public static SOAPMessage Set_sign_Element_XAdES_ver_Crypto (SOAPMessage soapMessage, String tag,  C_JCP in_jsp) throws Exception {
        
            com.sun.org.apache.xml.internal.security.Init.init();
            JCPXMLDSigInit.init();
            // Инициализация JCP XML провайдера.
            if(!JCPXMLDSigInit.isInitialized()) {
                JCPXMLDSigInit.init();
            }
            
            // Инициализация ключевого контейнера.
            KeyStore keyStore = KeyStore.getInstance(JCP.HD_STORE_NAME);
            keyStore.load(null, null);
            
            // Получение ключа и сертификата.
            PrivateKey privateKey = in_jsp.Get_PrivateKey();
            X509Certificate cert = in_jsp.Get_sert();
            
            Document doc = soapMessage.getSOAPPart().getEnvelope().getOwnerDocument();
            //Element Signature = doc.createElement("Signature");
            //Signature.setAttribute("xmlns", "http://www.w3.org/2000/09/xmldsig#");
            
            //Элемент, в который будем добавлять подпись
            
            NodeList childNodes = soapMessage.getSOAPPart().getEnvelope().getBody().getFirstChild().getChildNodes();
            org.w3c.dom.Node node_fp = childNodes.item(1).getFirstChild().getFirstChild().getFirstChild().getFirstChild().getFirstChild().getFirstChild();
            
            Element signedNode = (Element) node_fp;
            
            NamedNodeMap attributes = node_fp.getAttributes();
            org.w3c.dom.Node Node_ID = attributes.getNamedItem("Id");
            String signingId = Node_ID.getTextContent();
            
            final Node nodeToSign = node_fp;
            final String referenceURI = "#" + signingId;


            // 3. Алгоритмы.

            final KeyingDataProvider keyingProvider = new DirectKeyingDataProvider(cert, privateKey);
            final XadesSigningProfile sigProf = new XadesTSigningProfile(keyingProvider)

                    // time-stamp provider. Дополнительно задается список соответствий между
                    // алгоритмом хеширования и адресом TSP службы, чтобы разнообразить и
                    // расширить пример.
                    .withTimeStampTokenProvider(new GostTimeStampTokenProvider(
                        GostXAdESUtility.MAP_DIGEST_OID_2_TSA_URL, XAdESConfig.CONFIG_2001_S.getDefaultProvider()))

                    // digest provider
                    .withDigestEngineProvider(new DefaultMessageDigestProvider() { // digest

                        @Override
                        public MessageDigest getEngine(String digestAlgorithmURI) throws UnsupportedAlgorithmException {

                            final String digestAlgOid = GostXAdESUtility.digestUri2Digest(digestAlgorithmURI);

                            try {
                                return MessageDigest.getInstance(digestAlgOid);
                            } catch (NoSuchAlgorithmException e) {
                                throw new UnsupportedAlgorithmException(e.getMessage(), digestAlgorithmURI, e);
                            }
                        }

                    })

                    .withAlgorithmsProviderEx(new DefaultAlgorithmsProviderEx() { // algorithms

                        private String digestUrn = null;

                        @Override
                        public Algorithm getSignatureAlgorithm(String keyAlgorithmName)
                            throws UnsupportedAlgorithmException {

                            digestUrn = GostXAdESUtility.key2DigestUrn(keyAlgorithmName);
                            final String signatureUrn = GostXAdESUtility.key2SignatureUrn(keyAlgorithmName);

                            return new GenericAlgorithm(signatureUrn);
                        }

                        @Override
                        public String getDigestAlgorithmForReferenceProperties() {
                            return digestUrn;
                        }

                        @Override
                        public String getDigestAlgorithmForDataObjsReferences() {
                            return digestUrn;
                        }

                        @Override
                        public String getDigestAlgorithmForTimeStampProperties() {
                            return digestUrn;
                        }

                        @Override
                        public Algorithm getCanonicalizationAlgorithmForSignature()
                        {
                            return new ExclusiveCanonicalXMLWithoutComments();
                        }

                        @Override
                        public Algorithm getCanonicalizationAlgorithmForTimeStampProperties()
                        {
                            return new ExclusiveCanonicalXMLWithoutComments();
                        }
                    });

            // 4. Подпись.

            final XadesSigner signer = sigProf.newSigner();

            final DataObjectDesc dataObj = new DataObjectReference(referenceURI);
            dataObj.withTransform(new EnvelopedSignatureTransform());

            final SignedDataObjects dataObjects = new SignedDataObjects(dataObj);

            signer.sign(dataObjects, nodeToSign);
            System.out.println("XAdES-T signature completed.");

            soapMessage.saveChanges();
            return soapMessage;
    }

   /**
     * Устанавливаем подпись на документе, предварительно создем WSSSecurity
     * @param in_path
     * @param file_name
     * @param in_jsp 
     */
    static public void Set_Sign_Soap_Message(String in_path, String file_name, C_JCP in_jsp, boolean set_sign_final_payment) {
        try {

            FileInputStream is = new FileInputStream(in_path+file_name);
            MessageFactory messageFactory = MessageFactory.newInstance();
            SOAPMessage mf = messageFactory.createMessage();
            mf.getSOAPPart().setContent(new StreamSource(is));
            
            // Ставим подпись на элементе
            if (set_sign_final_payment){
                    //mf = Set_sign_Element(mf, "FinalPayment",  in_jsp);
                    mf = Set_sign_Element_XAdES_ver_Crypto(mf, "FinalPayment",  in_jsp);
            }
            
            // Prepare secured header
            mf.getSOAPPart().getEnvelope().addNamespaceDeclaration("wsse", "http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd");
            mf.getSOAPPart().getEnvelope().addNamespaceDeclaration("wsu", "http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd");
            mf.getSOAPPart().getEnvelope().addNamespaceDeclaration("ds", "http://www.w3.org/2000/09/xmldsig#");
            mf.getSOAPBody().setAttributeNS("http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd", "wsu:Id","body");
            
            WSSecHeader header = new WSSecHeader();
            header.setActor("http://smev.gosuslugi.ru/actors/smev");
            header.setMustUnderstand(false);
            
            Element sec = header.insertSecurityHeader(mf.getSOAPPart());
            Document doc = mf.getSOAPPart().getEnvelope().getOwnerDocument();
            
            Element token =(Element) sec.appendChild(doc.createElementNS("http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd", "wsse:BinarySecurityToken")); 
            token.setAttribute("EncodingType", "http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-soap-message-security-1.0#Base64Binary");
            token.setAttribute("ValueType", "http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-x509-token-profile-1.0#X509v3");
            token.setAttribute("wsu:Id", "CertId");
            
            
            
            com.sun.org.apache.xml.internal.security.Init.init();
                    
                    // Инициализация JCP XML провайдера.
                    if(!JCPXMLDSigInit.isInitialized()) {
                        JCPXMLDSigInit.init();
                    }

            // Инициализация ключевого контейнера.
            KeyStore keyStore = KeyStore.getInstance(JCP.HD_STORE_NAME);
            keyStore.load(null, null);

            // Получение ключа и сертификата.
            PrivateKey privateKey = in_jsp.Get_PrivateKey();
            X509Certificate cert = in_jsp.Get_sert();
            // Prepare signature provider
            Provider xmlDSigProvider = new ru.CryptoPro.JCPxml.dsig.internal.dom.XMLDSigRI();
            //setSAMdata(null, ru.utility.SpecUtility.DEFAULT_PASSWORD, ru.utility.SpecUtility.DEFAULT_ALIAS, ru.utility.SpecUtility.DEFAULT_PASSWORD);
            final Transforms transforms = new Transforms(doc);
            XMLSignatureFactory fac = XMLSignatureFactory.getInstance("DOM", xmlDSigProvider);


                    
            List<Transform> transformList = new ArrayList<Transform>();
            Transform transformC14N = fac.newTransform(Transforms.TRANSFORM_C14N_EXCL_OMIT_COMMENTS, (XMLStructure) null);
            transformList.add(transformC14N);
                    
                    
            //Reference ref = fac.newReference("#body", fac.newDigestMethod("http://www.w3.org/2001/04/xmldsig-more#gostr3411", null));
                    Reference ref = fac.newReference("#body", fac.newDigestMethod("http://www.w3.org/2001/04/xmldsig-more#gostr3411", null),
               //     null,null,null );
                     transformList, null,null );
                    
            // Make link to signing element
            SignedInfo si = fac.newSignedInfo( fac.newCanonicalizationMethod(CanonicalizationMethod.EXCLUSIVE, 
                                                     (C14NMethodParameterSpec) null),
                                                     
            fac.newSignatureMethod("http://www.w3.org/2001/04/xmldsig-more#gostr34102001-gostr3411", null),
                                                        Collections.singletonList(ref));
            
            //transforms.addTransform(Transforms.TRANSFORM_C14N_EXCL_OMIT_COMMENTS);

                    
            // Prepare key information to verify signature in future on other side
            KeyInfoFactory kif = fac.getKeyInfoFactory();
            X509Data x509d = kif.newX509Data(Collections.singletonList(cert));
            KeyInfo ki = kif.newKeyInfo(Collections.singletonList(x509d));
            
            // Create signature and sign by private key
            javax.xml.crypto.dsig.XMLSignature sig = fac.newXMLSignature(si, ki);
            DOMSignContext signContext = new DOMSignContext(privateKey, token);
            
            sig.sign(signContext);
            

            // Insert signature node in document
            Element sigE = (Element) XPathAPI.selectSingleNode(signContext.getParent(), "//ds:Signature");
            Node keyE = (Node) XPathAPI.selectSingleNode(sigE, "//ds:KeyInfo", sigE);
            token.appendChild(doc.createTextNode(XPathAPI.selectSingleNode(keyE, "//ds:X509Certificate", keyE).getFirstChild().getNodeValue()));
            keyE.removeChild(XPathAPI.selectSingleNode(keyE, "//ds:X509Data", keyE));
            NodeList chl = keyE.getChildNodes();
            
            for (int i = 0; i < chl.getLength(); i++) {
                keyE.removeChild(chl.item(i));
            }
            
            Node str = (Node) keyE.appendChild(doc.createElementNS("http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd", "wsse:SecurityTokenReference"));
            Element strRef = (Element)str.appendChild(doc.createElementNS("http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd", "wsse:Reference"));
            
            strRef.setAttribute("ValueType", "http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-x509-token-profile-1.0#X509v3");
            strRef.setAttribute("URI", "#CertId");
            header.getSecurityHeader().appendChild(sigE);
           
            mf.saveChanges();
            FileOutputStream f_out = new FileOutputStream(in_path+file_name);
            mf.writeTo(f_out);
            f_out.close();
            
            
        } catch (Exception ex) {
            Logger.getLogger(frm_main.class.getName()).log(Level.SEVERE, null, ex);
        }

    }