Google KSM Signer implementation for pyHanko
In order to sign PDFs using a Google KMS key, you need to do the following:
- Create a key using Terraform (
main.tf
) or manually - Generate a CSR using the created signing key by using the
generate_csr.py
(work in progress, clean up required!) - Submit the CSR to a CA of your choice and receive a certificate
- Signs PDFs using the Cloud KMS private key and the locally stored certificate (not implemented yet!)