(Go) Sign PDF using ARSS (Aruba Remote Signing Service)

See more Signing in the Cloud Examples

Demonstrates how to sign a PDF using the Aruba Remote Signing Service (ARSS).

Note: This example requires Chilkat v9.5.0.96 or greater.

Chilkat Go Downloads Go Package for Windows, MacOS, Linux, Alpine Linux, Solaris

    // This example requires the Chilkat API to have been previously unlocked.
    // See Global Unlock Sample for sample code.

    pdf := chilkat.NewPdf()

    // Load a PDF to be signed.
    success := pdf.LoadFile("qa_data/pdf/hello.pdf")
    if success == false {
        fmt.Println(pdf.LastErrorText())
        pdf.DisposePdf()
        return
    }

    // Options for signing are specified in JSON.
    json := chilkat.NewJsonObject()

    // Indicate that we want an LTV-enabled signature
    json.UpdateBool("ltvOcsp",true)

    // Define the appearance of the signature.
    json.UpdateInt("page",1)
    json.UpdateString("appearance.y","top")
    json.UpdateString("appearance.x","left")
    json.UpdateString("appearance.fontScale","10.0")
    json.UpdateString("appearance.text[0]","Digitally signed by: cert_cn")
    json.UpdateString("appearance.text[1]","current_dt")
    json.UpdateString("appearance.text[2]","This is an LTV-enabled signature.")

    // Load the certificate used for signing.  The certificate's private key is stored on 
    // the Aruba.it server and the signing will happen remotely using the
    // ARSS (Aruba Remote Signing Service).
    // However, we still need the certificate locally (without private key).
    cert := chilkat.NewCert()
    success = cert.LoadFromFile("qa_data/certs/myCert.cer")
    if success == false {
        fmt.Println(cert.LastErrorText())
        pdf.DisposePdf()
        json.DisposeJsonObject()
        cert.DisposeCert()
        return
    }

    // To sign using the Aruba Remote Signing Service, 
    // add the following lines of code to specify your authentication credentials,
    // and the ID of the certificate w/ private key on the server to be used.
    jsonArss := chilkat.NewJsonObject()

    // Set the "service" equal to "ARSS" to tell Chilkat to use ARSS for signing.
    jsonArss.UpdateString("service","ARSS")
    // Specify the certificate ID, such as "AS0"
    // This certificate should match the certificate loaded in the above code.
    jsonArss.UpdateString("certID","YOUR_ARSS_CERT_ID")
    jsonArss.UpdateString("otpPwd","YOUR_OTP_PWD")
    jsonArss.UpdateString("typeOtpAuth","demoprod")
    jsonArss.UpdateString("user","YOUR_ARSS_USERNAME")
    jsonArss.UpdateString("userPWD","YOUR_ARSS_PASSWORD")
    success = cert.SetCloudSigner(jsonArss)

    // Tell the pdf object to use the certificate for signing.
    success = pdf.SetSigningCert(cert)
    if success == false {
        fmt.Println(pdf.LastErrorText())
        pdf.DisposePdf()
        json.DisposeJsonObject()
        cert.DisposeCert()
        jsonArss.DisposeJsonObject()
        return
    }

    // Chilkat will build the signed PDF locally, but will (internally) use ARSS
    // to do the RSA sign hash operation.
    success = pdf.SignPdf(json,"qa_output/hello_ltv_signed.pdf")
    if success == false {
        fmt.Println(pdf.LastErrorText())
        pdf.DisposePdf()
        json.DisposeJsonObject()
        cert.DisposeCert()
        jsonArss.DisposeJsonObject()
        return
    }

    fmt.Println("The PDF has been successfully cryptographically signed with long-term validation.")

    pdf.DisposePdf()
    json.DisposeJsonObject()
    cert.DisposeCert()
    jsonArss.DisposeJsonObject()