topic Re: How to generate Key, Alias and Pswd for digital signature? in Alfresco Forum

How to generate Key, Alias and Pswd for digital signature?

Martinvaz — Wed, 29 Apr 2020 23:49:23 GMT

Hi everybody!

I was talking with @EddieMay on other thread, wich was really helpful
What Im facing now is that I dont know how to create or generate the PK, alias and password for e-sign

I've installed pdf toolkit 1.4.0 both amp and amp_share file
The option for signing the doc appears, but it asks me for a key, a alias and a password, and I have no clue where to begin or how 😕

Any help will be much appreciated!

Re: How to generate Key, Alias and Pswd for digital signature?

angelborroy — Thu, 30 Apr 2020 07:05:41 GMT

That kind of signature could not be legal in your country, as it's based on a server side certificate that is stored by the user on the repository. When the user signs a document, a password is required in order to perform the signature on the server side.

Anyway, if you feel this is a legal method in your country, you need to create a Java Keystore with the user certificate inside. This link could help you: https://www.sslmarket.es/ssl/help-trabajar-con-los-certificados-en-java-keystore/

Re: How to generate Key, Alias and Pswd for digital signature?

Martinvaz — Thu, 30 Apr 2020 10:55:35 GMT

Thanks for te reply @angelborroy

I didn't know about the legal issue. I live in Argentina.

So, what other method can I use to sign documents? The idea is when a workflow begins and passes by management or administration, the person in charge can sign it.

Do you know a better alternative? I've tried with PDF Toolkit, but it gets stuck when hitting the button.

Regards,

Re: How to generate Key, Alias and Pswd for digital signature?

angelborroy — Thu, 30 Apr 2020 12:19:04 GMT

You can try this one:

https://github.com/keensoft/alfresco-esign-cert

It was developed according to Spain laws. I guess Argentina's laws are based in this one.

Re: How to generate Key, Alias and Pswd for digital signature?

Martinvaz — Thu, 30 Apr 2020 12:42:17 GMT

Whenever I tried to download the amp repo and amp share file it says page not found.

What i did instal was the amp repo and amp share from alfresco-firma-pdf

The path where i've installed them is /var/www/html/alfresco/amps & var/www/html/alfresco/amps_share

Those were the only files i've installed, and then ran the apply.sh.
The red button to sign pdf appears, but it gets stuck loading for hours and do nothing.

----------------x------------------

On another VM I've installed pdf toolkit 1.4.0 amp and amp_share, and there is where it asks me for the key, alias, etc

--------------x---------------------

I'm sorry if my question is noob, but this is the one and only thing missing to get Alfresco correctly running.
I can now see you are the repo owner, could you give me a hand by telling me, what are the files that i need to install?

Thanks for your help!

Re: How to generate Key, Alias and Pswd for digital signature?

angelborroy — Thu, 30 Apr 2020 13:15:08 GMT

You need to download the AMPS from this page:

https://github.com/keensoft/alfresco-esign-cert/releases

As you are using Alfresco 5.x, you need 1.7.2 release.

Once the AMPS are installed, you need a local program named AutoFirma available in https://firmaelectronica.gob.es/Home/Descargas.html

When you hit the button in Alfresco Share, AutoFirma local program is fired and you can choose a certificate in order to sign the document. The document is signed in locally in your computer and send to Alfresco for storage.

Re: How to generate Key, Alias and Pswd for digital signature?

Martinvaz — Thu, 30 Apr 2020 14:12:25 GMT

Well, I've just downloaded and copyed the share and amp files in their respective directories

What I can't do is install AutoFirma.
I've downloaded for Linux, since im inside de VM, and it comes in two parts. AutoFirma_Linux.zip.part and AutoFirma_Linux.zip.

Do I need to unzip them or just let them in the download directory? I've tried unzip -q but wont let me..

How do I install it?

The button for sign pdf now appears with 3 fields: position, choose page, singature purpouse

Edit: do i need to have java installed? if i do a java -version it shows me it's not installed

Re: How to generate Key, Alias and Pswd for digital signature?

angelborroy — Thu, 30 Apr 2020 14:47:24 GMT

You need to install AutoFirma in your client machine, not in the server.

Every user needs to install AutoFirma in their own PC.

Re: How to generate Key, Alias and Pswd for digital signature?

Martinvaz — Thu, 30 Apr 2020 15:00:23 GMT

Understood!

Now I asume I need to generate my own certificate, right? SSL?

How do I do that? Need I do it from the server (inside the VM) or in my Windows environment?

Is it hard to create or generate a certificate?

Re: How to generate Key, Alias and Pswd for digital signature?

angelborroy — Thu, 30 Apr 2020 16:11:42 GMT

You can try using keytool:

https://docs.oracle.com/cd/E19798-01/821-1841/gjrgy/

Re: How to generate Key, Alias and Pswd for digital signature?

Martinvaz — Fri, 01 May 2020 00:04:32 GMT

Many thanks Angel, will give it a shot tomorrow.

I'll let you know how it goes.

Regards

Re: How to generate Key, Alias and Pswd for digital signature?

Martinvaz — Fri, 01 May 2020 13:50:55 GMT

Hello @angelborroy happy labor day!!

I believe i got it working.

I could sign a PDF with Autofirma with my key stored on local.key (a dir I chosen), but I did this in my pc, locally.

If i want to drop a PDF to Alfresco and hit the "Sign Document" i don't see the options I see in AutoFirma

Supouse I drag an electronic bill that needs to be signed, I it sign pdf an this appears

Is there a way to sign inside Alfresco? Or as Im as and Administrator I cant see the chocie?

Re: How to generate Key, Alias and Pswd for digital signature?

Martinvaz — Mon, 04 May 2020 12:10:46 GMT

Hi @angelborroy

What I posted below is it ok? is there a way to sign a document inside Alfresco as shown in the picture i put above?

Whe hit the button, those are the options I have, and it keeps on loading like waiting for someting.

The doc has already been signed with AutoFirma, but inside Alfresco, I can not make it work

Re: How to generate Key, Alias and Pswd for digital signature?

angelborroy — Mon, 04 May 2020 12:14:48 GMT

I don't know what you mean...

Did you see this video?

https://www.youtube.com/watch?v=Ho8gKwAyfLE

Did you read project documentation in order to understand the different configuration options?

https://github.com/keensoft/alfresco-esign-cert#configuration

Re: How to generate Key, Alias and Pswd for digital signature?

Martinvaz — Mon, 04 May 2020 12:27:35 GMT

Yes, I've seen the video and now realized I dont have those files on global.properties.

The problem is when i hit the sign pdf document inside Alfresco, it keeps loading and loading. Could that be the readon

It wont allow me to move forward as it keeps loading

There's no advertisement, just keeps loading

Re: How to generate Key, Alias and Pswd for digital signature?

Martinvaz — Mon, 04 May 2020 13:05:19 GMT

@angelborroyI'll put step by step what i've done so far so you can get the whole picture (I will write in spanish, if it's need to be modified or translatded, no problem)

1- Instalacion Alfresco 5.2 en Ubuntu 18.04 en VirtualBox

2- Copia de AMP y APMP_share 1.7.2 en sus dirctorios

3- Instalacion cliente AutoFirma en pc local

4- Generacion de la cclave con Toolkit

5- Copiar y pegar los parametros correspondientes en alfresco-global.properties

6- Puedo firmar un documento localemente en Windows con AutoFirma y mi certificado

EL problema es que cuando quiero firmar con el boton "firmar pdf" se queda cargando esperando el componente de firma y el aviso de seguridad, y eso es lo que no aparece.

A esto me refiero:

Espero se haya entendido donde esta la traba!

Muchas gracias.-

Re: How to generate Key, Alias and Pswd for digital signature?

angelborroy — Mon, 04 May 2020 14:03:18 GMT

Try browser Debugger Console to find the problem.

Re: How to generate Key, Alias and Pswd for digital signature?

Martinvaz — Mon, 04 May 2020 14:24:15 GMT

This is what I see

But how is this related with signing the document?

Re: How to generate Key, Alias and Pswd for digital signature?

angelborroy — Mon, 04 May 2020 14:30:33 GMT

The application is being fired by using a local protocol. You need to disable CORS in order to allow the application to be launched from the browser.

Re: How to generate Key, Alias and Pswd for digital signature?

Martinvaz — Mon, 04 May 2020 14:40:42 GMT

I've been reading in stackoverflow and other forums and see no way to disabl CORS in Firefox (the browser i user in th VM)

Is there a flag or something to disable it?