I can verify signature&AuthAttribute.pdf without any exception with Sun 1.4.2_05. About the IAIK failure you should ask them, after all it's a paid toolkit and the code can't be more trivial.
----- Original Message ----- From: "Wahaj" <[EMAIL PROTECTED]> To: <[email protected]> Sent: Friday, December 24, 2004 2:04 PM Subject: [iText-questions] Re: Exception found when verifying signature having un-authenticated attribute > I tried IAIK crypto provider but it failed with the exception.I have used > IAIK quite a lot and I think the IAIK provider is OK but I am not sure why > it failed. > > Case 1 > --------- > I tried a pdf having un-authenticated attribute and used PdfPKCS7 pk = > af.verifySignature(name,"IAIK"); and got an exception: > > Case 2 > -------- > Then I tried another pdf which simply signs using the sample provided in > iText and then I tried to verify using PdfPKCS7 pk = > af.verifySignature(name); but in vain. > > In both cases the exception I got is: > > ExceptionConverter: java.security.cert.CRLException: Error reading object! > at iaik.x509.CertificateFactory.engineGenerateCRLs(Unknown Source) > at > java.security.cert.CertificateFactory.generateCRLs(CertificateFactory.java:5 > 85) > at com.lowagie.text.pdf.PdfPKCS7.<init>(PdfPKCS7.java:249) > at com.lowagie.text.pdf.AcroFields.verifySignature(AcroFields.java:1296) > at com.lowagie.text.pdf.AcroFields.verifySignature(AcroFields.java:1252) > > In both cases the list of installed security providers is: > > IAIK version 3.11 > SUN version 1.2 > SunJSSE version 1.41 > SunRsaSign version 1.0 > SunJCE version 1.4 > SunJGSS version 1.0 > > In Case1 the PKCS7 I set in pdf is verifiable by IAIK provider seperately so > its really strange why it failed when IAIK provider is used internally by > iText. Am I doing some thing wrong > > Regards, > Wahaj > > "Paulo Soares" <[EMAIL PROTECTED]> wrote in message > news:[EMAIL PROTECTED] > > You need a better crypto provider, iText delegates to the crypto provider > > the reading of the certificates and crls. Maybe it works with Sun's 1.5 or > > with bouncycastle. > > > > ----- Original Message ----- > > From: "Wahaj" <[EMAIL PROTECTED]> > > To: <[email protected]> > > Sent: Friday, December 24, 2004 10:47 AM > > Subject: [iText-questions] Exception found when verifying signature having > > un-authenticated attribute > > > > > > > Hi, > > > > > > I am trying to verify another pdf signature which has Un-Authenticated > > > attributes in it but getting the following exception. > > > > > > sun.security.pkcs.ParsingException: toDerInputStream rejects tag > type -96 > > > at sun.security.pkcs.PKCS7.parse(PKCS7.java:118) > > > at sun.security.pkcs.PKCS7.<init>(PKCS7.java:68) > > > at > > > > > > sun.security.provider.X509Factory.parseX509orPKCS7Cert(X509Factory.java:348) > > > at > > > > > > sun.security.provider.X509Factory.engineGenerateCertificates(X509Factory.jav > > > a:240) > > > at > > > > > > java.security.cert.CertificateFactory.generateCertificates(CertificateFactor > > > y.java:511) > > > at com.lowagie.text.pdf.PdfPKCS7.<init>(PdfPKCS7.java:248) > > > at > com.lowagie.text.pdf.AcroFields.verifySignature(AcroFields.java:1296) > > > at > com.lowagie.text.pdf.AcroFields.verifySignature(AcroFields.java:1252) > > > > > > I am using iText 145 on windows 2000 server. Interestingly Adobe can > > verify > > > the signature. Why iText is failing ? If I remove the Un-Authenticated > > > attribute iText verifies its correctly. > > > > > > Regards, > > > Wahaj > > > > > > > > > > > > > > > -------------------------------------------------------------------------- > -- > > ---- > > > > > > > > > > > > > > > > > > > ------------------------------------------------------- > > > SF email is sponsored by - The IT Product Guide > > > Read honest & candid reviews on hundreds of IT Products from real users. > > > Discover which products truly live up to the hype. Start reading now. > > > http://productguide.itmanagersjournal.com/ > > > _______________________________________________ > > > iText-questions mailing list > > > [email protected] > > > https://lists.sourceforge.net/lists/listinfo/itext-questions > > > > > > > > ------------------------------------------------------- > > SF email is sponsored by - The IT Product Guide > > Read honest & candid reviews on hundreds of IT Products from real users. > > Discover which products truly live up to the hype. Start reading now. > > http://productguide.itmanagersjournal.com/ > > > > > > ------------------------------------------------------- > SF email is sponsored by - The IT Product Guide > Read honest & candid reviews on hundreds of IT Products from real users. > Discover which products truly live up to the hype. Start reading now. > http://productguide.itmanagersjournal.com/ > _______________________________________________ > iText-questions mailing list > [email protected] > https://lists.sourceforge.net/lists/listinfo/itext-questions ------------------------------------------------------- SF email is sponsored by - The IT Product Guide Read honest & candid reviews on hundreds of IT Products from real users. Discover which products truly live up to the hype. Start reading now. http://productguide.itmanagersjournal.com/ _______________________________________________ iText-questions mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/itext-questions
