Can we digitally sign the document with every signing user having his/her own certificates ?

As we transition to the new Hyland Community, some post links may be temporarily disrupted as we finalize redirects. We apologize for the inconvenience and are working to resolve this as quickly as possible. Details.

catherine_

We are using the nuxeo digital signatures addon to sign the pdf documents. We configured the keystore as follows:

 < extension target="org.nuxeo.ecm.platform.signature.api.pki.RootService"  point="rootconfig">
  < configuration >
    < rootKeystoreFilePath>D:/recm/keystore/SecKeys.jks< /rootKeystoreFilePath>
    < rootKeystorePassword>secretpassword</rootKeystorePassword >
    < rootCertificateAlias>my_alias< /rootCertificateAlias>
    < rootKeyAlias>my_alias< /rootKeyAlias>
    < rootKeyPassword>secretpassword< /rootKeyPassword>
  < /configuration>
 < /extension>

Everything works as great as expected. With the above configuration , i am able to sign the document with the same certificate for every user.i.e every document gets signed with the root certificate alias , my_alias. But if i have multiple users , and i want that every signing user should be able to sign with his/her own certificates ,then , how can i achieve this? It would be great help if someone answers my question .Thanks in advance 🙂

Florent_Guillau

The Nuxeo Digital Signature addon does not do what you describe. This is the reality:

• the configuration file you describe is not for configuring a signing key, but for configuring a root certificate used to generate per-user keys,
• each user has his own key, generated by the system for him, and itself signed by the root certificate.