Chris, Leonard, Leonard Rosenthol-3 wrote > > Not as part of the signature – but as part of the LTV block. > > From: Chris MacKenzie <ccm@<mailto:ccm@>> > > The PDF spec supports embedding a signed OCSP Response as part of a PKCS7 > signature. Embedding a signed OCSP Response allows a signature to be > self-describing with respect to validation (i.e., Acrobat can validate the > signature without performing its own OCSP check...therefore you don't even > need to be connected to assert the signature).
As far as ISO 32000-1 is concerned, Chris is right. The signature container even SHOULD contain revocation information as a signed attribute. Actually the PAdES profile for CMS signatures also recommends this (clause 5.1 e). On the other hand hardly any signing software does this. Therefore, a more useful approach indeed would be to look for PAdES LTV style revocation information as this kind of information can later be added using software independent from the original signing software; it can also be updated again and again for long term validation use. Currently verification taking PAdES style information into account is being developed. Thus, with the code available right now you can access the information only using the low level iText API. Regards, Michael -- View this message in context: http://itext-general.2136553.n4.nabble.com/Readin-OCSP-Responses-from-a-signed-PDF-tp4221976p4222187.html Sent from the iText - General mailing list archive at Nabble.com. ------------------------------------------------------------------------------ Write once. Port to many. Get the SDK and tools to simplify cross-platform app development. Create new or port existing apps to sell to consumers worldwide. Explore the Intel AppUpSM program developer opportunity. appdeveloper.intel.com/join http://p.sf.net/sfu/intel-appdev _______________________________________________ iText-questions mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/itext-questions iText(R) is a registered trademark of 1T3XT BVBA. Many questions posted to this list can (and will) be answered with a reference to the iText book: http://www.itextpdf.com/book/ Please check the keywords list before you ask for examples: http://itextpdf.com/themes/keywords.php
