(CkPython) Sign PDF using ARSS (Aruba Remote Signing Service)

See more Signing in the Cloud Examples

Demonstrates how to sign a PDF using the Aruba Remote Signing Service (ARSS).

Note: This example requires Chilkat v9.5.0.96 or greater.

Chilkat Python Downloads install with pip pip3 install chilkat or download... Python Module for Windows, MacOS, Linux, Alpine Linux, Solaris

import sys
import chilkat

# This example requires the Chilkat API to have been previously unlocked.
# See Global Unlock Sample for sample code.

pdf = chilkat.CkPdf()

# Load a PDF to be signed.
success = pdf.LoadFile("qa_data/pdf/hello.pdf")
if (success == False):
    print(pdf.lastErrorText())
    sys.exit()

# Options for signing are specified in JSON.
json = chilkat.CkJsonObject()

# Indicate that we want an LTV-enabled signature
json.UpdateBool("ltvOcsp",True)

# Define the appearance of the signature.
json.UpdateInt("page",1)
json.UpdateString("appearance.y","top")
json.UpdateString("appearance.x","left")
json.UpdateString("appearance.fontScale","10.0")
json.UpdateString("appearance.text[0]","Digitally signed by: cert_cn")
json.UpdateString("appearance.text[1]","current_dt")
json.UpdateString("appearance.text[2]","This is an LTV-enabled signature.")

# Load the certificate used for signing.  The certificate's private key is stored on 
# the Aruba.it server and the signing will happen remotely using the
# ARSS (Aruba Remote Signing Service).
# However, we still need the certificate locally (without private key).
cert = chilkat.CkCert()
success = cert.LoadFromFile("qa_data/certs/myCert.cer")
if (success == False):
    print(cert.lastErrorText())
    sys.exit()

# To sign using the Aruba Remote Signing Service, 
# add the following lines of code to specify your authentication credentials,
# and the ID of the certificate w/ private key on the server to be used.
jsonArss = chilkat.CkJsonObject()

# Set the "service" equal to "ARSS" to tell Chilkat to use ARSS for signing.
jsonArss.UpdateString("service","ARSS")
# Specify the certificate ID, such as "AS0"
# This certificate should match the certificate loaded in the above code.
jsonArss.UpdateString("certID","YOUR_ARSS_CERT_ID")
jsonArss.UpdateString("otpPwd","YOUR_OTP_PWD")
jsonArss.UpdateString("typeOtpAuth","demoprod")
jsonArss.UpdateString("user","YOUR_ARSS_USERNAME")
jsonArss.UpdateString("userPWD","YOUR_ARSS_PASSWORD")
success = cert.SetCloudSigner(jsonArss)

# Tell the pdf object to use the certificate for signing.
success = pdf.SetSigningCert(cert)
if (success == False):
    print(pdf.lastErrorText())
    sys.exit()

# Chilkat will build the signed PDF locally, but will (internally) use ARSS
# to do the RSA sign hash operation.
success = pdf.SignPdf(json,"qa_output/hello_ltv_signed.pdf")
if (success == False):
    print(pdf.lastErrorText())
    sys.exit()

print("The PDF has been successfully cryptographically signed with long-term validation.")