private byte[] signPKCS7(File file, String senderAlias, char[] senderPassword, boolean detached) throws Exception {
        CAdESUtility.initJCPAlgorithms();

        //Загрузка хранилища
        final KeyStore hdImageStore = KeyStore.getInstance(CMStools.STORE_TYPE);
        hdImageStore.load(null, null);

        //ключ отправителя
        final PrivateKey senderKey =
                (PrivateKey) hdImageStore.getKey(senderAlias, senderPassword);
        final X509Certificate publicSenderCert =
                (X509Certificate) hdImageStore.getCertificate(senderAlias);


        final List<Certificate> certificateChain = Arrays.asList(hdImageStore.getCertificateChain(senderAlias));

        // Конвертируем цепочку в X509Certificate.
        final Collection<X509Certificate> chain
                = Arrays.asList(certificateChain.toArray(new X509Certificate[certificateChain.size()]));

        Store certStore = new JcaCertStore(chain);

        // Подготавливаем подпись.
        final CMSSignedDataGenerator generator = new CMSSignedDataGenerator();

        ContentSigner contentSigner = new GostContentSignerProvider(
                senderKey, JCP.PROVIDER_NAME);

        SignerInfoGenerator signerInfoGenerator = new JcaSignerInfoGeneratorBuilder(
                (DigestCalculatorProvider) new GostDigestCalculatorProvider(senderKey, JCP.PROVIDER_NAME))
                .build(contentSigner, publicSenderCert);
        generator.addSignerInfoGenerator(signerInfoGenerator);
        generator.addCertificates(certStore);

        // Сформированная подпись.
        //return generator.generate(new CMSProcessableByteArray(data), !detached).getEncoded();
        byte[] sign = generator.generate(new CMSProcessableFile(file), !detached).getEncoded();

        // получение хеша из подписи
        byte[] generatedDigest = (byte[]) generator.getGeneratedDigests().values().stream().findFirst().get();

        // Получение TSP Токена
        TimeStampToken timeStampToken = getTimeStampToken(generatedDigest);

        CMSSignedData signedData = new CMSSignedData(sign);

        // создание ASN1 аттрибута из полученного токена
        Attribute attribute = new Attribute(
                PKCSObjectIdentifiers.id_aa_signatureTimeStampToken,
                new DERSet(timeStampToken.toCMSSignedData().toASN1Structure())
        );

        // добавление аттрибута подписанту в уже сформированную подпись
        SignerInformation signer = (SignerInformation) signedData.getSignerInfos().getSigners().iterator().next();
        ASN1EncodableVector timestampVector = new ASN1EncodableVector();
        timestampVector.add(attribute);
        signer = SignerInformation.replaceUnsignedAttributes(signer, new AttributeTable(timestampVector));
        return CMSSignedData.replaceSigners(
                signedData, new SignerInformationStore(Collections.singleton(signer))
        ).getEncoded();
    }

    private TimeStampToken getTimeStampToken(byte[] generatedDigest) throws IOException, TSPException {
        TimeStampRequestGenerator requestGenerator = new TimeStampRequestGenerator();
        //requestGenerator.setReqPolicy(new ASN1ObjectIdentifier("1.2.643.4.15.1.2.2.3"));
        requestGenerator.setCertReq(true);
        TimeStampRequest tspRequest = requestGenerator.generate(TSPAlgorithms.GOST3411, generatedDigest);
        byte[] encodedRequest = tspRequest.getEncoded();
        HttpRequest postRequest = httpRequestFactory.buildPostRequest(
                new GenericUrl(tspUri),
                new ByteArrayContent(TSP_CONTENT_TYPE, encodedRequest)
        );
        postRequest.getHeaders().setContentType(TSP_CONTENT_TYPE);
        postRequest.getHeaders().setContentLength((long) encodedRequest.length);
        postRequest.setConnectTimeout(tspTimeout);
        HttpResponse postResponse;
        try {
            postResponse = postRequest.execute();
        } catch (Exception e) {
            String errMsg;
            if (e instanceof HttpResponseException ) {
                errMsg = ((HttpResponseException) e).getStatusMessage();
            } else {
                errMsg = e.getMessage();
            }
            throw new TSPException("Exception occurred when processing request to TSP server " + errMsg);
        }
        TimeStampResponse tspResponse = new TimeStampResponse(
                TimeStampResp.getInstance(new ASN1InputStream(postResponse.getContent()).readObject())
        );
        tspResponse.validate(tspRequest);
        if (tspResponse.getFailInfo() != null) {
            throw new TSPException("Unable to complete the timestamping due to an invalid response " + tspResponse.getFailInfo());
        }
        log.info("Valid TSP service response received {}", tspResponse.getTimeStampToken().getTimeStampInfo().getTsa());
        return tspResponse.getTimeStampToken();
    }