DIdigicert
CSC (v1)

Sign hash

Use this endpoint to sign the given hash string values using the given SAD (Signature Activation Data), credential and signature algorithm.

The following parameters are required in the request body:

hash — Hash string value to be signed. Multiple values can be passed as an array.

SAD — Signature Activation Data.

credentialID — Credential to be used for signing.

signAlgo — Signature algorithm.

post/csc/v1/signatures/signHash

Request

Request body

hashstring[] required

One or more Base64-encoded hash values to be signed.

hashAlgostring

Specifies the OID of the algorithm used to calculate the hash value(s), in case it’s not implicitly specified by the signAlgo algorithm. Only hashing algorithms as strong or stronger than SHA256 shall be used.

signAlgostring required

Specifies the OID of the algorithm to use for signing. It shall be one of the values allowed by the credential as returned in keyAlgo by the credentials/info method.

signAlgoParamsstring

Specifies the Base64-encoded of DER-encoded ASN.1 signature parameters, if required by the signature algorithm. Some algorithms like RSA-PSS [RFC 3447] may require additional parameters.

clientDatastring

Arbitrary data from the Signature Application. It can be used to handle a transaction identifier or other application-specific data.

credentialIDstring required

The identifier associated to the credential.

SADstring required

The Signature Activation Data returned by the Credential Authorization methods.

Example request

{
  "hash": [
    "sTOgwOm+474gFj0q0x1iSNspKqbcse4IeiqlDg/HWuI=",
    " c1RPZ3dPbSs0NzRnRmowcTB4MWlTTnNwS3FiY3NlNEllaXFsRGcvSFd1ST0="
  ],
  "hashAlgo": "2.16.840.1.101.3.4.2.1",
  "signAlgo": "1.2.840.113549.1.1.1",
  "credentialID": "GX0112348",
  "SAD": "_TiHRG-bAH3XlFQZ3ndFhkXf9P24/CKN69L8gdSYp5_pw"
}

Response

Signatures

signaturesstring[]

Changes

No recorded changes to this operation across all 1 revision of this API.