
  302.     public static final String JOSE_TRUSTSTORE_SSL_FILE = RSSecurityConstants.RSSEC_KEY_STORE_FILE+SUFFIX_SSL;
  303.     public static final String JOSE_TRUSTSTORE_SSL_PSWD = RSSecurityConstants.RSSEC_KEY_STORE_PSWD+SUFFIX_SSL;
  304.     public static final String JOSE_TRUSTSTORE_SSL_CRL =  RSSecurityConstants.RSSEC_KEY_STORE+SUFFIX_SSL+SUFFIX_CRL;
  305.     public static final String JOSE_TRUSTSTORE_SSL_OCSP =  RSSecurityConstants.RSSEC_KEY_STORE+SUFFIX_SSL+SUFFIX_OCSP;
  306.     public static final String JOSE_TRUSTSTORE_SSL_TRUSTALL = RSSecurityConstants.RSSEC_KEY_STORE+".trustAll"+SUFFIX_SSL;
  307.     public static final String JOSE_TRUSTSTORE_SSL_CONNECTION_TIMEOUT = RSSecurityConstants.RSSEC_KEY_STORE+SUFFIX_SSL+".connectionTimeout";
  308.     public static final String JOSE_TRUSTSTORE_SSL_READ_TIMEOUT = RSSecurityConstants.RSSEC_KEY_STORE+SUFFIX_SSL+".readTimeout";
  309.     public static final String JOSE_TRUSTSTORE_SSL_HOSTNAME_VERIFIER = RSSecurityConstants.RSSEC_KEY_STORE+SUFFIX_SSL+".hostNameVerifier";
  310.     
  311.     private static final String JOSE_FORWARD_PROXY_PREFIX = "rs.security.forwardProxy.";
  312.     public static final String JOSE_FORWARD_PROXY_ENDPOINT = JOSE_FORWARD_PROXY_PREFIX+"endpoint";
  313.     public static final String JOSE_FORWARD_PROXY_HEADER = JOSE_FORWARD_PROXY_PREFIX+"header";
  314.     public static final String JOSE_FORWARD_PROXY_HEADER_BASE64 = JOSE_FORWARD_PROXY_PREFIX+"header.base64";
  315.     public static final String JOSE_FORWARD_PROXY_QUERY = JOSE_FORWARD_PROXY_PREFIX+"query";
  316.     public static final String JOSE_FORWARD_PROXY_QUERY_BASE64 = JOSE_FORWARD_PROXY_PREFIX+"query.base64";
  317.     
  318.     private static final String JOSE_PROXY_PREFIX = "rs.security.proxy.";
  319.     public static final String JOSE_PROXY_TYPE = JOSE_PROXY_PREFIX+"type";
  320.     public static final String JOSE_PROXY_HOSTNAME = JOSE_PROXY_PREFIX+"hostname";
  321.     public static final String JOSE_PROXY_PORT = JOSE_PROXY_PREFIX+"port";
  322.     public static final String JOSE_PROXY_USERNAME = JOSE_PROXY_PREFIX+"username";
  323.     public static final String JOSE_PROXY_PASSWORD = JOSE_PROXY_PREFIX+"password";
  324.     
  325.     public static final String JOSE_KID = "joseKeyId";
  326.     public static final String JOSE_KID_TRUE = "true";
  327.     public static final String JOSE_KID_FALSE = "false";
  328.     public static final String JOSE_KID_CUSTOM = "joseKeyIdCustom";
  329.     public static final String JOSE_INCLUDE_CERT = "joseIncludeCert";
  330.     public static final String JOSE_INCLUDE_CERT_TRUE = "true";
  331.     public static final String JOSE_INCLUDE_CERT_FALSE = "false";
  332.     public static final String JOSE_INCLUDE_CERT_CHAIN = "joseIncludeCertChain";
  333.     public static final String JOSE_INCLUDE_CERT_CHAIN_TRUE = "true";
  334.     public static final String JOSE_INCLUDE_CERT_CHAIN_FALSE = "false";
  335.     public static final String JOSE_INCLUDE_CERT_SHA = "joseIncludeCertSHA";
  336.     public static final String JOSE_INCLUDE_CERT_SHA_1 = "sha1";
  337.     public static final String JOSE_INCLUDE_CERT_SHA_256 = "sha256";
  338.     public static final String JOSE_CONTENT_TYPE = "joseContentType";
  339.     public static final String JOSE_CONTENT_TYPE_TRUE = "true";
  340.     public static final String JOSE_CONTENT_TYPE_FALSE = "false";
  341.     public static final String JOSE_TYPE = "joseType";
  342.     public static final String JOSE_X509_URL = "joseX509Url";
  343.     public static final String JOSE_JWK_SET_URL = "joseJWKSetUrl";
  344.     public static final String JOSE_CRITICAL_HEADERS = "joseCriticalHeaders";
  345.     public static final String JOSE_CRITICAL_HEADERS_SEPARATOR = ",";
  346.     public static final String JOSE_EXT_HEADER_PREFIX = "joseExtensionHeader.";
  347.     public static final String JOSE_EXT_HEADER_SUFFIX_NAME = ".name";
  348.     public static final String JOSE_EXT_HEADER_SUFFIX_VALUE = ".value";
  349.     
  350.     public static final String JOSE_USE_HEADERS = "joseUseHeaders";
  351.     public static final String JOSE_USE_HEADERS_X5C = "joseUseHeaders.x5c";
  352.     public static final String JOSE_USE_HEADERS_X5U = "joseUseHeaders.x5u";
  353.     public static final String JOSE_USE_HEADERS_X5T = "joseUseHeaders.x5t";
  354.     public static final String JOSE_USE_HEADERS_X5T_256 = "joseUseHeaders.x5t256";
  355.     public static final String JOSE_USE_HEADERS_JWK = "joseUseHeaders.jwk";
  356.     public static final String JOSE_USE_HEADERS_JKU = "joseUseHeaders.jku";
  357.     public static final String JOSE_USE_HEADERS_KID = "joseUseHeaders.kid";
  358.     public static final String JOSE_USE_HEADERS_TRUE = "true";
  359.     public static final String JOSE_USE_HEADERS_FALSE = "false";
  360.     
  361.     public static final String JOSE_USE_HEADERS_TRUSTSTORE_TYPE = "joseUseHeaders.truststore.type";
  362.     public static final String JOSE_USE_HEADERS_TRUSTSTORE_FILE = "joseUseHeaders.truststore.file";
  363.     public static final String JOSE_USE_HEADERS_TRUSTSTORE_KEY_PAIR_ALGORITHM = "joseUseHeaders.truststore.file.algorithm";
  364.     public static final String JOSE_USE_HEADERS_TRUSTSTORE_PASSWORD = "joseUseHeaders.truststore.password";
  365.     public static final String JOSE_USE_HEADERS_TRUSTSTORE_VALIDITY_CHECK =  "joseUseHeaders.truststore.validityCheck";
  366.     public static final String JOSE_USE_HEADERS_TRUSTSTORE_CRL =  "joseUseHeaders.truststore.crl";
  367.     public static final String JOSE_USE_HEADERS_TRUSTSTORE_OCSP =  "joseUseHeaders.truststore.ocsp";
  368.     
  369.     public static final String JOSE_USE_HEADERS_TRUSTSTORE_SSL_TYPE = JOSE_TRUSTSTORE_SSL_TYPE;
  370.     public static final String JOSE_USE_HEADERS_TRUSTSTORE_SSL_FILE = JOSE_TRUSTSTORE_SSL_FILE;
  371.     public static final String JOSE_USE_HEADERS_TRUSTSTORE_SSL_PASSWORD = JOSE_TRUSTSTORE_SSL_PSWD;
  372.     public static final String JOSE_USE_HEADERS_TRUSTSTORE_SSL_CRL = JOSE_TRUSTSTORE_SSL_CRL;
  373.     public static final String JOSE_USE_HEADERS_TRUSTSTORE_SSL_OCSP = JOSE_TRUSTSTORE_SSL_OCSP;
  374.     
  375.     public static final String JOSE_USE_HEADERS_TRUSTSTORE_REMOTE_STORE_PROVIDER = "joseUseHeaders.truststore.remoteStoreProvider";
  376.     public static final String JOSE_USE_HEADERS_TRUSTSTORE_REMOTE_STORE_KEY_TYPE = "joseUseHeaders.truststore.remoteStoreKeyType";
  377.     public static final String JOSE_USE_HEADERS_TRUSTSTORE_REMOTE_STORE_CONFIG = "joseUseHeaders.truststore.remoteStoreConfig";
  378.     
  379.     public static final String JOSE_USE_HEADERS_KEYSTORE_TYPE = "joseUseHeaders.keystore.type";
  380.     public static final String JOSE_USE_HEADERS_KEYSTORE_FILE = "joseUseHeaders.keystore.file";
  381.     public static final String JOSE_USE_HEADERS_KEYSTORE_KEY_PAIR_ALGORITHM = "joseUseHeaders.keystore.file.algorithm";
  382.     public static final String JOSE_USE_HEADERS_KEYSTORE_PASSWORD = "joseUseHeaders.keystore.password";
  383.     public static final String JOSE_USE_HEADERS_KEYSTORE_MAP_ALIAS_PW = "joseUseHeaders.key.";
  384.     public static final String JOSE_USE_HEADERS_KEYSTORE_MAP_ALIAS_PW_SUFFIX_ALIAS = ".alias";
  385.     public static final String JOSE_USE_HEADERS_KEYSTORE_MAP_ALIAS_PW_SUFFIX_PW = ".password";
  386.         
  387.     
  388.     
  389.     public static final String TIMESTAMP_ACTION = ConfigurationConstants.TIMESTAMP;
  390.     public static final String TIMESTAMP_TTL = ConfigurationConstants.TTL_TIMESTAMP;
  391.     
  392.     public static final String TIMESTAMP_STRICT = ConfigurationConstants.TIMESTAMP_STRICT;
  393.     public static final String TIMESTAMP_PRECISION = ConfigurationConstants.TIMESTAMP_PRECISION;
  394.     public static final String TIMESTAMP_FUTURE_TTL = ConfigurationConstants.TTL_FUTURE_TIMESTAMP;
  395.     
  396.     public static final String TIMESTAMP_SOAPBOX_TTL_DEFAULT = "300";
  397.     public static final String TIMESTAMP_SOAPBOX_FUTURE_TTL_DEFAULT =  "60";

  399.     public static final String USERNAME_TOKEN_PW = "usernameTokenPassword";
  400.     public static final String USERNAME_TOKEN_PW_TYPE = ConfigurationConstants.PASSWORD_TYPE;
  401.     public static final String USERNAME_TOKEN_PW_TYPE_DIGEST = WSS4JConstants.PW_DIGEST;
  402.     public static final String USERNAME_TOKEN_PW_TYPE_TEXT = WSS4JConstants.PW_TEXT;
  403.     public static final String USERNAME_TOKEN_PW_TYPE_NONE = WSS4JConstants.PW_NONE;
  404.     
  405.     public static final String USERNAME_TOKEN_PW_MAP_MODE = "usernameTokenPasswordMode";
  406.     public static final String USERNAME_TOKEN_PW_MAP_MODE_SINGLE = "single";
  407.     public static final String USERNAME_TOKEN_PW_MAP_MODE_MAP = "map";
  408.     
  409.     public static final String USERNAME_TOKEN_PW_MAP = "usernameTokenPasswordMap";
  410.     
  411.     public static final String SAML_PROF_FILE =  "samlPropFile";
  412.     public static final String SAML_PROF_REF_ID  =  "samlPropRefId";
  413.     public static final String SAML_CALLBACK_REF = ConfigurationConstants.SAML_CALLBACK_REF;
  414.     public static final String SAML_VERSION_XMLCONFIG_ID =  "samlVersion";
  415.     public static final String SAML_VERSION_XMLCONFIG_ID_VALUE_20 =  "2.0";
  416.     public static final String SAML_ISSUER_FORMAT_XMLCONFIG_ID_2 =  "issuerFormat2";
  417.     public static final String SAML_SUBJECT_FORMAT_XMLCONFIG_ID_1 =  "subjectFormat1";
  418.     public static final String SAML_SUBJECT_FORMAT_XMLCONFIG_ID_2 =  "subjectFormat2";
  419.     public static final String SAML_SUBJECT_CONFIRMATION_METHOD_XMLCONFIG_ID_1 =  "subjectConfirmationMethod1";
  420.     public static final String SAML_SUBJECT_CONFIRMATION_METHOD_XMLCONFIG_ID_2 =  "subjectConfirmationMethod2";
  421.     public static final String SAML_AUTHN_CONTEXT_CLASS_REF_XMLCONFIG_ID_1 =  "authnContextClassRef1";
  422.     public static final String SAML_AUTHN_CONTEXT_CLASS_REF_XMLCONFIG_ID_2 =  "authnContextClassRef2";
  423.     public static final String SAML_ENVELOPED_SAML_SIGNATURE_XMLCONFIG_PREFIX_ID =  "signatureActionChoice";
  424.     public static final String SAML_ATTRIBUTE_STATEMENT_FORMAT_XMLCONFIG_PREFIX_ID =  "attributeStatementFormat_";
  425.     public static final String SAML_SUBJECT_CONFIRMATION_VALIDATION_METHOD_XMLCONFIG_ID =  "validateSamlSubjectConfirmationType";
  426.     public static final String SAML_SUBJECT_CONFIRMATION_VALIDATION_METHOD_XMLCONFIG_ID_SENDER_VOUCHES =  "sender-vouches";
  427.     public static final String SAML_SUBJECT_CONFIRMATION_VALIDATION_METHOD_XMLCONFIG_ID_HOLDER_OF_KEY =  "holder-of-key";
  428.     public static final String SAML_SIGNATURE_PARAM_CONVERTO_INTO_SAML_CONFIG = "signaturePropRefId_convertParamsIntoSamlPropRefId";
  429.     public static final String SAML_SIGNATURE_PARAM_CONVERTO_INTO_SAML_CONFIG_HOLDER_OF_KEY = "signaturePropRefId_convertParamsIntoSamlPropRefId_holderOfKey";
  430.     public static final String SAML_NAMESPACE_TEMPLATE = "SAML_TEMPLATE_NS";
  431.     
  432.     public static final String AUTH_PDP_LOCAL = "pdpLocal"; // true/false (default true)
  433.     public static final String AUTH_PDP_REMOTE_URL = "pdpRemoteUrl";
  434.     public static final String AUTH_PDP_REMOTE_CONNECTION_TIMEOUT = "pdpRemoteConnectionTimeout";
  435.     public static final String AUTH_PDP_REMOTE_READ_CONNECTION_TIMEOUT = "pdpRemoteReadConnectionTimeout";
  436.     
  437.     // Do not perform any action, do nothing. Only applies to DOM code.
  438.     public static final String ACTION_NO_SECURITY = WSHandlerConstants.NO_SECURITY;
  439.     // Perform a UsernameTokenSignature action.
  440.     public static final String ACTION_USERNAME_TOKEN_SIGNATURE = ConfigurationConstants.USERNAME_TOKEN_SIGNATURE;
  441.     // Perform a UsernameToken action.
  442.     public static final String ACTION_USERNAME_TOKEN = ConfigurationConstants.USERNAME_TOKEN; 
  443.     // Used on the receiving side to specify a UsernameToken with no password
  444.     public static final String ACTION_USERNAME_TOKEN_NO_PASSWORD = ConfigurationConstants.USERNAME_TOKEN_NO_PASSWORD; 
  445.     // Perform an unsigned SAML Token action.
  446.     public static final String ACTION_SAML_TOKEN_UNSIGNED = ConfigurationConstants.SAML_TOKEN_UNSIGNED;     
  447.     // Perform a signed SAML Token action.
  448.     public static final String ACTION_SAML_TOKEN_SIGNED = ConfigurationConstants.SAML_TOKEN_SIGNED;     
  449.     // Perform a signature action.
  450.     public static final String ACTION_SIGNATURE = SIGNATURE_ACTION;
  451.     // Perform a encryption action.
  452.     public static final String ACTION_ENCRYPTION = ENCRYPTION_ACTION;
  453.     public static final String ACTION_ENCRYPT_OLD = ENCRYPT_ACTION_OLD;  // modificato costante in wss4j 2.3.x
  454.     // Perform a decryption action.
  455.     public static final String ACTION_DECRYPTION = DECRYPTION_ACTION;
  456.     public static final String ACTION_DECRYPT_OLD = DECRYPT_ACTION_OLD;  // modificato costante in wss4j 2.3.x
  457.     // Perform a Timestamp action.
  458.     public static final String ACTION_TIMESTAMP = TIMESTAMP_ACTION;
  459.     // Perform a Signature action with derived keys.
  460.     public static final String ACTION_SIGNATURE_DERIVED = ConfigurationConstants.SIGNATURE_DERIVED;
  461.     // Perform a Encryption action with derived keys.
  462.     public static final String ACTION_ENCRYPTION_DERIVED = ConfigurationConstants.ENCRYPTION_DERIVED;
  463.     @SuppressWarnings("deprecation")
  464.     public static final String ACTION_ENCRYPT_DERIVED_OLD = ConfigurationConstants.ENCRYPT_DERIVED;  // modificato costante in wss4j 2.3.x
  465.     // Perform a Signature action with a kerberos token. Only for StAX code.
  466.     public static final String ACTION_SIGNATURE_WITH_KERBEROS_TOKEN = ConfigurationConstants.SIGNATURE_WITH_KERBEROS_TOKEN;
  467.     // Perform a Encryption action with a kerberos token. Only for StAX code.
  468.     public static final String ACTION_ENCRYPTION_WITH_KERBEROS_TOKEN = ConfigurationConstants.ENCRYPTION_WITH_KERBEROS_TOKEN;
  469.     @SuppressWarnings("deprecation")
  470.     public static final String ACTION_ENCRYPT_WITH_KERBEROS_TOKEN_OLD = ConfigurationConstants.ENCRYPT_WITH_KERBEROS_TOKEN;  // modificato costante in wss4j 2.3.x
  471.     // Add a kerberos token.
  472.     public static final String ACTION_KERBEROS_TOKEN = ConfigurationConstants.KERBEROS_TOKEN;
  473.     // Add a "Custom" token from a CallbackHandler
  474.     public static final String ACTION_CUSTOM_TOKEN = ConfigurationConstants.CUSTOM_TOKEN;
  475.     
  476.     public static boolean isActionEncryption(String action) {
  477.         return 
  478.                 SecurityConstants.ACTION_ENCRYPTION.equals(action) || 
  479.                 SecurityConstants.ACTION_ENCRYPT_OLD.equals(action) || 
  480.                 SecurityConstants.ACTION_ENCRYPTION_DERIVED.equals(action) || 
  481.                 SecurityConstants.ACTION_ENCRYPT_DERIVED_OLD.equals(action) || 
  482.                 SecurityConstants.ACTION_ENCRYPTION_WITH_KERBEROS_TOKEN.equals(action) || 
  483.                 SecurityConstants.ACTION_ENCRYPT_WITH_KERBEROS_TOKEN_OLD.equals(action);
  484.     }
  485.     public static boolean containsActionEncryption(String action) {
  486.         if(action==null) {
  487.             return false;
  488.         }
  489.         return 
  490.                 action.contains(SecurityConstants.ACTION_ENCRYPTION) || 
  491.                 action.contains(SecurityConstants.ACTION_ENCRYPT_OLD) || 
  492.                 action.contains(SecurityConstants.ACTION_ENCRYPTION_DERIVED) || 
  493.                 action.contains(SecurityConstants.ACTION_ENCRYPT_DERIVED_OLD) || 
  494.                 action.contains(SecurityConstants.ACTION_ENCRYPTION_WITH_KERBEROS_TOKEN) || 
  495.                 action.contains(SecurityConstants.ACTION_ENCRYPT_WITH_KERBEROS_TOKEN_OLD);
  496.     }
  497.     public static boolean isActionDecryption(String action) {
  498.         return 
  499.                 SecurityConstants.ACTION_DECRYPTION.equals(action) || 
  500.                 SecurityConstants.ACTION_DECRYPT_OLD.equals(action);
  501.     }
  502.     public static boolean containsActionDecryption(String action) {
  503.         if(action==null) {
  504.             return false;
  505.         }
  506.         return 
  507.                 action.contains(SecurityConstants.ACTION_DECRYPTION) || 
  508.                 action.contains(SecurityConstants.ACTION_DECRYPT_OLD);
  509.     }
  510.     
  511.     public static boolean isActionUsernameToken(String action) {
  512.         return 
  513.                 SecurityConstants.ACTION_USERNAME_TOKEN.equals(action) || 
  514.                 SecurityConstants.ACTION_USERNAME_TOKEN_NO_PASSWORD.equals(action) || 
  515.                 SecurityConstants.ACTION_USERNAME_TOKEN_SIGNATURE.equals(action);
  516.     }
  517.     public static boolean containsActionUsernameToken(String action) {
  518.         if(action==null) {
  519.             return false;
  520.         }
  521.         return 
  522.                 action.contains(SecurityConstants.ACTION_USERNAME_TOKEN) || 
  523.                 action.contains(SecurityConstants.ACTION_USERNAME_TOKEN_NO_PASSWORD) || 
  524.                 action.contains(SecurityConstants.ACTION_USERNAME_TOKEN_SIGNATURE);
  525.     }
  526.     
  527.     public static boolean isActionSAMLToken(String action) {
  528.         return 
  529.                 SecurityConstants.ACTION_SAML_TOKEN_SIGNED.equals(action) || 
  530.                 SecurityConstants.ACTION_SAML_TOKEN_UNSIGNED.equals(action);
  531.     }
  532.     public static boolean containsActionSAMLToken(String action) {
  533.         if(action==null) {
  534.             return false;
  535.         }
  536.         return 
  537.                 action.contains(SecurityConstants.ACTION_SAML_TOKEN_SIGNED) || 
  538.                 action.contains(SecurityConstants.ACTION_SAML_TOKEN_UNSIGNED);
  539.     }
  540.     
  541.     public static final String KEY_IDENTIFIER_BST_DIRECT_REFERENCE = CostantiDB.KEY_IDENTIFIER_BST_DIRECT_REFERENCE;
  542.     public static final String KEY_IDENTIFIER_ISSUER_SERIAL = CostantiDB.KEY_IDENTIFIER_ISSUER_SERIAL;
  543.     public static final String KEY_IDENTIFIER_X509 = CostantiDB.KEY_IDENTIFIER_X509;
  544.     public static final String KEY_IDENTIFIER_SKI = CostantiDB.KEY_IDENTIFIER_SKI;
  545.     public static final String KEY_IDENTIFIER_EMBEDDED_KEY_NAME = CostantiDB.KEY_IDENTIFIER_EMBEDDED_KEY_NAME;
  546.     public static final String KEY_IDENTIFIER_THUMBPRINT = CostantiDB.KEY_IDENTIFIER_THUMBPRINT;
  547.     public static final String KEY_IDENTIFIER_ENCRYPTED_KEY_SHA1 = CostantiDB.KEY_IDENTIFIER_ENCRYPTED_KEY_SHA1;

  549.     public static final String KEY_IDENTIFIER_BST_DIRECT_REFERENCE_USE_SINGLE_CERTIFICATE = ConfigurationConstants.USE_SINGLE_CERTIFICATE;
  550.     
  551.     public static final String KEY_IDENTIFIER_INCLUDE_SIGNATURE_TOKEN = ConfigurationConstants.INCLUDE_SIGNATURE_TOKEN;
  552.     public static final String KEY_IDENTIFIER_INCLUDE_ENCRYPT_TOKEN = ConfigurationConstants.INCLUDE_ENCRYPTION_TOKEN;
  553.     
  554.     public static final String IS_BSP_COMPLIANT = ConfigurationConstants.IS_BSP_COMPLIANT;
  555.     
  556.     public static final String AUTHORIZATION_CLASS = "authorizationClass";
  557.     
  558.     public static final String DETACH_HEADER_WSS = "detachHeaderWSSecurity";
  559.     public static final String DETACH_SECURITY_INFO = "detachSecurityInfo";
  560.     
  561.     // l'id puo' appartenere ad un altro header wssecurity con diverso actor/mustUnderstand. 
  562.     // Se si abilita questa opzione in caso di presenza di differenti header wssecurity con actor differenti, 
  563.     // la sicurezza può andare in errore sull'ultimo nodo, essendo state eliminate tutte le reference
  564.     // Questa opzione serve però abilitarla dove sono presenti vecchi soap engine della sicurezza che lasciavano 'zomibie' degli id non riferiti ed utilizzati nell'header WSS
  565.     // Questi attributi 'zombie' possono poi far fallire una eventuale validazione dei contenuti applicativi ad esempio (caso pdc)
  566.     public static final String REMOVE_ALL_WSU_ID_REF = "removeAllWsuIdRef"; 
  567.     
  568.     public static final String TRUE = "true";
  569.     public static final String FALSE = "false";
  570.     
  571.     public static final String KEYSTORE_TYPE_KEY_PAIR_VALUE = CostantiDB.KEYSTORE_TYPE_KEY_PAIR;
  572.     public static final String KEYSTORE_TYPE_KEY_PAIR_LABEL = CostantiLabel.KEYSTORE_TYPE_KEY_PAIR;
  573.     
  574.     public static final String KEYSTORE_TYPE_PUBLIC_KEY_VALUE = CostantiDB.KEYSTORE_TYPE_PUBLIC_KEY;
  575.     public static final String KEYSTORE_TYPE_PUBLIC_KEY_LABEL = CostantiLabel.KEYSTORE_TYPE_PUBLIC_KEY;
  576.     
  577.     public static final String KEYSTORE_TYPE_JWK_VALUE = CostantiDB.KEYSTORE_TYPE_JWK;
  578.     public static final String KEYSTORE_TYPE_JWK_LABEL = CostantiLabel.KEYSTORE_TYPE_JWK;
  579.     
  580.     public static final String KEYSTORE_TYPE_JKS_VALUE = CostantiDB.KEYSTORE_TYPE_JKS;
  581.     public static final String KEYSTORE_TYPE_JKS_LABEL = CostantiLabel.KEYSTORE_TYPE_JKS;
  582.     
  583.     public static final String KEYSTORE_TYPE_PKCS12_VALUE = CostantiDB.KEYSTORE_TYPE_PKCS12;
  584.     public static final String KEYSTORE_TYPE_PKCS12_LABEL = CostantiLabel.KEYSTORE_TYPE_PKCS12;
  585.     
  586.     public static List<String> getTipologieKeystoreValues(boolean truststore){
  587.         // NOTA:far ricreare la lista ogni volta, poiche' poi viene modificata
  588.         List<String> l = new ArrayList<>();
  589.         l.add(KEYSTORE_TYPE_JKS_VALUE);
  590.         l.add(KEYSTORE_TYPE_PKCS12_VALUE);
  591.         HSMUtils.fillTipologieKeystore(truststore, false, l);
  592.         return l;
  593.     }
  594.     public static List<String> getTipologieKeystoreLabels(boolean truststore){
  595.         // NOTA:far ricreare la lista ogni volta, poiche' poi viene modificata
  596.         List<String> l = new ArrayList<>();
  597.         l.add(KEYSTORE_TYPE_JKS_LABEL);
  598.         l.add(KEYSTORE_TYPE_PKCS12_LABEL);
  599.         HSMUtils.fillTipologieKeystore(truststore, false, l);
  600.         return l;
  601.     }
  602.     
  603.     public static final String KEYSTORE_TYPE_JCEKS_VALUE = "jceks";
  604.     public static final String KEYSTORE_TYPE_JCEKS_LABEL = "JCEKS";
  605.     public static List<String> getTipologieSecretKeystoreValues(){
  606.         // NOTA:far ricreare la lista ogni volta, poiche' poi viene modificata
  607.         List<String> l = new ArrayList<>();
  608.         l.add(KEYSTORE_TYPE_JCEKS_VALUE);
  609.         HSMUtils.fillTipologieKeystore(false, true, l);
  610.         return l;
  611.     }
  612.     public static List<String> getTipologieSecretKeystoreLabels(){
  613.         // NOTA:far ricreare la lista ogni volta, poiche' poi viene modificata
  614.         List<String> l = new ArrayList<>();
  615.         l.add(KEYSTORE_TYPE_JCEKS_LABEL);
  616.         HSMUtils.fillTipologieKeystore(false, true, l);
  617.         return l;
  618.     }

  620.     public static final String SECRETKEYSTORE_TYPE = "secretkeystoreType";
  621.     public static final String SECRETKEYSTORE_FILE = "secretkeystoreFile";
  622.     public static final String SECRETKEYSTORE_PASSWORD = "secretkeystorePassword";
  623.     public static final String SECRETKEYSTORE_PRIVATE_KEY_PASSWORD = "secretkeystorePrivateKeyPassword";
  624.     public static final String SECRETKEYSTORE_BYOK_POLICY = "secretkeystoreByokPolicy";
  625.     
  626.     public static final String KEYSTORE_TYPE = "keystoreType";
  627.     public static final String KEYSTORE_FILE = "keystoreFile";
  628.     public static final String KEYSTORE_PASSWORD = "keystorePassword";
  629.     public static final String KEYSTORE_PRIVATE_KEY_PASSWORD = "keystorePrivateKeyPassword";
  630.     public static final String KEYSTORE_OCSP_POLICY = "keystoreOcspPolicy";
  631.     public static final String KEYSTORE_BYOK_POLICY = "keystoreByokPolicy";
  632.      
  633.     public static final String TRUSTSTORE_TYPE = "truststoreType";
  634.     public static final String TRUSTSTORE_FILE = "truststoreFile";
  635.     public static final String TRUSTSTORE_PASSWORD = "truststorePassword";
  636.     public static final String TRUSTSTORE_OCSP_POLICY = "truststoreOcspPolicy";

  638.     /**
  639.      * Produce l'encoding in base64 dell'attachment (prima di applicare la sicurezza)
  640.      */
  641.     public static final String PRE_BASE64_ENCODING_ATTACHMENT_TRUE = "true";
  642.     public static final String PRE_BASE64_ENCODING_ATTACHMENT_FALSE= "false";
  643.     public static final boolean PRE_BASE64_ENCODING_ATTACHMENT_DEFAULT = Boolean.parseBoolean(PRE_BASE64_ENCODING_ATTACHMENT_FALSE);
  644.     public static final String PRE_BASE64_ENCODING_ATTACHMENT = "preBase64EncodingAttachment";

  646.     /**
  647.      * Produce l'encoding in base64 dell'attachment (dopo aver applicato la sicurezza)
  648.      */
  649.     public static final String POST_BASE64_ENCODING_ATTACHMENT_TRUE = "true";
  650.     public static final String POST_BASE64_ENCODING_ATTACHMENT_FALSE = "false";
  651.     public static final boolean POST_BASE64_ENCODING_ATTACHMENT_DEFAULT = Boolean.parseBoolean(POST_BASE64_ENCODING_ATTACHMENT_FALSE);
  652.     public static final String POST_BASE64_ENCODING_ATTACHMENT = "postBase64EncodingAttachment";

  654.     /**
  655.      * Decodifica la rappresentazione base64 dell'attachment (dopo la validazione della sicurezza)
  656.      */
  657.     public static final String POST_BASE64_DECODING_ATTACHMENT_TRUE = "true";
  658.     public static final String POST_BASE64_DECODING_ATTACHMENT_FALSE = "false";
  659.     public static final boolean POST_BASE64_DECODING_ATTACHMENT_DEFAULT = Boolean.parseBoolean(POST_BASE64_DECODING_ATTACHMENT_FALSE);
  660.     public static final String POST_BASE64_DECODING_ATTACHMENT = "postBase64DecodingAttachment";

  662.     /**
  663.      * Aggiunge le parentesi uncinate all'id degli attachment
  664.      */
  665.     public static final String ADD_ATTACHMENT_ID_BRACKETS_FALSE = "false";
  666.     public static final String ADD_ATTACHMENT_ID_BRACKETS_TRUE = "true";
  667.     public static final boolean ADD_ATTACHMENT_ID_BRACKETS_DEFAULT = Boolean.parseBoolean(ADD_ATTACHMENT_ID_BRACKETS_FALSE);
  668.     public static final String ADD_ATTACHMENT_ID_BRACKETS = "addAttachmentIdBrackets";
  669.     
  670.     /**
  671.      * Cifra gli headers degli attachment 
  672.      */
  673.     public static final String ENCRYPT_ATTACHMENT_HEADERS_FALSE = "false";
  674.     public static final String ENCRYPT_ATTACHMENT_HEADERS_TRUE = "true";
  675.     public static final boolean ENCRYPT_ATTACHMENT_HEADERS_DEFAULT = Boolean.parseBoolean(ENCRYPT_ATTACHMENT_HEADERS_FALSE);
  676.     public static final String ENCRYPT_ATTACHMENT_HEADERS = "encryptAttachmentHeaders";
  677.     
  678. }
Created with JaCoCo 0.8.8.202204050719