topic Can we digitally sign the document with every signing user having his/her own certificates ? in Nuxeo Forum

Can we digitally sign the document with every signing user having his/her own certificates ?

catherine_ — Tue, 07 May 2013 05:48:53 GMT

We are using the nuxeo digital signatures addon to sign the pdf documents. We configured the keystore as follows:

 < extension target="org.nuxeo.ecm.platform.signature.api.pki.RootService"  point="rootconfig">
  < configuration >
    < rootKeystoreFilePath>D:/recm/keystore/SecKeys.jks< /rootKeystoreFilePath>
    < rootKeystorePassword>secretpassword</rootKeystorePassword >
    < rootCertificateAlias>my_alias< /rootCertificateAlias>
    < rootKeyAlias>my_alias< /rootKeyAlias>
    < rootKeyPassword>secretpassword< /rootKeyPassword>
  < /configuration>
 < /extension>

Everything works as great as expected. With the above configuration , i am able to sign the document with the same certificate for every user.i.e every document gets signed with the root certificate alias , my_alias. But if i have multiple users , and i want that every signing user should be able to sign with his/her own certificates ,then , how can i achieve this? It would be great help if someone answers my question .Thanks in advance 🙂

Re: Can we digitally sign the document with every signing user having his/her own certificates ?

Florent_Guillau — Mon, 13 May 2013 19:05:07 GMT

The Nuxeo Digital Signature addon does not do what you describe. This is the reality:

the configuration file you describe is not for configuring a signing key, but for configuring a root certificate used to generate per-user keys,
each user has his own key, generated by the system for him, and itself signed by the root certificate.

Re: Can we digitally sign the document with every signing user having his/her own certificates ?

catherine_ — Thu, 16 May 2013 14:27:19 GMT

Thank you Florent for your response.You have always replied to our queries

Re: Can we digitally sign the document with every signing user having his/her own certificates ?

Souvik_ — Fri, 19 Aug 2016 20:34:52 GMT

Hi Florent, That means in multi-tenancy environment also a single certificate will be used. But user will get their own certificates based on the main certificate.