XML digital signature API for signing and validating documents with certificate-based authentication.

Digital Sign Node

Secure XML digital signature service providing cryptographic signing and validation capabilities for document authentication and integrity verification in compliance workflows.

Available Operations

XML Signing: Sign XML documents with digital certificates
Signature Validation: Verify existing digital signatures on XML documents
WSSE Support: Web Services Security Extensions for enhanced authentication
Certificate Management: Integration with keystore-based certificate handling

Connection Configuration

Parameter	Type	Required	Description
`digitalSignBaseUrl`	TEXT	Yes	Base URL of the Digital Signature API service

{
  "digitalSignBaseUrl": "{{ctx.consts.DIGITAL_SIGN_BASE_URL}}"
}

Digital Signature Operations

signXml

Apply digital signature to XML data using certificate-based authentication for document integrity and authenticity.

Parameter	Type	Required	Description
`xmlString`	TEXT	Yes	XML data to be digitally signed
`keystoreEnvPrefix`	TEXT	Yes	Environment variable prefix for certificate file path and password
`wsseMode`	BOOLEAN	No	Enable WSSE mode for enhanced security (default: false)

{
  "xmlString": "{{ctx.nodes.xmlGenerator.outputs.documentXml}}",
  "keystoreEnvPrefix": "{{ctx.consts.CERT_ENV_PREFIX}}",
  "wsseMode": true
}

Certificate Environment Variables:

{PREFIX}_KEYSTORE_PATH: Path to certificate keystore file
{PREFIX}_KEYSTORE_PASSWORD: Password for accessing the keystore
{PREFIX}_PRIVATE_KEY_PASSWORD: Password for private key

validateXml

Verify the digital signature of a signed XML document to ensure authenticity and integrity.

Parameter	Type	Required	Description
`signedXml`	TEXT	Yes	Signed XML data to validate

{
  "signedXml": "{{ctx.vars.receivedXmlDocument}}"
}

Workflow Integration

Use workflow context for secure document processing:

{
  "xmlString": "{{ctx.nodes.documentProcessor.outputs.xmlContent}}",
  "keystoreEnvPrefix": "{{ctx.consts.PRODUCTION_CERT_PREFIX}}",
  "wsseMode": "{{ctx.vars.enableWSSE}}"
}

WSSE Security Mode

When wsseMode is enabled, the service applies Web Services Security Extensions including:

Enhanced Authentication: Additional security headers and tokens
Message Integrity: Comprehensive signature coverage
Timestamp Validation: Time-based signature verification
Replay Protection: Prevention of message replay attacks

Response Format

Success Response

{
  "success": true,
  "signedXml": "<ds:Signature>...</ds:Signature>",
  "certificateInfo": {
    "issuer": "CN=Certificate Authority",
    "serialNumber": "1234567890",
    "validFrom": "2024-01-01T00:00:00Z",
    "validTo": "2025-01-01T00:00:00Z"
  }
}

Error Response

{
  "success": false,
  "error": "Invalid certificate",
  "code": "CERT_INVALID"
}

Use Cases

Government Document Signing: Digitally sign official documents for regulatory compliance
Contract Authentication: Apply legal digital signatures to business contracts and agreements
API Message Security: Sign XML messages for secure web service communications
Document Integrity: Ensure document authenticity in compliance and audit workflows
Legal Verification: Validate signatures on received documents for legal proceedings
Regulatory Compliance: Meet digital signature requirements for industry standards

Digital Sign

On this page