You may download the CRLs at the time of signing. They will contain the same 
information as the OCSP at that time.

Paulo

----- Original Message ----- 
From: "Khurram Saleem" <[EMAIL PROTECTED]>
To: <[email protected]>
Cc: <[EMAIL PROTECTED]>
Sent: Thursday, May 24, 2007 8:30 AM
Subject: Re: [iText-questions] Adding revocation information in PKCS#7during 
verification


> Hello,
>
> Thanx for your answer and good guidance
>
>
>
> Ok what I got from your reply is that we can't put OCSP based revocation
> information in PDF signature during verification.
>
> 1 - But can we do it during signing? [As far as I know that the OCSP info
> will be placed as authenticated attributes in signature but RFC3161
> Timestamp token is placed as un-authenticated attributes]
>
> 2 - Can we add CRL based revocation information during either PDF signing 
> or
> verification. [Which I don't think so is not possible during verification 
> as
> OCSP Response].
>
>
>
> Please guide me in this regard
>
>
>
> Best Regards,
>
>
>
> KS
>
>
>
>
>
>> -----Original Message-----
>> From: [EMAIL PROTECTED]
>> [mailto:[EMAIL PROTECTED] On=20
>> Behalf Of Khurram Salim
>> Sent: Wednesday, May 23, 2007 12:18 PM
>> To: [EMAIL PROTECTED]
>> Subject: [iText-questions] Adding revocation information in=20
>> PKCS#7 during verification
>> Hello,
>
>> I'm signing a PDF using iText and IAIK JCE Provider. I'm also
>> adding Time-stamping information in the signature. Can I also
>> add revocation information in the signature e.g. OCSP
>> response?
>
> OCSP is an online protocol.
>
>> But I'm facing a problem. I want to add revocation information
>> in already created signature in PDF during=20
>> verification. Is it possible?
>
> No. If you add anything you invalidate the signature. You'll have to
> decide if you want OCSP or CRL.
>
> Paulo
>
>
>
>
>
> Regards,
>
> KS


-------------------------------------------------------------------------
This SF.net email is sponsored by DB2 Express
Download DB2 Express C - the FREE version of DB2 express and take
control of your XML. No limits. Just data. Click to get it now.
http://sourceforge.net/powerbar/db2/
_______________________________________________
iText-questions mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/itext-questions
Buy the iText book: http://itext.ugent.be/itext-in-action/

Reply via email to