search

intoolswetrust / jsignpdf

PDF signing software written in Java. It supports visible signatures, timestamping, certificate verification and many other cool features
https://intoolswetrust.github.io/jsignpdf/
Other
308 stars 118 forks source link

Remote signatures via a web API #20

Open dancvrcek opened 6 years ago

dancvrcek commented 6 years ago

Hi,

we are building a test system for a large university, where they need to isolate RSA keys they use to sign PDF documents. There is a RESTful API, which can be used to get certificates, do signatures, ...

What would be the best way to integrate jsignpdf with this "remote signing"?

I look forward to and will greatly appreciate any help, views!

Dan

kwart commented 6 years ago

For building such a system I would recommend using some library and integrating just the workflows you need.

Look into this stackoverflow answer for a list of such libraries: https://stackoverflow.com/a/21007985/653069

The JSignPdf uses a fork of an old version of iText library which had a friendly opensource licensing in that times. You can find it in the jsignpdf-itxt subfolder of the project, but it's outdated/not actively maintained. But again, I recommend using an up-to-date library.

dancvrcek commented 6 years ago

well, the guys have already been using jsignpdf so their preferred option is to stick with it, if possible.

Do I understand correctly that you don't think this would be quite of interest for your application?

One more - I noticed that jsignpdf already has a TSA client, so I'd like to assume that our remote signing could be done in a similar fashion? ... if we decide to walk the walk ourselves?

Thanks so much for your thoughts, much appreciated!