in jsign-core/src/main/java/net/jsign/timestamp/RFC3161Timestamper.java [48:86]
protected CMSSignedData timestamp(DigestAlgorithm algo, byte[] encryptedDigest) throws IOException, TimestampingException {
TimeStampRequestGenerator reqgen = new TimeStampRequestGenerator();
reqgen.setCertReq(true);
TimeStampRequest req = reqgen.generate(algo.oid, algo.getMessageDigest().digest(encryptedDigest));
byte[] request = req.getEncoded();
HttpURLConnection conn = (HttpURLConnection) tsaurl.openConnection();
conn.setConnectTimeout(10000);
conn.setReadTimeout(10000);
conn.setDoOutput(true);
conn.setDoInput(true);
conn.setUseCaches(false);
conn.setRequestMethod("POST");
conn.setRequestProperty("Content-type", "application/timestamp-query");
conn.setRequestProperty("Content-length", String.valueOf(request.length));
conn.setRequestProperty("Accept", "application/timestamp-reply");
conn.setRequestProperty("User-Agent", "Transport");
conn.getOutputStream().write(request);
conn.getOutputStream().flush();
if (conn.getResponseCode() >= 400) {
throw new IOException("Unable to complete the timestamping due to HTTP error: " + conn.getResponseCode() + " - " + conn.getResponseMessage());
}
try {
TimeStampResp resp = TimeStampResp.getInstance(new ASN1InputStream(conn.getInputStream()).readObject());
TimeStampResponse response = new TimeStampResponse(resp);
response.validate(req);
if (response.getStatus() != 0) {
throw new IOException("Unable to complete the timestamping due to an invalid response (" + response.getStatusString() + ")");
}
return response.getTimeStampToken().toCMSSignedData();
} catch (Exception e) {
throw new TimestampingException("Unable to complete the timestamping", e);
}
}