This is meant to be a somewhat-easier-to-digest recap of the discussion that can be found on the MikroTik forum at this URL: https://forum.mikrotik.com/viewtopic.php?f=23&t=157048&p=836497&hilit=failover#p836497 Note that the forum discussion not only addresses failover, but also load balancing at the same time (without explicitly saying so in the beginning).
For the sake of this document, we'll make some assumptions:
| # This gist assumes you have a signed document, the certificate chain used to sign it and the certificate chain of a TSA (if you used one) | |
| # signed_doc = HexaPDF::Document.open(File.join(base_path, 'signed-document.pdf')) | |
| # sig_cert_chain = [end_user_cert, intermediate_cert, root_cert] | |
| # tsa_cert_chain = [tsa_cert, tsa_intermediate_cert, tsa_root_cert] | |
| # optional: output_path = File.join(base_path, 'signed-document-with-ltv.pdf') | |
| # STEP 1: The base structure is added as indirect references all | |
| signed_doc.catalog[:DSS] = signed_doc.add({}) | |
| signed_doc.catalog[:DSS][:CRLs] = signed_doc.add([]) | |
| signed_doc.catalog[:DSS][:Certs] = signed_doc.add([]) |