Hello,

Im currenty trying to include the CRLs for the certificate chain in the
signature.
The signature creation itself works perfectly fine, only problem is that the
CRLs seem to be missing. At least the Acrobat tells me so.

My Code looks like this:

sap.setCrypto(null, s.getCertificateChain(), s.getCRLs(),
              PdfSignatureAppearance.WINCER_SIGNED);
sap.setExternalDigest(new byte[s.sigLength], new byte[s.hashLength], "RSA");
sap.preClose();      
System.out.println(sap.getCrlList().length);
System.out.println(((java.security.cert.X509CRL)sap.getCrlList()[0]).getNext
Update().toString());

The last two lines are just output for me to make sure that the
SignatureAppearance object does have the CRLs.
The array returned by "getCrlList()" does indeed contain the correct CRLs,
but the final PDF does not seem to contain them.

Am I missing some flag or is this a bug?

Regards,
-Robert

Attachment: smime.p7s
Description: S/MIME cryptographic signature

-------------------------------------------------------------------------
This SF.net email is sponsored by DB2 Express
Download DB2 Express C - the FREE version of DB2 express and take
control of your XML. No limits. Just data. Click to get it now.
http://sourceforge.net/powerbar/db2/
_______________________________________________
iText-questions mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/itext-questions
Buy the iText book: http://itext.ugent.be/itext-in-action/

Reply via email to