Hello,

Thanks for your help Balder.

I am trying again to explain the problem I encounter:

I need to apply a PDF Signature to the XFA form itself:
- when the PDF file is a static PDF, I get a VALID signature and I can see
through acrobat Reader that everything is correct.
- when the PDF file is a dynamic PDF, I get an INVALID signature.

If I sign the dynamic PDF with acrobat pro and compare it with the signed
file I get with my program, I can clearly see that the part I am missing is
contained is the XFA form: the node <form> is incorrect.

* Acrobat Pro computes a checksum that is added to the node <form>.*

This checksum is apparently a kind of digest of the PDF file. Its length
corresponds to a SHA1 digest. In my mind, it is probably the digest of the
whole signed file except the node <form> but I unfortunately cannot confirm
that.

In the "xfa_spec_3_1.pdf" documentation, the corresponding section is:
Chapter 16, Security and Reliability -- PDF Signatures page 559 and I can
read this:

"When the PDF signature covers all fields in the form its computation
includes the entire XFA form
embedded in the PDF and most of the non-XFA content in the PDF as well. Some
portions of the non-XFA
content are omitted as specified in the PDF standard [PDF]."

But that is exactly what I am doing and it works for the static PDF files.
 
Any guess?

Thanks very much in advance,
Emmanuel

PS: my input in attached piece
http://itext-general.2136553.n4.nabble.com/file/n3662413/original_input.pdf
original_input.pdf 


--
View this message in context: 
http://itext-general.2136553.n4.nabble.com/Xfa-signature-tp2172306p3662413.html
Sent from the iText - General mailing list archive at Nabble.com.

------------------------------------------------------------------------------
All of the data generated in your IT infrastructure is seriously valuable.
Why? It contains a definitive record of application performance, security 
threats, fraudulent activity, and more. Splunk takes this data and makes 
sense of it. IT sense. And common sense.
http://p.sf.net/sfu/splunk-d2d-c2
_______________________________________________
iText-questions mailing list
iText-questions@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/itext-questions

iText(R) is a registered trademark of 1T3XT BVBA.
Many questions posted to this list can (and will) be answered with a reference 
to the iText book: http://www.itextpdf.com/book/
Please check the keywords list before you ask for examples: 
http://itextpdf.com/themes/keywords.php

Reply via email to