# Sample configuration for an JArchiveSigner-compatible CMS signer to be used
# for client-side hashing and assembling of resulting files (JAR files) by
# inserting the server-generated signature.
#

## General properties

WORKERGENID1.TYPE=PROCESSABLE
WORKERGENID1.IMPLEMENTATION_CLASS=org.signserver.module.jarchive.signer.JArchiveCMSSigner

WORKERGENID1.NAME=JArchiveCMSSigner
WORKERGENID1.AUTHTYPE=NOAUTH

# Crypto token
WORKERGENID1.CRYPTOTOKEN=CryptoTokenP12
#WORKERGENID1.CRYPTOTOKEN=CryptoTokenP11
#WORKERGENID1.CRYPTOTOKEN=CryptoTokenP11NG1
#WORKERGENID1.CRYPTOTOKEN=CryptoTokenP11NG1KeyWrapping

# Using key from sample keystore
WORKERGENID1.DEFAULTKEY=code00003
# Key using ECDSA
#WORKERGENID1.DEFAULTKEY=code00002


# Signature algorithm
# Default: SHA256withRSA
#WORKERGENID1.SIGNATUREALGORITHM=SHA1withRSA
WORKERGENID1.SIGNATUREALGORITHM=SHA256withRSA


# Worker ID or name of internal (RFC#3161) timestamp signer in the same SignServer
# Default: none
#WORKERGENID1.TSA_WORKER=TimeStampSigner
WORKERGENID1.TSA_WORKER=

# URL of external (RFC#3161) timestamp authority
# Default: none
#WORKERGENID1.TSA_URL=http://tsa.example.com/TimeStampSigner
WORKERGENID1.TSA_URL=

# Username for authentication with the TSA
# Default: none
WORKERGENID1.TSA_USERNAME=

# Password for authentication with the TSA
# Default: none
WORKERGENID1.TSA_PASSWORD=

# Digest algorithm used for timestamps
# Default: SHA-256
WORKERGENID1.TSA_DIGESTALGORITHM=

# Time-stamping policy OID to request from the TSA
# Default: none
WORKERGENID1.TSA_POLICYOID=

# If a digest of the request should be computed and logged
# Default: false
#WORKERGENID1.DO_LOGREQUEST_DIGEST=true
#WORKERGENID1.DO_LOGREQUEST_DIGEST=false
WORKERGENID1.DO_LOGREQUEST_DIGEST=

# The digest algorithm to use for the request in the log
# Default: SHA256
#WORKERGENID1.LOGREQUEST_DIGESTALGORITHM=SHA256
WORKERGENID1.LOGREQUEST_DIGESTALGORITHM=

# If a digest of the response should be computed and logged
# Default: false
#WORKERGENID1.DO_LOGRESPONSE_DIGEST=true
#WORKERGENID1.DO_LOGRESPONSE_DIGEST=false
WORKERGENID1.DO_LOGRESPONSE_DIGEST=

# The digest algorithm to use for the request in the log
# Default: SHA256
#WORKERGENID1.LOGRESPONSE_DIGESTALGORITHM=SHA256
WORKERGENID1.LOGRESPONSE_DIGESTALGORITHM=

# If the key usage counter is disabled 
WORKERGENID1.DISABLEKEYUSAGECOUNTER=true