example code - verify signature

[joehobson]

We need a sample jsp to show signature verification. I'd like to continue with the method we're using with the new publish.jsp where we have a simple form that can run in Tomcat and show the basic functionality. Steps as I see them..

• create "examples/verify.jsp" script using "examples/publish.jsp" as a template (display form; if something is submitted display the action output as well)
• in the form, allow the user to upload a json file, or point at an obtain URL on a node for a single document
• on the process, get the envelope (from either input method), pull the public key down and use it to attempt to verify the signature on the envelope. Output whether or not the envelope signature could be verified.

I was going to add a task for a "sign" example jsp as well, but it looks like that's covered very well in the examples/publish.jsp code

[joehobson]

Download the latest BC source code (http://bouncycastle.org/latest_releases.html) and look at the example in bcpg-jdk15on-147/org/bouncycastle/openpgp/examples/ClearSignedFileProcessor.java

Other than the fact that they use a file and we do a block of text, shouldn't be that different.

[NavNorth-Todd]

I've added verification code to the library and added a basic JSP form which accepts strings as input. Now that I have that working, I'll get to work on allowing for file and URL input. The verification code works purely off of input streams, so the bulk of the additional work will be in parsing out "bad" characters and the like. I have been having trouble getting the code to digest LR signatures, whereas it works flawlessly on the example signatures I have been using for testing.