I tried IAIK crypto provider but it failed with the exception.I have used IAIK quite a lot and I think the IAIK provider is OK but I am not sure why it failed.
Case 1 --------- I tried a pdf having un-authenticated attribute and used PdfPKCS7 pk = af.verifySignature(name,"IAIK"); and got an exception: Case 2 -------- Then I tried another pdf which simply signs using the sample provided in iText and then I tried to verify using PdfPKCS7 pk = af.verifySignature(name); but in vain. In both cases the exception I got is: ExceptionConverter: java.security.cert.CRLException: Error reading object! at iaik.x509.CertificateFactory.engineGenerateCRLs(Unknown Source) at java.security.cert.CertificateFactory.generateCRLs(CertificateFactory.java:5 85) at com.lowagie.text.pdf.PdfPKCS7.<init>(PdfPKCS7.java:249) at com.lowagie.text.pdf.AcroFields.verifySignature(AcroFields.java:1296) at com.lowagie.text.pdf.AcroFields.verifySignature(AcroFields.java:1252) In both cases the list of installed security providers is: IAIK version 3.11 SUN version 1.2 SunJSSE version 1.41 SunRsaSign version 1.0 SunJCE version 1.4 SunJGSS version 1.0 In Case1 the PKCS7 I set in pdf is verifiable by IAIK provider seperately so its really strange why it failed when IAIK provider is used internally by iText. Am I doing some thing wrong Regards, Wahaj "Paulo Soares" <[EMAIL PROTECTED]> wrote in message news:[EMAIL PROTECTED] > You need a better crypto provider, iText delegates to the crypto provider > the reading of the certificates and crls. Maybe it works with Sun's 1.5 or > with bouncycastle. > > ----- Original Message ----- > From: "Wahaj" <[EMAIL PROTECTED]> > To: <[email protected]> > Sent: Friday, December 24, 2004 10:47 AM > Subject: [iText-questions] Exception found when verifying signature having > un-authenticated attribute > > > > Hi, > > > > I am trying to verify another pdf signature which has Un-Authenticated > > attributes in it but getting the following exception. > > > > sun.security.pkcs.ParsingException: toDerInputStream rejects tag type -96 > > at sun.security.pkcs.PKCS7.parse(PKCS7.java:118) > > at sun.security.pkcs.PKCS7.<init>(PKCS7.java:68) > > at > > > sun.security.provider.X509Factory.parseX509orPKCS7Cert(X509Factory.java:348) > > at > > > sun.security.provider.X509Factory.engineGenerateCertificates(X509Factory.jav > > a:240) > > at > > > java.security.cert.CertificateFactory.generateCertificates(CertificateFactor > > y.java:511) > > at com.lowagie.text.pdf.PdfPKCS7.<init>(PdfPKCS7.java:248) > > at com.lowagie.text.pdf.AcroFields.verifySignature(AcroFields.java:1296) > > at com.lowagie.text.pdf.AcroFields.verifySignature(AcroFields.java:1252) > > > > I am using iText 145 on windows 2000 server. Interestingly Adobe can > verify > > the signature. Why iText is failing ? If I remove the Un-Authenticated > > attribute iText verifies its correctly. > > > > Regards, > > Wahaj > > > > > > > > > -------------------------------------------------------------------------- -- > ---- > > > > > > > > > > > > ------------------------------------------------------- > > SF email is sponsored by - The IT Product Guide > > Read honest & candid reviews on hundreds of IT Products from real users. > > Discover which products truly live up to the hype. Start reading now. > > http://productguide.itmanagersjournal.com/ > > _______________________________________________ > > iText-questions mailing list > > [email protected] > > https://lists.sourceforge.net/lists/listinfo/itext-questions > > > > ------------------------------------------------------- > SF email is sponsored by - The IT Product Guide > Read honest & candid reviews on hundreds of IT Products from real users. > Discover which products truly live up to the hype. Start reading now. > http://productguide.itmanagersjournal.com/ ------------------------------------------------------- SF email is sponsored by - The IT Product Guide Read honest & candid reviews on hundreds of IT Products from real users. Discover which products truly live up to the hype. Start reading now. http://productguide.itmanagersjournal.com/ _______________________________________________ iText-questions mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/itext-questions
