public static ERSEvidenceRecord create(java.io.File f, java.lang.String serverAddress) throws IOException, TSPException, CMSException, ERSException, OperatorCreationException, NoSuchAlgorithmException, CertificateException
{
    byte[] timestampQuery = TsaClientHelper.makeQuery(f.toURI().toURL(), true, "0.4.0.2023.1.1");
    byte[] timestampResponse= de.elbosso.util.security.TsaClientHelper.getResponse(timestampQuery,serverAddress);
    CLASS_LOGGER.debug("size of response: "+(timestampResponse.length)+" bytes");
    java.io.InputStream inputStream = new java.io.ByteArrayInputStream(timestampResponse);
    org.bouncycastle.tsp.TimeStampResponse timeStampResponse = new org.bouncycastle.tsp.TimeStampResponse(inputStream);
    inputStream.close();
    TimeStampToken tst=timeStampResponse.getTimeStampToken();
    ContentInfo contentInfo=new ContentInfo(new ASN1ObjectIdentifier("1.2.840.113549.1.9.16.1.4"), ASN1Primitive.fromByteArray(timeStampResponse.getTimeStampToken().toCMSSignedData().getEncoded("DER")));
    ByteArrayInputStream ioEx=new ByteArrayInputStream(timeStampResponse.getTimeStampToken().toCMSSignedData().getEncoded("DER"));
    ASN1InputStream aIn = new ASN1InputStream(ioEx);
    contentInfo = ContentInfo.getInstance(aIn.readObject());
    CMSSignedData cmsSignedData=new CMSSignedData(contentInfo);
    AlgorithmIdentifier digestAlgorithm = null;
    for(AlgorithmIdentifier aid:cmsSignedData.getDigestAlgorithmIDs())
    {
        digestAlgorithm=aid;
        break;
    }
    ArchiveTimeStamp archiveTimeStamp=new ArchiveTimeStamp(digestAlgorithm,new PartialHashtree[0],contentInfo);
    ArchiveTimeStampChain archiveTimeStampChain=new ArchiveTimeStampChain(archiveTimeStamp);
    ArchiveTimeStampSequence archiveTimeStampSequence=new ArchiveTimeStampSequence(archiveTimeStampChain);
    EvidenceRecord evidenceRecord=new EvidenceRecord(new AlgorithmIdentifier[]{digestAlgorithm},null,null,archiveTimeStampSequence);
    DigestCalculatorProvider digProvider = new JcaDigestCalculatorProviderBuilder().setProvider(BouncyCastleProvider.PROVIDER_NAME).build();
    ERSEvidenceRecord ersEvidenceRecord=new ERSEvidenceRecord(evidenceRecord.getEncoded(),digProvider);
    return ersEvidenceRecord;
}

public static void validate(java.io.File f,ERSEvidenceRecord ersEvidenceRecord) throws IOException, TSPException, CMSException, ERSException, OperatorCreationException, NoSuchAlgorithmException, CertificateException
{
    SignerId signerID =  ersEvidenceRecord.getLastArchiveTimeStamp().getTimeStampToken().getSID();
    Store allCertificates = ersEvidenceRecord.getLastArchiveTimeStamp().getTimeStampToken().getCertificates();
    Collection signerCertificates = allCertificates.getMatches(signerID);
    if (signerCertificates.isEmpty()) {
        // Response without certificate
        Utilities.SYSTEMOUT_LOGGER.error("No signer certificate in response. If you are"
                + " using openssl for request generation try -cert.");
        System.exit(3);
    }
    X509CertificateHolder certHolder = null;
    for (Object match : signerCertificates) {
        certHolder = (X509CertificateHolder) match;
        break;
    }
    assert certHolder != null : "certHolder can't be null because the "
            + "collection is not empty.";
    X509Certificate tsaCert = new JcaX509CertificateConverter()
            .setProvider(BC).getCertificate(certHolder);
    SignerInformationVerifier siv = new JcaSimpleSignerInfoVerifierBuilder()
            .setProvider(BC).build(tsaCert);
    ersEvidenceRecord.getLastArchiveTimeStamp().getTimeStampToken().validate(siv);
    CLASS_LOGGER.info("trying to validate");
    ersEvidenceRecord.validate(siv);
    byte[] tokenFingerPrint=ersEvidenceRecord.getLastArchiveTimeStamp().getTimeStampToken().getTimeStampInfo().getMessageImprintDigest();
    java.io.InputStream is = new java.io.FileInputStream(f);;
    java.io.ByteArrayOutputStream baos = new java.io.ByteArrayOutputStream();
    de.elbosso.util.io.Utilities.copyBetweenStreams(is, baos, true);
    java.security.MessageDigest digest = java.security.MessageDigest.getInstance(TSPAlgorithms.SHA512.toString());
    byte[] in = baos.toByteArray();
    byte[] out = digest.digest(in);
    is.close();
    if(java.util.Arrays.equals(tokenFingerPrint,out))
        CLASS_LOGGER.info("validation successfull!");
    else
        CLASS_LOGGER.info("validation NOT successfull!");
}