Catch SigningError separately (logged at ERROR level) and fix the ack/nack
logic so failed messages are requeued once then discarded, instead of being
requeued indefinitely or lost. Remove the bare `raise e` that crashed the
worker after each error.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Previously, the `PKCS12_PASSWORD` environment variable was used directly, which could lead to issues when it was not set. This change ensures the password is properly encoded when provided and defaults to `None` if not set.
The 'TIMESTAMP_URL' environment variable check was removed from the worker script as it is no longer required. This simplifies the code by eliminating unnecessary validation.
Included 'TSA_CONFIG_PATH', 'TSA_CERT_CHAIN', and 'TSA_KEY_PASSWORD' to the environment variable check in worker.py. This ensures the script validates these new required configurations before proceeding. Added an exception raise in the error handling block for better error management.
Replaced HTTPTimeStamper with LocalOpensslTimestamp for TSA operations using a local OpenSSL CLI. Updated related configurations and dependencies to support this change, enhancing the timestamping process's reliability and security.
The 'signatureZoneIndex' field is now included in the message body published to the outbound exchange. This change ensures that all necessary information is transmitted.
Deleted import of the 'io' module from worker.py as it was not being used. This helps clean up the code and potentially reduce memory usage. Cleaning up unused imports also makes the codebase more maintainable.
Adjusted the calculation of the signature box's bottom boundary to subtract the height instead of adding it. This change ensures that the signature is placed correctly within the designated zone on the PDF.
julienfastre
