creating worker in signserver

[Ayaz Kodiya]

hi

I'M creating worker in Admin-GUI in signserver. so, i created criptotokenp12 and pdfsigner. in this worker get some error. so, how to solve this error?

I Set Cripto properties is bellow:-

   **criptotokenp12(1):- **

                             Status of CryptoWorker with id 1 (CryptoTokenP12) is:

Worker status : Active
Token status : Active

Worker properties:
KEYSTORETYPE=PKCS12

  DEFAULTKEY=Signer 2

  KEYSTOREPATH=/home/dushyant/signserver/signserver-ce-4.0.0/res/test/dss10/dss10_signer2.p12

  KEYSTOREPASSWORD=foo123

  NAME=CryptoTokenP12

  IMPLEMENTATION_CLASS=org.signserver.server.signers.CryptoWorker

  CRYPTOTOKEN_IMPLEMENTATION_CLASS=org.signserver.server.cryptotokens.KeystoreCryptoToken

  TYPE=CRYPTO_WORKER

Authorized clients (serial number, issuer DN):

pdfsigner Set Properties Is :

       pdfsigner(1) :-

            Status of Signer with id 4 (PDFSigner) is:

Worker status : Offline
Token status : Active
Signings : 0

Errors:
- No signer certificate available
- Certificate chain not available

Worker properties:
ADD_VISIBLE_SIGNATURE=True

  CRYPTOTOKEN=CryptoTokenP12

  DIGESTALGORITHM=SHA1

  LOCATION=Stockholm

  IMPLEMENTATION_CLASS=org.signserver.module.pdfsigner.PDFSigner

  REASON=Officially issued document

  DEFAULTKEY=signer00003

  VISIBLE_SIGNATURE_PAGE=2

  VISIBLE_SIGNATURE_CUSTOM_IMAGE_PATH=C:\Dokumanlar\FOTO\Photos\15032009\100_3801.JPG

  TYPE=PROCESSABLE

  AUTHTYPE=NOAUTH

  NAME=PDFSigner

Authorized clients (serial number, issuer DN):

Signer certificate:
Error: No Signer Certificate have been uploaded to this signer.

I Haven't certificate. so, plz can you give me sign certificate name and chain certificate Name.

[Markus Kilås]

Hi Ayaz,

You can use a key and certificate from the dss10_signer2.p12 keystore as you have configured to use by your "CryptoTokenP12".
What you need to do is to configure the PDFSigner with the name of the key. This is done by setting the worker property DEFAULTKEY in the PDFSigner with the name of the key to use.
In the Admin GUI you can select "CryptoTokenP12" and then click on the "Crypto Token" tab to see the name (key alias) of the available keys and certificates.

Cheers,
Markus
PrimeKey Solutions

Save time and money with an Enterprise support subscription. Please see www.primekey.se for more information.
https://www.primekey.se/technologies/products-overview/
https://www.primekey.se/service-support/support/

[Ayaz Kodiya]

hi

My CryptoWorker is:-

Status of CryptoWorker with id 1 (CryptoTokenP12) is:
Worker status : Active
Token status : Active

Worker properties:
KEYSTORETYPE=PKCS12

  DEFAULTKEY=Signer 1

  KEYSTOREPATH=/home/dushyant/signserver/signserver-ce-4.0.0/res/test/dss10/dss10_signer1.p12

  KEYSTOREPASSWORD=foo123

  NAME=CryptoTokenP12

  IMPLEMENTATION_CLASS=org.signserver.server.signers.CryptoWorker

  CRYPTOTOKEN_IMPLEMENTATION_CLASS=org.signserver.server.cryptotokens.KeystoreCryptoToken

  TYPE=CRYPTO_WORKER

Authorized clients (serial number, issuer DN):

my signer is :-

In my PDFsigner! a worker status is offline. so, how can i active my worker status ?
and bellow this some errors so how can solve to it?

Status of Signer with id 2 (PDFSigner) is:
Worker status : Offline
Token status : Active
Signings : 0

Errors:
- No signer certificate available
- Certificate chain not available

Worker properties:
ADD_VISIBLE_SIGNATURE=True

  CRYPTOTOKEN=CryptoTokenP12

  DIGESTALGORITHM=SHA1

  LOCATION=Stockholm

  IMPLEMENTATION_CLASS=org.signserver.module.pdfsigner.PDFSigner

  NEXTCERTSIGNKEY=signer00004

  DEFAULTKEY=signer 1

  REASON=Officially issued document

  VISIBLE_SIGNATURE_CUSTOM_IMAGE_PATH=C:\Dokumanlar\FOTO\Photos\15032009\100_3801.JPG

  VISIBLE_SIGNATURE_PAGE=2

  TYPE=PROCESSABLE

  AUTHTYPE=NOAUTH

  NAME=PDFSigner

Authorized clients (serial number, issuer DN):

Signer certificate:
Error: No Signer Certificate have been uploaded to this signer.

[Ayaz Kodiya]

thank for the previous reply
above problem is solve.

i have a regarding for signserver question.

i using pdfsigner in signserver using webgui. but i wont to integration pdfsigner with JAVA API . so can you tell me where location of JAVA API.

[Markus Kilås]

Hi Ayaz,

Great that the problem was solved.

Generally it is a good idea to start a new thread for a new topic.

If you want to send PDF documents for signing from your own application you can for instance use the ClientWS web services API [1], the web server interfaces [2] or the old Signing and validation API [3].

The first two [1,2] are used by our Java client command line client, SignClient so you can have a look how it is used there: modules/SignServer-Client-CLI/. The last [3] is actually a Java API, not sure how up to date it is but it should be working. The project is SignServer-Client-SigningAndValidationAPI.

[1] https://www.signserver.org/doc/current/manual/integration.html#Client_Web_Service
[2] https://www.signserver.org/doc/current/manual/integration.html#Web_Server_Interface
[3] https://www.signserver.org/doc/current/manual/integration.html#SigningAndValidation_API

Cheers,
Markus

PrimeKey Solutions offers a commercial EJBCA & SignServer support subscription and training. Please see www.primekey.se or contact info@primekey.se for more information.
https://www.primekey.se/Services/Support/
https://www.primekey.se/Services/Training/

[Venkatesh Pendlikal]

how to set the default password for the certifcate and also configure this with the crypto token and make the time stamp signer to up?

[Markus Kilås]

Hi Venkatesh,

Please create a new topic for this question instead of commenting on this very old thread.

If you can also give a little bit more background on what you are trying to achieve. What have you already tried and what is the problem etc.

Cheers,
Markus