Skip to main content

TSA Properties

The following TSA properties are common for all AdES Signers. Each AdES Signer may have additional specific set of properties that are described in the subsequent sections.

PropertyDescriptionDefault ValueMandatory
TSA_URL
TSA_URL can not be used together with the TSA_WORKER property!
URL to timestamping authority to include timestamp. Both HTTP and HTTPS is supported for sending the timestamping requests. Basic and certificate-based authentication is supported.
For basic authentication, the following additional properties must be set:
  • TSA_USERNAME
  • TSA_PASSWORD
For certificate-based authentication, the following additional properties must be set:
  • TSA_KEYSTORE_TYPE
  • TSA_KEYSTORE_FILEPATH
  • TSA_KEYSTORE_PASSWORD
  • TSA_TRUSTSTORE_TYPE
  • TSA_TRUSTSTORE_FILEPATH
  • TSA_TRUSTSTORE_PASSWORD
See TSA Authentication options below.
NONENO
TSA_WORKER
TSA_WORKER can not be used together with the TSA_URL property!
The name of the Worker to use for the timestamping.TSA_WORKER property should be used only when timestamping is server from the same SignServer.NONENO
TSA_DIGESTALGORITHMDigest algorithm to use with the timestamping.SHA256NO

TSA Authentication options

Basic authentication

For TSA_URL basic authentication, the following properties are mandatory:

PropertyDescriptionDefault ValueMandatory
TSA_USERNAMEUsername for basic authentication.NONENO
TSA_PASSWORDPassword for basic authentication.NONENO

Client certificate-based authentication

For TSA_URL client certificate-based authentication, the following properties are mandatory:

PropertyDescriptionDefault ValueMandatory
TSA_KEYSTORE_TYPEKeystore type for the certificate-based authentication of the TSA. The keystore represents client authentication credentials to be used. Allowed values are:
  • PKCS#12
  • JKS
NONENO
TSA_KEYSTORE_FILEPATHAbsolute path to the file on the file system representing the keystore.NONENO
TSA_KEYSTORE_PASSWORDPassword for the keystore.NONENO
TSA_TRUSTSTORE_TYPETruststore type for the certificate-based authentication of the TSA. The truststore represents certification authorities or server certificates that should be considered as trusted. Allowed values are:
  • PKCS#12
  • JKS
NONENO
TSA_TRUSTSTORE_FILEPATHAbsolute path to the file on the file system representing the truststore.NONENO
TSA_TRUSTSTORE_PASSWORDPassword for the truststore.NONENO