Simpler is better!

/*
 * RandomGUID
 * @version 1.2.1 11/05/02
 * @author Marc A. Mnich
 *
 * From www.JavaExchange.com, Open Software licensing
 *
 * 11/05/02 -- Performance enhancement from Mike Dubman.  
 *             Moved InetAddr.getLocal to static block.  Mike has measured
 *             a 10 fold improvement in run time.
 * 01/29/02 -- Bug fix: Improper seeding of nonsecure Random object
 *             caused duplicate GUIDs to be produced.  Random object
 *             is now only created once per JVM.
 * 01/19/02 -- Modified random seeding and added new constructor
 *             to allow secure random feature.
 * 01/14/02 -- Added random function seeding with JVM run time
 *
 */
import java.net.*;
import java.util.*;
import java.security.*;

/*
 * In the multitude of java GUID generators, I found none that
 * guaranteed randomness.  GUIDs are guaranteed to be globally unique
 * by using ethernet MACs, IP addresses, time elements, and sequential
 * numbers.  GUIDs are not expected to be random and most often are
 * easy/possible to guess given a sample from a given generator.
 * SQL Server, for example generates GUID that are unique but
 * sequencial within a given instance.
 *
 * GUIDs can be used as security devices to hide things such as
 * files within a filesystem where listings are unavailable (e.g. files
 * that are served up from a Web server with indexing turned off).
 * This may be desireable in cases where standard authentication is not
 * appropriate. In this scenario, the RandomGUIDs are used as directories.
 * Another example is the use of GUIDs for primary keys in a database
 * where you want to ensure that the keys are secret.  Random GUIDs can
 * then be used in a URL to prevent hackers (or users) from accessing
 * records by guessing or simply by incrementing sequential numbers.
 *
 * There are many other possiblities of using GUIDs in the realm of
 * security and encryption where the element of randomness is important.
 * This class was written for these purposes but can also be used as a
 * general purpose GUID generator as well.
 *
 * RandomGUID generates truly random GUIDs by using the system's
 * IP address (name/IP), system time in milliseconds (as an integer),
 * and a very large random number joined together in a single String
 * that is passed through an MD5 hash.  The IP address and system time
 * make the MD5 seed globally unique and the random number guarantees
 * that the generated GUIDs will have no discernable pattern and
 * cannot be guessed given any number of previously generated GUIDs.
 * It is generally not possible to access the seed information (IP, time,
 * random number) from the resulting GUIDs as the MD5 hash algorithm
 * provides one way encryption.
 *
 * ----> Security of RandomGUID: <-----
 * RandomGUID can be called one of two ways -- with the basic java Random
 * number generator or a cryptographically strong random generator
 * (SecureRandom).  The choice is offered because the secure random
 * generator takes about 3.5 times longer to generate its random numbers
 * and this performance hit may not be worth the added security
 * especially considering the basic generator is seeded with a
 * cryptographically strong random seed.
 *
 * Seeding the basic generator in this way effectively decouples
 * the random numbers from the time component making it virtually impossible
 * to predict the random number component even if one had absolute knowledge
 * of the System time.  Thanks to Ashutosh Narhari for the suggestion
 * of using the static method to prime the basic random generator.
 *
 * Using the secure random option, this class compies with the statistical
 * random number generator tests specified in FIPS 140-2, Security
 * Requirements for Cryptographic Modules, secition 4.9.1.
 *
 * I converted all the pieces of the seed to a String before handing
 * it over to the MD5 hash so that you could print it out to make
 * sure it contains the data you expect to see and to give a nice
 * warm fuzzy.  If you need better performance, you may want to stick
 * to byte[] arrays.
 *
 * I believe that it is important that the algorithm for
 * generating random GUIDs be open for inspection and modification.
 * This class is free for all uses.
 *
 *
 * - Marc
 */
public class RandomGUID extends Object {

    public String valueBeforeMD5 = "";
    public String valueAfterMD5 = "";
    private static Random myRand;
    private static SecureRandom mySecureRand;
    private static String s_id;

    /*
     * Static block to take care of one time secureRandom seed.
     * It takes a few seconds to initialize SecureRandom.  You might
     * want to consider removing this static block or replacing
     * it with a "time since first loaded" seed to reduce this time.
     * This block will run only once per JVM instance.
     */

    static {
        mySecureRand = new SecureRandom();
        long secureInitializer = mySecureRand.nextLong();
        myRand = new Random(secureInitializer);
        try {
            s_id = InetAddress.getLocalHost().toString();
        } catch (UnknownHostException e) {
            e.printStackTrace();
        }
    }

    /*
     * Default constructor.  With no specification of security option,
     * this constructor defaults to lower security, high performance.
     */
    public RandomGUID() {
        getRandomGUID(false);
    }

    /*
     * Constructor with security option.  Setting secure true
     * enables each random number generated to be cryptographically
     * strong.  Secure false defaults to the standard Random function seeded
     * with a single cryptographically strong random number.
     */
    public RandomGUID(boolean secure) {
        getRandomGUID(secure);
    }

    /*
     * Method to generate the random GUID
     */
    private void getRandomGUID(boolean secure) {
        MessageDigest md5 = null;
        StringBuffer sbValueBeforeMD5 = new StringBuffer();

        try {
            md5 = MessageDigest.getInstance("MD5");
        } catch (NoSuchAlgorithmException e) {
            System.out.println("Error: " + e);
        }

        try {
            long time = System.currentTimeMillis();
            long rand = 0;

            if (secure) {
                rand = mySecureRand.nextLong();
            } else {
                rand = myRand.nextLong();
            }

            // This StringBuffer can be a long as you need; the MD5
            // hash will always return 128 bits.  You can change
            // the seed to include anything you want here.
            // You could even stream a file through the MD5 making
            // the odds of guessing it at least as great as that
            // of guessing the contents of the file!
            sbValueBeforeMD5.append(s_id);
            sbValueBeforeMD5.append(":");
            sbValueBeforeMD5.append(Long.toString(time));
            sbValueBeforeMD5.append(":");
            sbValueBeforeMD5.append(Long.toString(rand));

            valueBeforeMD5 = sbValueBeforeMD5.toString();
            md5.update(valueBeforeMD5.getBytes());

            byte[] array = md5.digest();
            StringBuffer sb = new StringBuffer();
            for (int j = 0; j < array.length; ++j) {
                int b = array[j] & 0xFF;
                if (b < 0x10) sb.append('0');
                sb.append(Integer.toHexString(b));
            }

            valueAfterMD5 = sb.toString();

        } catch (Exception e) {
            System.out.println("Error:" + e);
        }
    }

    /*
     * Convert to the standard format for GUID
     * (Useful for SQL Server UniqueIdentifiers, etc.)
     * Example: C2FEEEAC-CFCD-11D1-8B05-00600806D9B6
     */
    public String toString() {
        String raw = valueAfterMD5.toUpperCase();
        StringBuffer sb = new StringBuffer();
        sb.append(raw.substring(0, 8));
        sb.append("-");
        sb.append(raw.substring(8, 12));
        sb.append("-");
        sb.append(raw.substring(12, 16));
        sb.append("-");
        sb.append(raw.substring(16, 20));
        sb.append("-");
        sb.append(raw.substring(20));

        return sb.toString();
    }

    /*
     * Demonstraton and self test of class
     */
    public static void main(String args[]) {
        for (int i=0; i< 100; i++) {
            RandomGUID myGUID = new RandomGUID();
            System.out.println("Seeding String=" + myGUID.valueBeforeMD5);
            System.out.println("rawGUID=" + myGUID.valueAfterMD5);
            System.out.println("RandomGUID=" + myGUID.toString());
        }
    }
}

# Log4J Properties
log4j.rootLogger=DEBUG, console, logfile

log4j.appender.console=org.apache.log4j.ConsoleAppender
log4j.appender.console.layout=org.apache.log4j.PatternLayout
log4j.appender.console.layout.ConversionPattern={%-5p} [%d] <%c> : %m%n

log4j.appender.logfile=org.apache.log4j.RollingFileAppender
log4j.appender.logfile.File=logs/logfile.log
log4j.appender.logfile.Append=true
log4j.appender.logfile.MaxFileSize=1024KB
log4j.appender.logfile.MaxBackupIndex=5
log4j.appender.logfile.layout=org.apache.log4j.PatternLayout
log4j.appender.logfile.layout.ConversionPattern={%-5p} [%d] <%c> : %m%n

log4j.logger.org.apache.catalina=WARN

log4j.logger.org.apache.commons=WARN

log4j.logger.org.springframework=INFO

log4j.logger.org.aspectj.weaver=INFO

# Log Level
# TRACE : 가장 상세한 정보를 나타낼 때 사용한다.
# DEBUG : 일반 정보를 상세히 나타낼 때 사용한다.
# INFO  : 일반 정보를 나타낼 때 사용한다.
# WARN  : 에러는 아니지만 주의할 필요가 있을 때 사용한다.
# ERROR : 일반 에러가 일어 났을 때 사용한다.
# FATAL : 가장 크리티컬한 에러가 일어 났을 때 사용한다.

# Options
# %d : 로깅 이벤트가 일어난 날자(date)
# %p : 로깅 이벤트의 priority
# %t : 로깅 이벤트를 생성한 스레드 이름
# %c : 로깅 이벤트의 category
# %F : 로깅요청을 일으킨 파일 이름
# %L : 로깅요청을 일으킨 파일의 행번호
# %x : 로깅이벤트를 발생시킨 스레드에 관련된 내포검사항목
#      (Nested Diagnostic Context : NDC)을 출력
# %C : 로깅요청을 일으킨 호출자의 완전한 클래스이름
# %M : 로깅요청을 일으킨 메소드
# %m : 메세지
# %n : 플랫폼 독립적인 개행문자
# %l : 소스코드의 위치정보를 출력한다. %C. %M(%F:%L) 의 축약형

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE log4j:configuration SYSTEM "log4j.dtd">
<log4j:configuration xmlns:log4j="http://jakarta.apache.org/log4j/"
    debug="false">

    <appender name="console" class="org.apache.log4j.ConsoleAppender">
        <layout class="org.apache.log4j.PatternLayout">
            <param name="ConversionPattern" value="{%-5p} [%d] <%c> : %m%n" />
        </layout>
    </appender>

    <appender name="logfile" class="org.apache.log4j.RollingFileAppender">
        <param name="Threshold" value="DEBUG" />
        <param name="Append" value="true" />
        <param name="MaxFileSize" value="1024KB" />
        <param name="MaxBackupIndex" value="5" />
        <param name="ImmediateFlush" value="true" />
        <param name="File" value="logs/logfile.log" />
        <layout class="org.apache.log4j.PatternLayout">
            <param name="ConversionPattern" value="{%-5p} [%d] <%c> : %m%n" />
        </layout>
    </appender>

    <logger name="org.apache.catalina">
        <level value="WARN" />
    </logger>

    <logger name="org.apache.commons">
        <level value="WARN" />
    </logger>

    <logger name="org.springframework">
        <level value="INFO" />
    </logger>

    <logger name="org.aspectj.weaver">
        <level value="INFO" />
    </logger>

    <root>
        <priority value="DEBUG" />
        <appender-ref ref="console" />
        <appender-ref ref="logfile" />
    </root>

</log4j:configuration>

import org.apache.commons.logging.Log;
import org.apache.commons.logging.LogFactory;

pubic class MyClass {

    static final Log log = LogFactory.getLog(MyClass.class);

    // ....

    log.debug("The value is null.");

}

# Tomcat Ant Taskdefs
deploy=org.apache.catalina.ant.DeployTask
reload=org.apache.catalina.ant.ReloadTask
undeploy=org.apache.catalina.ant.UndeployTask
list=org.apache.catalina.ant.ListTask
resources=org.apache.catalina.ant.ResourcesTask
roles=org.apache.catalina.ant.RolesTask
start=org.apache.catalina.ant.StartTask
stop=org.apache.catalina.ant.StopTask

# JDK
java14.home=/java/j2sdk1.4.2
java15.home=/java/jdk1.5.0

# Tomcat Server
tomcat.home=/apache/tomcat-5.5.27
tomcat.server=localhost
tomcat.manager.url=http://${tomcat.server}:8080/manager
tomcat.username=admin
tomcat.password=admin

# Web App
webapp.name=myapp
webapp.war=/home/myapp/dist/war/myapp.war

<tomcat-users>
  <role rolename="admin"/>
  <role rolename="manager"/>
  <user username="admin" password="admin" roles="admin,manager"/>
</tomcat-users>

<?xml version="1.0" encoding="UTF-8"?>
<project name="tomcat" basedir="." default="">

    <property file="./tomcat.properties" />

    <!-- Taskdefs -->

    <!--
    <taskdef file="tomcatTasks.properties">
        <classpath>
            <pathelement path="${tomcat.home}/server/lib/catalina-ant.jar" />
        </classpath>
    </taskdef>
    -->

    <taskdef name="deploy" classname="org.apache.catalina.ant.DeployTask">
        <classpath>
            <path location="${tomcat.home}/server/lib/catalina-ant.jar" />
        </classpath>
    </taskdef>

    <taskdef name="reload" classname="org.apache.catalina.ant.ReloadTask">
        <classpath>
            <path location="${tomcat.home}/server/lib/catalina-ant.jar" />
        </classpath>
    </taskdef>

    <taskdef name="undeploy" classname="org.apache.catalina.ant.UndeployTask">
        <classpath>
            <path location="${tomcat.home}/server/lib/catalina-ant.jar" />
        </classpath>
    </taskdef>

    <taskdef name="list" classname="org.apache.catalina.ant.ListTask">
        <classpath>
            <path location="${tomcat.home}/server/lib/catalina-ant.jar" />
        </classpath>
    </taskdef>

    <taskdef name="start" classname="org.apache.catalina.ant.StartTask">
        <classpath>
            <path location="${tomcat.home}/server/lib/catalina-ant.jar" />
        </classpath>
    </taskdef>

    <taskdef name="stop" classname="org.apache.catalina.ant.StopTask">
        <classpath>
            <path location="${tomcat.home}/server/lib/catalina-ant.jar" />
        </classpath>
    </taskdef>

    <!-- Tasks -->

    <target name="deploy" description="Deploy application in Tomcat">
        <deploy url="${tomcat.manager.url}"
                username="${tomcat.username}"
                password="${tomcat.password}"
                path="/${webapp.name}"
                war="file:${webapp.war}" />
    </target>

    <target name="reload" description="Reload application in Tomcat">
        <reload url="${tomcat.manager.url}"
                username="${tomcat.username}"
                password="${tomcat.password}"
                path="/${webapp.name}" />
    </target>

    <target name="undeploy" description="Undeploy application in Tomcat">
        <undeploy url="${tomcat.manager.url}"
                  username="${tomcat.username}"
                  password="${tomcat.password}"
                  path="/${webapp.name}" />
    </target>

    <target name="list" description="List Tomcat applications">
        <list url="${tomcat.manager.url}"
              username="${tomcat.username}"
              password="${tomcat.password}" />
    </target>

    <target name="start" description="Start Tomcat application">
        <start url="${tomcat.manager.url}"
               username="${tomcat.username}"
               password="${tomcat.password}"
               path="/${webapp.name}" />
    </target>

    <target name="stop" description="Stop Tomcat application">
        <stop url="${tomcat.manager.url}"
              username="${tomcat.username}"
              password="${tomcat.password}"
              path="/${webapp.name}" />
    </target>

    <!-- Tomcat Start/Stop -->
    <!--                  
    <target name="tomcat-start">
        <java jar="${tomcat.home}/bin/bootstrap.jar"
              jvm="${java15.home}/bin/java"
              fork="true">
            <jvmarg value="-Dcatalina.home=${tomcat.home}" />
        </java>
    </target>

    <target name="tomcat-stop">
        <java jar="${tomcat.home}/bin/bootstrap.jar" fork="true">
            <jvmarg value="-Dcatalina.home=${tomcat.home}" />
            <arg line="stop" />
        </java>
    </target>
    -->

</project>

<ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#" Id="Signature-867695">
<ds:SignedInfo>
<ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" />
<ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1" />
<ds:Reference URI="#id-927929">
<ds:Transforms>
<ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" />
</ds:Transforms>
<ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1" />
<ds:DigestValue>O95oswj5A+ih7qTYDqAHRvyzC3c=</ds:DigestValue>
</ds:Reference>
</ds:SignedInfo>
<ds:SignatureValue>
IGA2hS7CDye7LizYZR3371OyiwYvvRcG4WZ6TnXHsxKCUah4BTbD4+DvlGwtmGf9kx3eRDcgvim6
PcoJ3uMK5q9c8ICKGFMSadk9jvPZDZ+R+VoMwt+0aJAI/MkhzK74IBhD7z5SQ7/xfMwlYafi28Tw
MjiqYdB+/gzurlFWQPM=
</ds:SignatureValue>
<ds:KeyInfo Id="KeyId-3874052">
......
</ds:KeyInfo>
</ds:Signature>

Stream Output:

<soapenv:Body xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-ws
security-utility-1.0.xsd" wsu:Id="id-927929"><RequestMessage xmlns="http://www.java
2go.net/request"><RequestHeader><TotalCount>1</TotalCount></RequestHeader><RequestB
ody><RequestDataList><GetCertRequestData><CertId>343602C9666268C3297A</CertId></Get
CertRequestData></RequestDataList></RequestBody></RequestMessage></soapenv:Body>

Pre-digest Input:

<soapenv:Body xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/" xmlns:wsu="
http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd"
 wsu:Id="id-927929"><RequestMessage xmlns="http://www.java2go.net/request"><Request
Header><TotalCount>1</TotalCount></RequestHeader><RequestBody><RequestDataList><Get
CertRequestData><CertId>343602C9666268C3297A</CertId></GetCertRequestData></Request
DataList></RequestBody></RequestMessage></soapenv:Body>

Stream Output:

<ds:SignedInfo>
<ds:CanonicalizationMethod Algorithm=\"http://www.w3.org/2001/10/xml-exc-c14n#\" />
<ds:SignatureMethod Algorithm=\"http://www.w3.org/2000/09/xmldsig#rsa-sha1\" />
<ds:Reference URI=\"#id-927929\">
<ds:Transforms>
<ds:Transform Algorithm=\"http://www.w3.org/2001/10/xml-exc-c14n#\" />
</ds:Transforms>
<ds:DigestMethod Algorithm=\"http://www.w3.org/2000/09/xmldsig#sha1\" />
<ds:DigestValue>O95oswj5A+ih7qTYDqAHRvyzC3c=</ds:DigestValue>
</ds:Reference>
</ds:SignedInfo>

Canonicalized SignedInfo:

<ds:SignedInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
<ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></d
s:CanonicalizationMethod>
<ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"></ds:Si
gnatureMethod>
<ds:Reference URI="#id-927929">
<ds:Transforms>
<ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></ds:Transform>
</ds:Transforms>
<ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"></ds:DigestMet
hod>
<ds:DigestValue>6oT2WXem4gq2V/+bQWzoOQ+wEJI=</ds:DigestValue>
</ds:Reference>
</ds:SignedInfo>

<?xml version="1.0" encoding="UTF-8"?>
<?xml-stylesheet href="doc.xsl" type="text/xsl" ?>
<doc xmlns:d="http://www.example.org/d"
      xmlns:c="http://www.example.org/c" xml:lang="en">
  <e1 a:attr="out" b:attr="sorted" attr2="all" attr="I'm"
    xmlns:b="http://www.ietf.org" xmlns:a="http://www.w3.org"
    xmlns="http://example.org"/>
  <d:e2 xmlns="" xmlns:a="http://www.w3.org">
    <e3 xmlns="" xmlns:a="http://www.w3.org"/>
  </d:e2>
</doc>

<?xml-stylesheet href="doc.xsl" type="text/xsl" ?>
<doc xmlns:c="http://www.example.org/c" xmlns:d="http://www.example.org/d" \
	xml:lang="en">
  <e1 xmlns="http://example.org" xmlns:a="http://www.w3.org" \
	xmlns:b="http://www.ietf.org" attr="I'm" attr2="all" b:attr="sorted" \
	a:attr="out"></e1>
  <d:e2 xmlns:a="http://www.w3.org">
    <e3></e3>
  </d:e2>
</doc>

<d:e2 xmlns:a="http://www.w3.org" xmlns:c="http://www.example.org/c" \
	xmlns:d="http://www.example.org/d" xml:lang="en">
    <e3></e3>
  </d:e2>

<d:e2 xmlns:d="http://www.example.org/d">
    <e3></e3>
  </d:e2>