byte[] DATA = Array.readFile("C:\\_localsoft\\FSSP_FILES\\answers\\arc\\res_13484630806.xml");
		Collection<X509Certificate> chain = new ArrayList<X509Certificate>();
		PrivateKey privateKey = Configuration.loadConfiguration(chain);
		CAdESSignature cadesSignature = new CAdESSignature(false);
		// Создаем подписанта CAdES-BES.
		cadesSignature.addSigner(privateKey, chain, CAdESType.CAdES_BES, null);
		// Завершаем создание подписи с двумя подписантами.
		byte[] cadesCms = cadesSignature.sign(DATA);
		Array.writeFile("123.SIG", cadesCms);

Mar 23, 2017 4:27:53 PM ru.CryptoPro.JCP.tools.Starter check
INFO: Loading JCP 1.0.54 36641
Mar 23, 2017 4:27:53 PM ru.CryptoPro.JCP.tools.Starter check
INFO: JCP loaded.
Mar 23, 2017 4:27:54 PM ru.CryptoPro.CAdES.tools.Utility initJCPAlgorithms
INFO: Replacement of BouncyCastle GOST algorithms.
Mar 23, 2017 4:27:54 PM ru.CryptoPro.CAdES.CAdESSignature addSigner
INFO: Add signer certificate
	serial number: 1d217c04460a5f00000007800060002
	subject: CN=АО БАНК «СНГБ», OU=0, O=АО БАНК «СНГБ», ST=86 Ханты-Мансийский автономный округ – Югра, L=Сургут, C=RU, STREET="ул. Григория Кукуевицкого, д. 19", OID.1.2.643.3.131.1.1=#120C303038363032313930323538, OID.1.2.643.100.1=#120D31303238363030303031373932
	issuer: CN=УЦ ИИТ (К3), O="ОАО \"ИнфоТеКС Интернет Траст\"", EMAILADDRESS=SupportIIT@infotecs.ru, ST=77 г. Москва, L=Москва, C=RU, OID.1.2.643.3.131.1.1=#120C303037373433303230353630, OID.1.2.643.100.1=#120D31303237373339313133303439, STREET="Старый Петровско-Разумовский проезд, д. 1/23, стр. 1"
Mar 23, 2017 4:27:54 PM ru.CryptoPro.CAdES.b.d.a <clinit>
INFO: %%% Loading C:\_localsoft\SMEV_3_0_CLIENT\jre1.7.0_21\lib\security\cacerts %%%
Mar 23, 2017 4:27:54 PM ru.CryptoPro.CAdES.b.d.a <clinit>
INFO: %%% Trusted store loaded %%%
Mar 23, 2017 4:27:54 PM ru.CryptoPro.CAdES.exception.CAdESException <init>
SEVERE: Error building certification path for CN=АО БАНК «СНГБ», OU=0, O=АО БАНК «СНГБ», ST=86 Ханты-Мансийский автономный округ – Югра, L=Сургут, C=RU, STREET="ул. Григория Кукуевицкого, д. 19", OID.1.2.643.3.131.1.1=#120C303038363032313930323538, OID.1.2.643.100.1=#120D31303238363030303031373932: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
Exception in thread "main" Error building certification path for CN=АО БАНК «СНГБ», OU=0, O=АО БАНК «СНГБ», ST=86 Ханты-Мансийский автономный округ – Югра, L=Сургут, C=RU, STREET="ул. Григория Кукуевицкого, д. 19", OID.1.2.643.3.131.1.1=#120C303038363032313930323538, OID.1.2.643.100.1=#120D31303238363030303031373932: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target, errors: 'PKIX failure: invalid certificate parameters' (33)
	at ru.CryptoPro.CAdES.b.d.b.a(Unknown Source)
	at ru.CryptoPro.CAdES.b.d.b.a(Unknown Source)
	at ru.CryptoPro.CAdES.b.d.a.a(Unknown Source)
	at ru.CryptoPro.CAdES.CAdESSignature.addSigner(Unknown Source)
	at ru.CryptoPro.CAdES.CAdESSignature.addSigner(Unknown Source)
	at run.main(run.java:64)

ru.CryptoPro.JCP.tools.JCPLogger.level = FINE
ru.CryptoPro.JCP.tools.JCPLogger.handlers = java.util.logging.FileHandler

//онлайн проверка сертификатов
System.setProperty("ru.CryptoPro.reprov.enableCRLDP", "true");
System.setProperty("com.sun.security.enableCRLDP", "true");
System.setProperty("com.ibm.security.enableCRLDP", "true");
String cer_story = "HDImageStore";
String cer_alias = "gis-smev-2016-2017";
String cer_pass_str = "pass123";
char[] cer_pass = cer_pass_str.toCharArray();

KeyStore keyStore = KeyStore.getInstance( cer_story );
keyStore.load( null, null );
PrivateKey privateKey = (PrivateKey) keyStore.getKey( cer_alias, cer_pass );
X509Certificate cert = (X509Certificate) keyStore.getCertificate( cer_alias );
List<X509Certificate> chain = Arrays.asList( cert );
//файл для подписи res_13504107761.xml
byte[] src = Files.readAllBytes(Paths.get("C:\\_localsoft\\FSSP_FILES\\answers\\arc\\res_13504107761.xml"));
//отсоединенная подпись
CAdESSignature cadesSignature = new CAdESSignature( true );
// Создаем подписанта CAdES-BES.
cadesSignature.addSigner( "JCP", getDigestOid(privateKey),getPublicKeyOid(privateKey),privateKey, chain, CAdESType.CAdES_BES, null, false );  
// Будущая подпись в виде массива.
ByteArrayOutputStream signatureStream = new ByteArrayOutputStream();
// Подготовка контекста.
cadesSignature.open( signatureStream );
// Хеширование.
cadesSignature.update( src );
// Создание подписи с выводом в signatureStream.
cadesSignature.close();
signatureStream.close();
// Получаем подпись в виде массива.
byte[] cadesCms = signatureStream.toByteArray();
//сохранить подпись в файл
FileOutputStream out = new FileOutputStream("res_13504107761.xml.sig");
out.write(cadesCms);
out.close();

Collection<X509Certificate> chain = new ArrayList<X509Certificate>(); // список сертификатов
Collection<X509CertificateHolder> holderList = new ArrayList<X509CertificateHolder>();
...

for (X509Certificate cert : chain) {
    holderList.add(new X509CertificateHolder(cert.getEncoded()));
} // for

...
cadesSignature.[h]setCertificateStore[/h](new CollectionStore(holderList));

Mar 24, 2017 4:26:40 PM ru.CryptoPro.JCP.tools.Starter check
INFO: Loading JCP 2.0 38150
Mar 24, 2017 4:26:40 PM ru.CryptoPro.JCP.tools.Starter check
INFO: JCP loaded.
Mar 24, 2017 4:26:40 PM ru.CryptoPro.CAdES.tools.Utility initJCPAlgorithms
INFO: Replacement of BouncyCastle GOST algorithms.
Mar 24, 2017 4:26:42 PM ru.CryptoPro.CAdES.exception.CAdESException <init>
SEVERE: Error building certification path for EMAILADDRESS=support@cryptopro.ru, C=RU, ST=77 г. Москва, L=Москва, STREET="ул. Сущёвский вал, д. 18", OID.1.2.643.100.1=#120D31303037373132333435363738, O="ООО \"КРИПТО-ПРО\"", OU=Тестовый УЦ, CN="Тестовая служба штампов времени ООО \"КРИПТО-ПРО\"", OID.1.2.643.3.131.1.1=#120C303037373132333435363738: ru.CryptoPro.reprov.certpath.JCPCertPathBuilderException: unable to find valid certification path to requested target
Exception in thread "main" org.bouncycastle.cms.CMSAttributeTableGenerationException: Error building certification path for EMAILADDRESS=support@cryptopro.ru, C=RU, ST=77 г. Москва, L=Москва, STREET="ул. Сущёвский вал, д. 18", OID.1.2.643.100.1=#120D31303037373132333435363738, O="ООО \"КРИПТО-ПРО\"", OU=Тестовый УЦ, CN="Тестовая служба штампов времени ООО \"КРИПТО-ПРО\"", OID.1.2.643.3.131.1.1=#120C303037373132333435363738: ru.CryptoPro.reprov.certpath.JCPCertPathBuilderException: unable to find valid certification path to requested target
	at ru.CryptoPro.CAdES.d.c.a.getAttributes(Unknown Source)
	at ru.CryptoPro.CAdES.d.c.d.getAttributes(Unknown Source)
	at ru.CryptoPro.CAdES.d.c.b.getAttributes(Unknown Source)
	at org.bouncycastle.cms.CMSSignedDataStreamGenerator$SignerIntInfoGeneratorImpl.generate(Unknown Source)
	at org.bouncycastle.cms.CMSSignedDataStreamGenerator$CmsSignedDataOutputStream.close(Unknown Source)
	at ru.CryptoPro.CAdES.CAdESSignature.close(Unknown Source)
	at digest.run.main(run.java:142)
Caused by: Error building certification path for EMAILADDRESS=support@cryptopro.ru, C=RU, ST=77 г. Москва, L=Москва, STREET="ул. Сущёвский вал, д. 18", OID.1.2.643.100.1=#120D31303037373132333435363738, O="ООО \"КРИПТО-ПРО\"", OU=Тестовый УЦ, CN="Тестовая служба штампов времени ООО \"КРИПТО-ПРО\"", OID.1.2.643.3.131.1.1=#120C303037373132333435363738: ru.CryptoPro.reprov.certpath.JCPCertPathBuilderException: unable to find valid certification path to requested target, errors: 'PKIX failure: invalid parameters of certificate' (33)
	at ru.CryptoPro.CAdES.e.a.a.a(Unknown Source)
	at ru.CryptoPro.CAdES.e.a.a.a(Unknown Source)
	at ru.CryptoPro.CAdES.e.a.b.a(Unknown Source)
	at ru.CryptoPro.CAdES.CAdESSigner.a(Unknown Source)
	at ru.CryptoPro.CAdES.CAdESSignature.a(Unknown Source)
	at ru.CryptoPro.CAdES.g.a.a(Unknown Source)
	at ru.CryptoPro.CAdES.d.a.d.a(Unknown Source)
	at ru.CryptoPro.CAdES.d.c.a.a(Unknown Source)
	... 7 more

import ru.CryptoPro.JCP.Digest.AbstractGostDigest;
import ru.CryptoPro.JCP.Digest.GostDigest;
import ru.CryptoPro.JCP.JCP;
import ru.CryptoPro.JCP.params.OID;
import java.io.*;
import java.net.Authenticator;
import java.net.PasswordAuthentication;
import java.security.*;
import java.security.cert.CertificateException;
import java.security.cert.X509Certificate;
import java.util.*;
import org.bouncycastle.cert.X509CertificateHolder;
import org.bouncycastle.util.CollectionStore;
import ru.CryptoPro.CAdES.CAdESSignature;
import ru.CryptoPro.CAdES.CAdESSigner;
import ru.CryptoPro.CAdES.CAdESType;
import ru.CryptoPro.CAdES.exception.*;

import java.nio.file.Files;
import java.nio.file.Paths;
class ProxyAuthenticator extends Authenticator {

    private String user, password;

    public ProxyAuthenticator(String user, String password) {
        this.user = user;
        this.password = password;
    }

    protected PasswordAuthentication getPasswordAuthentication() {
        return new PasswordAuthentication(user, password.toCharArray());
    }
}

public class run {
	public static String getPublicKeyOid(PrivateKey privateKey) {

        String privateKeyAlgorithm = privateKey.getAlgorithm();

        if (privateKeyAlgorithm.equalsIgnoreCase(JCP.GOST_EL_2012_256_NAME) ||
            privateKeyAlgorithm.equalsIgnoreCase(JCP.GOST_DH_2012_256_NAME)) {
            return JCP.GOST_PARAMS_SIG_2012_256_KEY_OID;
        } // if
        else if (privateKeyAlgorithm.equalsIgnoreCase(JCP.GOST_EL_2012_512_NAME) ||
            privateKeyAlgorithm.equalsIgnoreCase(JCP.GOST_DH_2012_512_NAME)) {
            return JCP.GOST_PARAMS_SIG_2012_512_KEY_OID;
        } // if

        return JCP.GOST_EL_KEY_OID;

    }
	
	 public static String getDigestOid(PrivateKey privateKey) {

	        String privateKeyAlgorithm = privateKey.getAlgorithm();

	        if (privateKeyAlgorithm.equalsIgnoreCase(JCP.GOST_EL_2012_256_NAME) ||
	            privateKeyAlgorithm.equalsIgnoreCase(JCP.GOST_DH_2012_256_NAME)) {
	            return JCP.GOST_DIGEST_2012_256_OID;
	        } // if
	        else if (privateKeyAlgorithm.equalsIgnoreCase(JCP.GOST_EL_2012_512_NAME) ||
	            privateKeyAlgorithm.equalsIgnoreCase(JCP.GOST_DH_2012_512_NAME)) {
	            return JCP.GOST_DIGEST_2012_512_OID;
	        } // if

	        return JCP.GOST_DIGEST_OID;
	    }
	 
	 
	public static String toHexString(byte[] array) {
	    final char[] hex = {'0', '1', '2', '3', '4', '5', '6', '7', '8', '9', 'A',
	            'B', 'C', 'D', 'E', 'F'};
	    StringBuffer ss = new StringBuffer(array.length * 3);
	    for (int i = 0; i < array.length; i++) {
	        ss.append(' ');
	        ss.append(hex[(array[i] >>> 4) & 0xf]);
	        ss.append(hex[array[i] & 0xf]);
	    }
	    return ss.toString();
	}
	public static void main(String[] args) throws NoSuchAlgorithmException, IOException, KeyStoreException, CertificateException, UnrecoverableKeyException, CAdESException {
		//proxy if need
		Authenticator.setDefault(new ProxyAuthenticator("user", "pass"));
		System.setProperty("http.proxyHost", "proxy.xxx.local");
		System.setProperty("http.proxyPort", "3128");
		//proxy if need
		
		//System.setProperty("ru.CryptoPro.reprov.enableCRLDP", "true");
        System.setProperty("com.sun.security.enableCRLDP", "true");
        System.setProperty("com.ibm.security.enableCRLDP", "true");
		String cer_story = "HDImageStore";
	    String cer_alias = "certname";
	    String cer_pass_str = "pass";
	    char[] cer_pass = cer_pass_str.toCharArray();
	    
	    KeyStore keyStore = KeyStore.getInstance( cer_story );
        keyStore.load( null, null );
        PrivateKey privateKey = (PrivateKey) keyStore.getKey( cer_alias, cer_pass );
        
        X509Certificate cert = (X509Certificate) keyStore.getCertificate( cer_alias );
        List<X509Certificate> chain = Arrays.asList( cert );
        //new sign
        CAdESSignature cadesSignature = new CAdESSignature( true );
        //add certs in sign
        Collection<X509CertificateHolder> holderList = new ArrayList<X509CertificateHolder>();
        for (X509Certificate cert1 : chain) 
        {
            holderList.add(new X509CertificateHolder(cert1.getEncoded()));
        } 
        cadesSignature.setCertificateStore(new CollectionStore(holderList));
        //add certs in sign
  
        //data to sign
        byte[] src = Files.readAllBytes(Paths.get("C:\\_localsoft\\FSSP_FILES\\answers\\arc\\res_13504107761.xml"));
  
        // Создаем подписанта CAdES-BES.
        cadesSignature.addSigner( "JCP", getDigestOid(privateKey),getPublicKeyOid(privateKey),privateKey, chain, CAdESType.CAdES_T, "http://www.cryptopro.ru/tsp/", false );  
        
        // Будущая подпись в виде массива.
        ByteArrayOutputStream signatureStream = new ByteArrayOutputStream();
        // Подготовка контекста.
        cadesSignature.open( signatureStream );
        // Хеширование.
        cadesSignature.update( src );
       
        // Создание подписи с выводом в signatureStream.
        cadesSignature.close();
        signatureStream.close();
        // Получаем подпись в виде массива.
        byte[] cadesCms = signatureStream.toByteArray();

        FileOutputStream out = new FileOutputStream("res_13504107761.xml.sig");
		out.write(cadesCms);
		out.close();
		System.out.println("END");
	}
}