NFSe Foz do Iguaçu

<LoteRps Id="lote" versao="1.00">

<CpfCnpj><Cnpj>01470311000133</Cnpj></CpfCnpj>

package br.com.aberta;

import java.io.ByteArrayOutputStream;
import java.io.File;
import java.io.FileInputStream;
import java.io.FileOutputStream;
import java.io.InputStream;
import java.io.OutputStream;
import java.security.Key;
import java.security.KeyStore;
import java.security.PrivateKey;
import java.security.cert.X509Certificate;
import java.util.ArrayList;
import java.util.Collections;
import java.util.List;

import javax.xml.crypto.dsig.CanonicalizationMethod;
import javax.xml.crypto.dsig.DigestMethod;
import javax.xml.crypto.dsig.Reference;
import javax.xml.crypto.dsig.SignatureMethod;
import javax.xml.crypto.dsig.SignedInfo;
import javax.xml.crypto.dsig.Transform;
import javax.xml.crypto.dsig.XMLSignature;
import javax.xml.crypto.dsig.XMLSignatureFactory;
import javax.xml.crypto.dsig.dom.DOMSignContext;
import javax.xml.crypto.dsig.keyinfo.KeyInfo;
import javax.xml.crypto.dsig.keyinfo.KeyInfoFactory;
import javax.xml.crypto.dsig.keyinfo.X509Data;
import javax.xml.crypto.dsig.spec.C14NMethodParameterSpec;
import javax.xml.crypto.dsig.spec.TransformParameterSpec;
import javax.xml.parsers.DocumentBuilderFactory;
import javax.xml.transform.Transformer;
import javax.xml.transform.TransformerFactory;
import javax.xml.transform.dom.DOMSource;
import javax.xml.transform.stream.StreamResult;

import org.w3c.dom.Document;
import org.w3c.dom.Element;
import org.w3c.dom.NodeList;

public class Assinar{
    private final String C14N_TRANSFORM_METHOD = "http://www.w3.org/TR/2001/REC-xml-c14n-20010315";
    private XMLSignatureFactory signatureFactory;
    private X509Certificate certificate509;
    private KeyInfo keyInfo;
    private SignedInfo signedInfo;
    private KeyStore keyStore;
    private File jksFile;
    private InputStream xmlDocument;
    private String caminhoXMLDestino;
    private String alias;
    private char[] password;
    private String tag;
    private boolean assinarDocumentoPrincipal;
    
    
    public Assinar(String caminhoXML, String caminhoXMLDestino, String caminhoJKS, String alias, String senha, String tag, boolean assinarDocumentoPrincipal){
		try {
			this.xmlDocument = new FileInputStream(caminhoXML);
			this.caminhoXMLDestino = caminhoXMLDestino;
			this.jksFile = new File(caminhoJKS);
		    this.password = senha.toCharArray();
		    this.alias = alias;
		    this.tag = tag;
		    this.assinarDocumentoPrincipal = assinarDocumentoPrincipal;
			this.setCertificate();
			ByteArrayOutputStream  out = this.assinar();
			this.xmlDocument.close();
			OutputStream arquivoXMLDestino = new FileOutputStream(this.caminhoXMLDestino);
			arquivoXMLDestino.write(out.toByteArray());
			arquivoXMLDestino.close();
			System.out.println("Sucesso");
		} catch (Exception e) {
			System.out.println("Erro - "+e.getMessage());
			e.printStackTrace();
		}
	}

    private PrivateKey getPrivateKey() throws Exception {
        InputStream jksStream = new FileInputStream(jksFile);
        keyStore.load(jksStream, password);
        Key privateKey = (Key) keyStore.getKey(alias, password);
        if (privateKey instanceof PrivateKey) {
            return (PrivateKey) privateKey;
        }
        return null;
    }

    private void setCertificate() throws Exception {
        InputStream jksStream = new FileInputStream(jksFile);
        keyStore = KeyStore.getInstance("JKS");
        keyStore.load(jksStream, password);
        certificate509 = (X509Certificate) keyStore.getCertificate(alias);
    }

    private ByteArrayOutputStream assinar() throws Exception {
        DocumentBuilderFactory documentBuilder = DocumentBuilderFactory.newInstance();
        documentBuilder.setNamespaceAware(true);

        Document document = documentBuilder.newDocumentBuilder().parse(xmlDocument);

        signatureFactory = XMLSignatureFactory.getInstance("DOM");

        Transform enveloped = signatureFactory.newTransform(Transform.ENVELOPED, (TransformParameterSpec) null);
        Transform c14n = signatureFactory.newTransform(C14N_TRANSFORM_METHOD, (TransformParameterSpec) null);

        ArrayList<Transform> transformList = new ArrayList<Transform>();
        transformList.add(enveloped);
        transformList.add(c14n);

        if (!this.tag.toLowerCase().equals("false")){
        	NodeList elemets = document.getElementsByTagName(this.tag);
            for (int x = 0; elemets.getLength() != x; x++) {
               
            	/*
            	 * N Linha abaixo temos que pegar uma tag que esta dentro da tag informada na variável tag 
            	 * para funcionar nos pegavamos um lista do tipo da variavel ou usavamos o getChildNodes().item(1)
            	 * embora exista o item 0, este é um item desconhecido(Text), nos testes que fiz o primeiro item "válido" sempre
            	 * foi o 1.
            	 */
//            	Element element = (Element)((Element) elemets.item(x)).getElementsByTagName("InfRps").item(0);
            	Element element = (Element)elemets.item(x).getChildNodes().item(1);
            	String id = element.getAttribute("id");
            	Reference reference = signatureFactory.newReference("#".concat(id), 
                        signatureFactory.newDigestMethod(DigestMethod.SHA1, null),
                        transformList, null, null);
                signedInfo = signatureFactory.newSignedInfo(
                        signatureFactory.newCanonicalizationMethod(CanonicalizationMethod.INCLUSIVE, (C14NMethodParameterSpec) null),
                        signatureFactory.newSignatureMethod(SignatureMethod.RSA_SHA1, null),
                        Collections.singletonList(reference));

                KeyInfoFactory keyInfoFactory = signatureFactory.getKeyInfoFactory();
                List<X509Certificate> x509Content = new ArrayList<X509Certificate>();
                x509Content.add(certificate509);
                X509Data x509Data = null;
                x509Data = keyInfoFactory.newX509Data(x509Content);
                keyInfo = keyInfoFactory.newKeyInfo(Collections.singletonList(x509Data));

                DOMSignContext signContext = new DOMSignContext(getPrivateKey(), document.getDocumentElement().getElementsByTagName(this.tag).item(x));
                XMLSignature signature = signatureFactory.newXMLSignature(signedInfo, keyInfo);
                signature.sign(signContext);
            }
        }
        

        if (assinarDocumentoPrincipal == true){
        	Reference reference = signatureFactory.newReference("", 
                    signatureFactory.newDigestMethod(DigestMethod.SHA1, null),
                    transformList, null, null);
            signedInfo = signatureFactory.newSignedInfo(
                    signatureFactory.newCanonicalizationMethod(CanonicalizationMethod.INCLUSIVE, (C14NMethodParameterSpec) null),
                    signatureFactory.newSignatureMethod(SignatureMethod.RSA_SHA1, null),
                    Collections.singletonList(reference));

            KeyInfoFactory keyInfoFactory = signatureFactory.getKeyInfoFactory();
            List<X509Certificate> x509Content = new ArrayList<X509Certificate>();
            x509Content.add(certificate509);
            X509Data x509Data = null;
            x509Data = keyInfoFactory.newX509Data(x509Content);
            keyInfo = keyInfoFactory.newKeyInfo(Collections.singletonList(x509Data));

            DOMSignContext signContext = new DOMSignContext(getPrivateKey(), document.getDocumentElement());
            XMLSignature signature = signatureFactory.newXMLSignature(signedInfo, keyInfo);
            signature.sign(signContext);
        }
        
        ByteArrayOutputStream output = new ByteArrayOutputStream();
        TransformerFactory transformerFactory = TransformerFactory.newInstance();
        Transformer transformer = transformerFactory.newTransformer();
        transformer.transform(new DOMSource(document), new StreamResult(output));
        
        return output;
    }
}