Skip to content

Configuration

The Digital Signature Verify tool is distributed as a WAR file inside a ZIP file. You can download the tool from the OpenKM download center.

Configuration steps

Section titled “Configuration steps”

  • Copy the “signatureVerify.war” file into Tomcat “webapps” folder (ensure you deploy into a Tomcat version 8.5.40 or later).

  • Enable the extension named “Digital Signature Viewer”. Check the related documentation for version 7.1.x at Enable extensions.

    • Go to Administration > Utilities > Database query. At the bottom right, select the JDBC option, paste into the box the SQL inserts for the extensions you want to enable. Finally, click the execute button at the bottom right.

      INSERT INTO OKM_EXTENSION (EXT_UUID, EXT_NAME) VALUES ('288cdc63-78e4-434b-94e0-ccbdace1da21', 'Digital Signature viewer');

  • Configure the parameter named “extension.signature.validation.url”. The most common value is “http://localhost:8080/signatureVerify”.

Additional configuration

Section titled “Additional configuration”

The application comes with an embedded root certificate store which can be used to check most certificates, but it is sometimes not enough. If you are in this situation, you can create your own trusted certificate store files which will be used by the application. The trusted store file is named truststore.jks by default and should be placed in the $TOMCAT_HOME folder. The default password is “changeit”. You can change this default configuration using the signature-verify.properties file:

keystore.file=my-custom.jks
keystore.password=s3cr3t0

To import a provided certificate into the keystore:

Terminal window
$ keytool -importcert -file provided_certificate.cer -alias provided_certificate -keystore truststore.jks

Create a keystore sample

Section titled “Create a keystore sample”
$ keytool -genkeypair -alias boguscert -storepass secret -keypass secret -keystore signature-verify.jks -dname "CN=Developer, OU=Department, O=Company, L=City, ST=State, C=CA"
$ keytool -delete -alias boguscert -storepass secret -keystore signature-verify.jks
$ keytool -list -keystore signature-verify.jks -storepass secret

You can find more information about the Java KeyStore at:

More info

Section titled “More info”

To check a PDF signature, you have several options: