ESYAE-imza Kütüphaneleri

Bu sayfa salt okunur. Kaynağı görebilirsiniz ama değiştiremezsiniz. Bunun yanlış olduğunu düşünüyorsanız yöneticiye danışın.

<h1>API Configuration</h1>
<div class="level1">

<p>
A sample configuration file is coming with ESYA Signature API. By editing this file, signature creation and verification settings can be specified and modified at run-time.
</p>

</div>

<h2>Language Settings</h2>
<div class="level2">

<p>
Specifies the language of the API messages.
</p>

<p>
<em><</em>sxh xml>
<em><</em>locale language="tr" country="TR"/>
<em><</em>/sxh>
</p>

</div>

<h2>HTTP and Proxy Settings</h2>
<div class="level2">

<p>
If the API runs behind a proxy server, then the http settings take place in this section
</p>

<p>
<em><</em>sxh xml>
<em><</em>http>
</p>
<pre class="code">  &lt;proxy-host&gt;&lt;/proxy-host&gt;
  &lt;proxy-port&gt;&lt;/proxy-port&gt;
  &lt;proxy-username&gt;&lt;/proxy-username&gt;
  &lt;proxy-password&gt;&lt;/proxy-password&gt;
  &lt;basic-authentication-username&gt;&lt;/basic-authentication-username&gt;
  &lt;basic-authentication-password&gt;&lt;/basic-authentication-password&gt;
  &lt;connection-timeout-in-milliseconds&gt;2000&lt;/connection-timeout-in-milliseconds&gt;

</pre><p> </p>

<p>
<em><</em>/http>
<em><</em>/sxh>
</p>

</div>

<h2>Timestamp Server</h2>
<div class="level2">

<p>
If the signature type is more advanced than the basic electronic signature (ES-BES), then it includes one or more timestamps. Thetimestamp related configuration (i.e timestamp server address etc.) can be performed here.
You can leave fields <code>userid-passwords</code> empty if you are using a timestamp server other than ESYA Timestamp Server.
</p>

<p>
<em><</em>sxh xml>
<em><</em>timestamp-server>
</p>
<pre class="code">  &lt;!-- leave userid/password blank for public services! --&gt;
  &lt;host&gt;http://10.3.0.21&lt;/host&gt;
  &lt;userid&gt;1&lt;/userid&gt;
  &lt;password&gt;12345678&lt;/password&gt;
  &lt;digest-alg&gt;SHA-1&lt;/digest-alg&gt;

</pre><p> </p>

<p>
<em><</em>/timestamp-server>
<em><</em>/sxh>
</p>

</div>

<h2>Algorithms</h2>
<div class="level2">

<p>
The digest algorithm to be used when creating hash of the content to be signed is determined by <code>digest-alg</code>.
<code>signature-alg</code> parameter defines the signature algorithm.
</p>

<p>
<em><</em>sxh xml>
<em><</em>algorithms>
</p>
<pre class="code">  &lt;digest-alg&gt;SHA-256&lt;/digest-alg&gt;
  &lt;signature-alg&gt;RSA-with-SHA256&lt;/signature-alg&gt;

</pre><p> </p>

<p>
<em><</em>/algorithms>
<em><</em>/sxh>
</p>

</div>

<h2>Certificate Validation</h2>
<div class="level2">

<p>
Certificate validation parameters are defined within the tag <code><em><</em>certificate-validation></code>
Those parameters are:
</p>

<span class='np_break'> </span>
<div class="table"><table class="inline">
	<tr class="row0">
		<th class="col0"> certificate-validation-policy-file </th><td class="col1"> certificate validation policy file.  used as default if the attribute 'for' is not used. This attribute can be assigned as <code>QualifiedCertificate</code>, <code>MaliMuhurCertificate</code>, <code>TimeStampingCertificate</code> to define a policy file according to the certificate type. </td>
	</tr>
	<tr class="row1">
		<th class="col0"> grace-period-in-seconds </th><td class="col1 leftalign"> The minimum required time the CRL(Certificate Revocation List) must be created after the certificate validation time   </td>
	</tr>
	<tr class="row2">
		<th class="col0"> last-revocation-period-in-seconds </th><td class="col1"> the maximum time before which the crls published after the certificate validation time are considered as valid. </td>
	</tr>
	<tr class="row3">
		<th class="col0"> use-validation-data-published-after-creation </th><td class="col1"> The revocation info is required to be published after the signature creation time. </td>
	</tr>
	<tr class="row4">
		<th class="col0"> validate-certificate-before-signing </th><td class="col1"> Validate the signer certificate before signing. For example, you can set this false in order not to repeat validation of the user certificates unnecessarily if you validate once at  the system startup. </td>
	</tr>
</table>
<span class='np_break'> </span>
</div>
<p>
<em><</em>sxh xml>
<em><</em>certificate-validation>
</p>
<pre class="code">  &lt;certificate-validation-policy-file&gt;MA3/api-signature/testresources/certval-ug-policy.xml&lt;/certificate-validation-policy-file&gt;
  &lt;!-- possible types: {QualifiedCertificate, MaliMuhurCertificate, TimeStampingCertificate} --&gt;
  &lt;certificate-validation-policy-file for="MaliMuhurCertificate"&gt;//path/to/certval-mm-policy.xml&lt;/certificate-validation-policy-file&gt;

</pre><p> </p>
<pre class="code">  &lt;!-- 0 means ignore grace --&gt;
  &lt;grace-period-in-seconds&gt;86400&lt;/grace-period-in-seconds&gt;

</pre><p> </p>
<pre class="code">  &lt;!-- *100 for tests! --&gt;
  &lt;last-revocation-period-in-seconds&gt;17280000&lt;/last-revocation-period-in-seconds&gt;

</pre><p> </p>
<pre class="code">  &lt;!-- validation data must be published after creation ifs set true, requires grace period for signers --&gt;
  &lt;use-validation-data-published-after-creation&gt;false&lt;/use-validation-data-published-after-creation&gt;

</pre><p> </p>
<pre class="code">  &lt;validate-certificate-before-signing&gt;false&lt;/validate-certificate-before-signing&gt;

</pre><p> </p>

<p>
<em><</em>/certificate-validation>
<em><</em>/sxh>
</p>

</div>

<h2>Parameters</h2>
<div class="level2">

<p>
Diğer doğrulama parametreleri <code><em><</em>params></code>  tag'ı içinde belirtilir. Bunlar:
</p>

<p>
<b>force-strict-reference-use</b>: Yalnızca imza içindeki doğrulama verileri kullanılsın.
</p>

<p>
<b>check-policy-uri</b>: Politika temelli imzada imza içindeki politika bilgisinin belirtilen adreste yer alan polikanın özetini taşıdığından emin ol.
</p>

<p>
<b>validate-timestamp-while-signing</b>: İmza atılırken alınan zaman damgasını doğrula.
</p>

<p>
<b>write-referencedvalidationdata-to-file-on-upgrade</b>: İmza içindeki sertifika doğrulama bilgisini ayrıca dosyalara yaz. (Debug parametresi.)
</p>

<p>
<em><</em>sxh xml>
<em><</em>params>
</p>
<pre class="code">  &lt;!-- loosening below 2 settings will cause warnings instead of validation failure --&gt;
  &lt;!-- referenced validation data must be used for cert validation is set true --&gt;
  &lt;force-strict-reference-use&gt;false&lt;/force-strict-reference-use&gt;

</pre><p> </p>
<pre class="code">  &lt;!-- compare resolved policy with policy uri if indicated --&gt;
  &lt;check-policy-uri&gt;false&lt;/check-policy-uri&gt;

</pre><p> </p>
<pre class="code">  &lt;validate-timestamp-while-signing&gt;false&lt;/validate-timestamp-while-signing&gt;

</pre><p> </p>
<pre class="code">  &lt;!-- for debug purposes! --&gt;
  &lt;write-referencedvalidationdata-to-file-on-upgrade&gt;false&lt;/write-referencedvalidationdata-to-file-on-upgrade&gt;

</pre><p> </p>

<p>
<em><</em>/params>
<em><</em>/sxh>
</p>

</div>
ESYAE-imza Kütüphaneleri

User Tools

Site Tools

Page Tools
