Sign

Submit the card's signing certificate; receive the DTBS

Bearer clientToken. The API validates the certificate (chain, revocation, purpose = signing/content-commitment, qualified/QSCD evidence), prepares the format-specific DTBS (for PAdES - the SHA-256 CAdES SignedAttributes digest; SHA-256 for both key curves), and returns it + operationToken. Physical/NFC only.

post/sign/{requestId}/certificate

Request

  • Base URL: https://atk.tvarka.pro/v1
  • URL: https://atk.tvarka.pro/v1/sign/{requestId}/certificate
  • Auth: HTTP bearer

Path parameters

requestIdstring uuid required

Request body

certificatestring byte required

Base64 DER of the card's signing certificate.

Response

DTBS + operation token.

requestIdstring uuid required
dtbsstring byte required

Base64 of the exact digest the card signs (e.g. for PAdES, the curve-matched digest of the CAdES SignedAttributes).

dtbsHashAlgOid'2.16.840.1.101.3.4.2.1' | '2.16.840.1.101.3.4.2.2' required

SHA-256 / SHA-384 OID, curve-matched.

operationTokenstring required
verificationCodestring

Example response

{
  "cert": {
    "subject": {
      "serialNumber": "PNOLT-39001010000",
      "c": "LT"
    }
  }
}

Changes

No recorded changes to this operation across all 1 revision of this API.