(Node.js) Create CAdES-T Signature using Aruba TSA Server (servizi.arubapec.it)

Demonstrates how to create a signature with an external timestamp (using the Aruba TSA Server) that certifies the time of signing.

Note: This example requires Chilkat v9.5.0.79 or greater.

Install Chilkat for Node.js and Electron using npm at Chilkat npm packages for Node.js Chilkat npm packages for Electron on Windows, Linux, MacOSX, and ARM

var os = require('os');
if (os.platform() == 'win32') {  
    if (os.arch() == 'ia32') {
        var chilkat = require('@chilkat/ck-node21-win-ia32');
    } else {
        var chilkat = require('@chilkat/ck-node21-win64'); 
    }
} else if (os.platform() == 'linux') {
    if (os.arch() == 'arm') {
        var chilkat = require('@chilkat/ck-node21-arm');
    } else if (os.arch() == 'x86') {
        var chilkat = require('@chilkat/ck-node21-linux32');
    } else {
        var chilkat = require('@chilkat/ck-node21-linux64');
    }
} else if (os.platform() == 'darwin') {
    if (os.arch() == 'arm64') {
        var chilkat = require('@chilkat/ck-node21-mac-m1');
    } else {
        var chilkat = require('@chilkat/ck-node21-macosx');
    }
}

function chilkatExample() {

    // This example requires the Chilkat API to have been previously unlocked.
    // See Global Unlock Sample for sample code.

    var crypt = new chilkat.Crypt2();

    // This example will use a certificate + private key from a .pfx/.p12 file.
    // On Windows systems, it is also possible to use certs on smartcards/usb tokens or certs pre-installed in the Windows registry.
    var cert = new chilkat.Cert();

    var pfxPath = "qa_data/pfx/myCertAndKey.p12";
    var pfxPassword = "test123";

    var success = cert.LoadPfxFile(pfxPath,pfxPassword);
    if (success !== true) {
        console.log(cert.LastErrorText);
        return;
    }

    success = crypt.SetSigningCert(cert);

    // Use SHA-256 rather than the default of SHA-1
    crypt.HashAlgorithm = "sha256";

    // Create JSON that tells Chilkat what signing attributes to include:
    var attrs = new chilkat.JsonObject();
    attrs.UpdateBool("contentType",true);
    attrs.UpdateBool("signingTime",true);
    attrs.UpdateBool("messageDigest",true);
    attrs.UpdateBool("signingCertificateV2",true);

    // A CAdES-T signature is one that includes a timestampToken created by an online TSA (time stamping authority).
    // We must include the TSA's URL, as well as a few options to indicate what is desired.
    // This example uses the Aruba TSA server, which requires a login/password for the HTTPS request.
    attrs.UpdateBool("timestampToken.enabled",true);
    attrs.UpdateString("timestampToken.tsaUrl","https://servizi.arubapec.it/tsa/ngrequest.php");

    // The tsaUsername/tsaPassword feature was added in Chilkat v9.5.0.79.
    // Make sure you are using a version of Chilkat that is no older than v9.5.0.79
    attrs.UpdateString("timestampToken.tsaUsername","arubaTsaUsername");
    attrs.UpdateString("timestampToken.tsaPassword","arubaTsaPassword");

    attrs.UpdateBool("timestampToken.addNonce",false);
    attrs.UpdateBool("timestampToken.requestTsaCert",true);
    attrs.UpdateString("timestampToken.hashAlg","sha256");

    crypt.SigningAttributes = attrs.Emit();

    var inFile = "qa_data/json/sample.json";
    var outFile = "qa_output/sample_cades_t.p7m";

    // This creates the CAdES-T signature.  During the signature creation, it
    // communicates with the TSA to get a timestampToken.
    success = crypt.CreateP7M(inFile,outFile);
    if (success !== true) {
        console.log(crypt.LastErrorText);
        return;
    }

    console.log("Success.");

}

chilkatExample();