# Sample configuration of an AdESSigner.
#

## General properties
WORKERGENID1.TYPE=PROCESSABLE
WORKERGENID1.IMPLEMENTATION_CLASS=org.signserver.module.ades.signer.AdESSigner

WORKERGENID1.NAME=AdESSigner
WORKERGENID1.AUTHTYPE=NOAUTH

# Crypto token
WORKERGENID1.CRYPTOTOKEN=CryptoTokenP12
#WORKERGENID1.CRYPTOTOKEN=CryptoTokenP11
#WORKERGENID1.CRYPTOTOKEN=CryptoTokenP11NG1
#WORKERGENID1.CRYPTOTOKEN=CryptoTokenP11NG1KeyWrapping

# Using key from sample keystore
WORKERGENID1.DEFAULTKEY=signer00003
# Key using ECDSA
#WORKERGENID1.DEFAULTKEY=signer00002

# Signature algorithm
# Default: SHA256 with RSA or ECDSA depending on key
#WORKERGENID1.SIGNATUREALGORITHM=SHA256withRSA
#WORKERGENID1.SIGNATUREALGORITHM=SHA256withECDSA
WORKERGENID1.SIGNATUREALGORITHM=

# Signature format
# Required
WORKERGENID1.SIGNATURE_FORMAT=PAdES
#WORKERGENID1.SIGNATURE_FORMAT=XAdES
#WORKERGENID1.SIGNATURE_FORMAT=CAdES

# Signature level
# Required
WORKERGENID1.SIGNATURE_LEVEL=BASELINE-B

# Digest algorithm
# Default: SHA256
#WORKERGENID1.DIGESTALGORITHM=SHA256
#WORKERGENID1.DIGESTALGORITHM=SHA384
#WORKERGENID1.DIGESTALGORITHM=SHA512
WORKERGENID1.DIGESTALGORITHM=

# If the key usage counter is disabled 
WORKERGENID1.DISABLEKEYUSAGECOUNTER=true

# Timestamping
#WORKERGENGENID1.TSA_WORKER=TimeStampSigner
WORKERGENID1.TSA_WORKER=

# Timestamp digest algorithm (default SHA-256)
#WORKERGENID1.TSA_DIGESTALGORITHM=SHA-256
#WORKERGENID1.TSA_DIGESTALGORITHM=SHA-384
WORKERGENID1.TSA_DIGESTALGORITHM=


#WORKERGENID1.TSA_URL=https://example.com/tsa
#WORKERGENID1.TSA_USERNAME=user
#WORKERGENID1.TSA_PASSWORD=secreet

# Set to true if a time-stamp over the content should be included (in addition to the signature timestamp)
#WORKERGENID1.ADD_CONTENT_TIMESTAMP=true
WORKERGENID1.ADD_CONTENT_TIMESTAMP=

# Signature packaging (only supported for XAdES and CAdES, CAdES only supports ENVELOPING and DETACHED)
#WORKERGENID1.SIGNATURE_PACKAGING=ENVELOPED
#WORKERGENID1.SIGNATURE_PACKAGING=ENVELOPING
#WORKERGENID1.SIGNATURE_PACKAGING=DETACHED
#WORKERGENID1.SIGNATURE_PACKAGING=INTERNALLY_DETACHED
WORKERGENID1.SIGNATURE_PACKAGING=

# Fixed signature size (only supported for PAdES)
#WORKERGENID1.FIXED_SIGNATURE_SIZE=20000
WORKERGENID1.FIXED_SIGNATURE_SIZE=

# Visible signatures
#WORKERGENID1.ADD_VISIBLE_SIGNATURE=true
#WORKERGENID1.VISIBLE_SIGNATURE_IMAGE_PATH=/path/to/image.png
#WORKERGENID1.VISIBLE_SIGNATURE_IMAGE_BASE64=base64-encoded
#WORKERGENID1.VISIBLE_SIGNATURE_CONTENT_TYPE=image/png
#WORKERGENID1.VISIBLE_SIGNATURE_PAGE=1
#WORKERGENID1.VISIBLE_SIGNATURE_RECTANGLE_LLX=0
#WORKERGENID1.VISIBLE_SIGNATURE_RECTANGLE_LLY=0
#WORKERGENID1.VISIBLE_SIGNATURE_RECTANGLE_URX=256
#WORKERGENID1.VISIBLE_SIGNATURE_RECTANGLE_URY=256

# Extend validity of already signed files (for level LTA)
#WORKERGENID1.EXTEND_VALIDITY=true
WORKERGENID1.EXTEND_VALIDITY=

# Trustanchor configuration
WORKERGENID1.TRUSTANCHORS=
#WORKERGENID1.TRUSTANCHORS=\n-----BEGIN CERTIFICATE-----\n\
#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\n\
#-----END CERTIFICATE-----

# Client-side hashing
#
# Setting this property to true set client-side hashing as the default
# behaviour
# This is currently only supported when SIGNATURE_FORMAT is CAdES
WORKERGENID1.CLIENTSIDEHASHING=
#WORKERGENID1.CLIENTSIDEHASHING=true

# Specify accepted hash digest algorithms when using client-side hashing
WORKERGENID1.ACCEPTED_HASH_DIGEST_ALGORITHMS=
#WORKERGENID1.ACCEPTED_HASH_DIGEST_ALGORITHMS=SHA-256,SHA-384
#WORKERGENID1.ACCEPTED_HASH_DIGEST_ALGORITHMS=SHA-512

# Allow overriding properties using request metadata properties
#
WORKERGENID1.ALLOW_PROPERTY_OVERRIDE=
#WORKERGENID1.ALLOW_PROPERTY_OVERRIDE=CLIENTSIDEHASHING