EdsNcaLayer

Overview

EdsNcaLayer is a local digital-signature application for Kazakhstan PKI workflows.

Current architecture:

• Frontend (React + Vite) performs signing/verification/extraction through NCALayer WebSocket (wss://127.0.0.1:13579)
• Backend (ASP.NET Core 8) exposes API endpoints for signing/verification scenarios with NKalkan
• NCALayer must be installed and running for frontend operations

Repository Structure

• Backend — ASP.NET Core Web API (EdsWebApi.csproj)
• Frontend — React application
• Frontend/src/components — UI modules
  • SignModule.jsx
  • BatchSignModule.jsx
  • VerifyModule.jsx
• Frontend/src/services — modular frontend services
  • common.js
  • signService.js
  • verifyService.js
  • extractService.js
  • batchVerifyService.js
  • batchSignService.js
• start-app.ps1 — starts backend and frontend together
• run-edsnca-ui.ps1 — starts frontend only

Prerequisites

• .NET SDK 8.0+
• Node.js 20.19+ or 22.12+
• npm 10+
• NCALayer (required for frontend flows)
  • endpoint: wss://127.0.0.1:13579
  • download: https://ncl.pki.gov.kz/

Frontend Features (Current)

• Sign document via NCALayer (signFilePath)
• Batch sign documents via backend API (/api/sign/batch)
• Verify CMS signature via NCALayer (checkCMS)
• Extract original document from CMS via NCALayer (saveCMS)
• Batch verify CMS files (sequentially)

UI is organized in modules and switched by tabs in Frontend/src/App.jsx.

Backend Features (Current)

Backend runs on http://localhost:5000 and exposes Swagger at /.

Implemented controller:

• SignController

Available endpoints:

• POST /api/sign/batch — batch sign multiple documents
• POST /api/sign/certificate/info — load certificate info from keystore
• POST /api/sign/verify — verify CMS signature

Run (Recommended)

Start both services:

.\start-app.ps1

Expected:

• Backend: http://localhost:5000
• Frontend: http://localhost:5173

Run Frontend Only

.\run-edsnca-ui.ps1

or

cd Frontend
npm install
npm run dev

Run Backend Only

cd Backend
dotnet restore
dotnet run --project EdsWebApi.csproj

Notes

• Frontend uses both integration paths:
  • NCALayer WebSocket for sign/verify/extract in modules
  • Backend API for batch signing in BatchSignModule
• If NCALayer is not running, frontend signing/verification/extraction will fail.
• Backend and frontend are now modularized and can evolve independently.

Troubleshooting

• NCALayer connection errors:
  • ensure NCALayer is running
  • check local access to wss://127.0.0.1:13579
• Frontend not starting:
  • re-run npm install in Frontend
• Backend not starting:
  • re-run dotnet restore in Backend
  • verify .NET 8 SDK installed