Caused by: java.lang.NullPointerException: digest OID is null
    at org.bouncycastle.operator.DefaultDigestAlgorithmIdentifierFinder.find(Unknown Source)
    at org.bouncycastle.operator.DefaultDigestAlgorithmIdentifierFinder.find(Unknown Source)
    at org.bouncycastle.cms.SignerInfoGeneratorBuilder.createGenerator(Unknown Source)
    at org.bouncycastle.cms.SignerInfoGeneratorBuilder.build(Unknown Source)
    ... 30 more

Java                            : temurin21-jdk:21.0.9_10-debian-upd7
CryptoPro                       : 2.0.42119-A
org.bouncycastle:bcpkix-jdk18on : 1.78.1
org.bouncycastle:bcprov-jdk18on : 1.78.1

var cert0 = (X509Certificate) hdImageStore.getCertificate(alias);
var cert1 = (X509Certificate) null;
var cert2 = (X509Certificate) null;

try (
    var cert1Is = FileResourceUtils.readResourceAsInputStream("certs/kontur-q-2025.crt");
    var cert2Is = FileResourceUtils.readResourceAsInputStream("certs/guc2022.crt");
) {
    cert1 = (X509Certificate) CertificateFactory.getInstance("X.509").generateCertificate(cert1Is);
    cert2 = (X509Certificate) CertificateFactory.getInstance("X.509").generateCertificate(cert2Is);
}

var certificateChain = new Certificate[]{ cert0, cert1, cert2 };

var x509CertificateChain = new X509Certificate[certificateChain.length];

for (int i = 0; i < certificateChain.length; i++) {
    x509CertificateChain[i] = (X509Certificate) certificateChain[i];
}

var privateKey = (PrivateKey) hdImageStore.getKey(alias, password);

var algorithm = privateKey.getAlgorithm();

var cadesSignature = new CAdESSignature(true);

cadesSignature.setOptions((new Options()).disableCertificateValidation());

cadesSignature.addSigner(
    JCP.PROVIDER_NAME,
    AlgorithmUtility.keyAlgToDigestOid(algorithm),       // 1.2.643.7.1.1.2.2
    AlgorithmUtility.keyAlgToKeyAlgorithmOid(algorithm), // 1.2.643.7.1.1.1.1
    privateKey,
    Arrays.asList(x509CertificateChain),
    CAdESType.CAdES_BES,
    null,
    false
);

var baos = new ByteArrayOutputStream();

cadesSignature.open(baos);
cadesSignature.update(data);
cadesSignature.close();

baos.close();