It's possible to sign in the client but it's far from easy. For smartcards and other not exportable private key containers you need to create a JNI interface that is downloaded to the client to access the windows certificate store through CAPI (only windows, not cross platform). If the certificate is in a file the problem is easier and a signed jar is all you need. It's also possible to do it in C# through an activex. Ascertia has an interesting solution at http://www.ascertia.com/gosign/pages/introduction.htm.
Paulo > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On > Behalf Of Navalon, Ramon > Sent: Tuesday, July 10, 2007 10:19 AM > To: itext-questions@lists.sourceforge.net > Subject: [iText-questions] (no subject) > > Hi. > > We are interested on using iText in a project but we have a doubt. > > We have an application running in the Server scenario and > other one in the Client scenario. > > On the server side we have a PDF document, which has to be > signed on the client side. So, private key and certificates > are placed on client and PDF is placed on server. > > Is there any way for that? > > We have been looking for that in iText tutorials (External > signatures) but we can't do that because of we need some > client data (certificate chain) which is not available on the > server side. > > Thanks. > > > > Ramón Navalón > Technology Consultant > Hewlett-Packard Services Aviso Legal: Esta mensagem é destinada exclusivamente ao destinatário. Pode conter informação confidencial ou legalmente protegida. A incorrecta transmissão desta mensagem não significa a perca de confidencialidade. Se esta mensagem for recebida por engano, por favor envie-a de volta para o remetente e apague-a do seu sistema de imediato. É proibido a qualquer pessoa que não o destinatário de usar, revelar ou distribuir qualquer parte desta mensagem. Disclaimer: This message is destined exclusively to the intended receiver. It may contain confidential or legally protected information. The incorrect transmission of this message does not mean the loss of its confidentiality. If this message is received by mistake, please send it back to the sender and delete it from your system immediately. It is forbidden to any person who is not the intended receiver to use, distribute or copy any part of this message. ------------------------------------------------------------------------- This SF.net email is sponsored by DB2 Express Download DB2 Express C - the FREE version of DB2 express and take control of your XML. No limits. Just data. Click to get it now. http://sourceforge.net/powerbar/db2/ _______________________________________________ iText-questions mailing list iText-questions@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/itext-questions Buy the iText book: http://itext.ugent.be/itext-in-action/
