Java Security

Hello everyone,

I have the task to timestamp a signed xml document. Unfortunately I am no expert on this topic and would be grateful if someone can give me some pointers. What I need in the end is an XML element generated from the timestamp response of some TSA that I can include in the signed XML document. I am looking for some java toolkit, be it commercial or open source, that would do the work for me. Of course, I would prefer a free open source solution if it exists.

So far, I have tried bouncy castle's tsp and crypto package and IBM's XML security xss4j, but I couldn't find any class that would give me the ultimate solution. As much as I can tell, bouncy castle only implements the tsp protocol for the communication with a TSA, but its TimeStamp* classes do not have a toXML() method. I can get the timestamp as an ASN1 stream though and I used the ASN12SAX class from IBM's xss4j to convert the timestamp to a XML representation. Unfortunately the resulting XML code doesn't look quite right. It contains strange tags like SEQUENCE or CONTEXT.

I really don't want to code some XML snippet by hand and I also believe that there must be some standard solution around. The problem is certainly not new or uncommon.