static CertificateUtils.SigningIdentity |
CertificateUtils.forRemoteKey(java.security.cert.Certificate[] certificateChain,
RemoteSigner remoteSigner) |
Builds a signing identity for a key that lives entirely in a remote
KMS (AWS KMS, Azure Key Vault, GCP Cloud KMS, or any signing service
reachable over the network) -- there is no local PrivateKey;
every signature is produced by calling remoteSigner.
|
static CertificateUtils.SigningIdentity |
CertificateUtils.loadFromPkcs11(java.io.File pkcs11ConfigFile,
char[] pin) |
Loads the first available private-key alias from a PKCS#11 token,
configured by a standard SunPKCS11 config file (the same
name=... / library=... / slot=... format
documented for -Djava.security.pkcs11.SunPKCS11.provider).
|
static CertificateUtils.SigningIdentity |
CertificateUtils.loadFromPkcs11(java.io.File pkcs11ConfigFile,
char[] pin,
java.lang.String alias) |
|
static CertificateUtils.SigningIdentity |
CertificateUtils.loadFromPkcs11(java.security.Provider pkcs11Provider,
char[] pin,
java.lang.String alias) |
|
static CertificateUtils.SigningIdentity |
CertificateUtils.loadFromPkcs12(java.io.File keystoreFile,
char[] password) |
Loads the first alias found in a PKCS#12 keystore (the common case for
a keystore that holds exactly one signing identity).
|
static CertificateUtils.SigningIdentity |
CertificateUtils.loadFromPkcs12(java.io.InputStream keystoreStream,
char[] password,
java.lang.String alias) |
Loads a specific alias from a PKCS#12 keystore.
|
VisibleSignatureOptions |
VisibleSignatureOptions.setSignatureImage(java.io.File imageFile) |
|
byte[] |
PdfSigner.sign(byte[] inputPdfBytes,
CertificateUtils.SigningIdentity identity,
SigningOptions options) |
Signs an in-memory PDF, returning the signed document's bytes.
|
void |
PdfSigner.sign(java.io.File inputPdf,
java.io.File outputPdf,
CertificateUtils.SigningIdentity identity,
SigningOptions options) |
Signs inputPdf, writing the signed document to outputPdf.
|
void |
PdfSigner.sign(java.io.InputStream input,
java.io.OutputStream output,
CertificateUtils.SigningIdentity identity,
SigningOptions options) |
Signs the PDF read from input, writing the signed bytes to
output.
|
SignResult |
PdfSigner.signForResult(byte[] inputPdfBytes,
CertificateUtils.SigningIdentity identity,
SigningOptions options) |
|