Sign a digest with XAdES

Creates a detached ETSI XAdES signature from a base64-encoded digest. The original document is not sent to this endpoint; the client is responsible for providing a digest matching the selected digest algorithm.

Recent Requests
Log in to see full request history
TimeStatusUser Agent
Retrieving recent requests…
LoadingLoading…
Body Params

Detached digest signing requires either filename or reference_uri so validators can bind the signature reference to the original data object.

uuid
required

UID of the HSM digital certificate used for signing.

string | null

6-digit TOTP code. Required only when using a QCP-N-QSCD certificate.

string
required

Base64-encoded digest of the original data object. The digest length must match digest_algorithm.

string | null

Business filename of the original data object. Used to derive the returned signature filename.

string | null

URI stored in the detached XMLDSig reference. Defaults to filename when provided.

string
enum
Defaults to B-B

ETSI XAdES baseline level. B-T embeds an RFC3161 SignatureTimeStamp from the configured TSA; B-LT also embeds certificate chain plus CRL/OCSP trust evidence.

Allowed:
string
enum
Defaults to detached

XAdES packaging exposed by DSS digest signing. Only detached is supported by this endpoint.

Allowed:
string
enum
Defaults to sha256

Digest algorithm used to compute digest_base64.

Allowed:
string
enum
Defaults to http://www.w3.org/2001/10/xml-exc-c14n#
Allowed:
string | null
string | null
string | null
string | null
claimed_roles
array of strings
length ≤ 10
claimed_roles
data_object_format
Responses

401

Unauthenticated

Language
Credentials
Basic
base64
:
URL
LoadingLoading…
Response
Click Try It! to start a request and see the response here! Or choose an example:
application/json