Hi Andreas,
actually I want to sign a PDF using a EC-based cert/key.
However, I already tried to workaround this issue by creating a
external PKCS7 with BC and afterwards trying to insert it into the
PDF, as described in the howto ("An example with an external signature
in Self Sign Mode"). Unfortunately, the error remains the same, when
it comes to initialization of com.lowagie.text.pdf.PdfPKCS7 ...
I'm quite new to PDF structure and cryptography at all - so I will
have a look at the iText source and try further to get this working
somehow.
Thanks so far,
Max
Zitat von Andreas Kuehne <[EMAIL PROTECTED]>:
> Hi Maximilian,
>
> yes, of course signing standards is not a concern of PDF, but for
> ease of use some signing / verification functionality is a
> 'built-in' feature of iText.
> For some reason we are not using the built-in signing of iText but
> do it using a separate crypto provider ( which is capable of EC ).
> But I didn't quite understand your requirement : Do you need to do
> EC using iText ? Or do you need EC signatures within a PDF ?
>
> Greetings
>
> Andreas
>
>
>
> ----- Original Message ----
> From: Maximilian Schmidt <[EMAIL PROTECTED]>
> To: Post all your questions about iText here
> <[email protected]>
> Sent: Tuesday, July 22, 2008 8:57:52 AM
> Subject: Re: [iText-questions] signing/embedding PKCS7 using a key with EC
>
> I might be wrong, but as far as I see it, this is not a concern of PDF,
> as the signature is embedded in a PKCS7 container, regardless of the
> certificate used. It is however a matter of the signing/verifying
> component to support those certificates. I'm writing some test cases for
> our signing component and the requirements state that EC-based certs are
> supported.
>
> Max
>
> Leonard Rosenthol schrieb:
>> Just to follow up on that a bit more - EC certs aren't supported by PDF.
>>
>> Can you give me some idea why you're using EC-based certs over
>> standard RSA ones? This is the first "request" that I have heard to
>> support EC in PDF...
>>
>> Leonard
>>
>>
>> On Jul 17, 2008, at 4:38 PM, Paulo Soares wrote:
>>
>>
>>> You'll have to use an external signature. The internal signing mode
>>> only
>>> supports RSA and DSA. I want to move all the signing logic to
>>> bouncycastle and avoid this and other problems but there's always
>>> something more urgent to attend to.
>>>
>>> Paulo
>>>
>>>
>>>> -----Original Message-----
>>>> From: [EMAIL PROTECTED]
>>>> [mailto:[EMAIL PROTECTED] On
>>>> Behalf Of Maximilian Schmidt
>>>> Sent: Thursday, July 17, 2008 12:55 PM
>>>> To: [email protected]
>>>> Subject: [iText-questions] signing/embedding PKCS7 using a key with
>>>> EC
>>>>
>>>> Dear all,
>>>>
>>>> I'm trying to sign a bunch of PDF documents using a PKCS12 keystore.
>>>> Using the great HowToSign tutorial I already managed to do this in no
>>>> time. However, once I try to do the same with a PKSC12
>>>> containing keys
>>>> that use elliptic curves (EC), I get the following error:
>>>> ExceptionConverter: java.security.NoSuchAlgorithmException:
>>>> Unknown Key
>>>> Algorithm EC
>>>> at com.lowagie.text.pdf.PdfPKCS7.<init>(PdfPKCS7.java:401)
>>>> at
>>>> com.lowagie.text.pdf.PdfSigGenericPKCS.setSignInfo(PdfSigGener
>>>> icPKCS.java:97)
>>>> at
>>>> com.lowagie.text.pdf.PdfSignatureAppearance.preClose(PdfSignat
>>>> ureAppearance.java:787)
>>>> at
>>>> com.lowagie.text.pdf.PdfSignatureAppearance.preClose(PdfSignat
>>>> ureAppearance.java:717)
>>>> at com.lowagie.text.pdf.PdfStamper.close(PdfStamper.java:200)
>>>> at
>>>> org.emayor.softsigner.SoftSignerOld.sign(SoftSignerOld.java:174)
>>>> at
>>>> org.emayor.softsigner.SoftSignerOld.main(SoftSignerOld.java:60)
>>>> Could not inject signature: Unknown Key Algorithm EC
>>>>
>>>> I've managed to produce a P7M with the same key using only
>>>> BouncyCastle,
>>>> so I assume at some point iText uses its own logic for these things.
>>>> I've also tried to force the provider used by doing
>>>>
>>>> PdfSignatureAppearance sap = stp.getSignatureAppearance();
>>>> sap.setProvider( BouncyCastleProvider.PROVIDER_NAME );
>>>>
>>>> but that doesn't solve this issue. Any comments on how I
>>>> could get this
>>>> working?
>>>>
>>>> Thanks in advance,
>>>> Max
>>>>
>>> Aviso Legal:
>>> Esta mensagem é destinada exclusivamente ao destinatário. Pode
>>> conter informação confidencial ou legalmente protegida. A incorrecta
>>> transmissão desta mensagem não significa a perca de
>>> confidencialidade. Se esta mensagem for recebida por engano, por
>>> favor envie-a de volta para o remetente e apague-a do seu sistema de
>>> imediato. É proibido a qualquer pessoa que não o destinatário de
>>> usar, revelar ou distribuir qualquer parte desta mensagem.
>>>
>>> Disclaimer:
>>> This message is destined exclusively to the intended receiver. It
>>> may contain confidential or legally protected information. The
>>> incorrect transmission of this message does not mean the loss of its
>>> confidentiality. If this message is received by mistake, please send
>>> it back to the sender and delete it from your system immediately. It
>>> is forbidden to any person who is not the intended receiver to use,
>>> distribute or copy any part of this message.
>>>
>>>
>>> -------------------------------------------------------------------------
>>> This SF.Net email is sponsored by the Moblin Your Move Developer's
>>> challenge
>>> Build the coolest Linux based applications with Moblin SDK & win
>>> great prizes
>>> Grand prize is a trip for two to an Open Source event anywhere in
>>> the world
>>> http://moblin-contest.org/redirect.php?banner_id=100&url=/_______________________________________________
>>> iText-questions mailing list
>>> [email protected]
>>> https://lists.sourceforge.net/lists/listinfo/itext-questions
>>>
>>> Do you like iText?
>>> Buy the iText book: http://www.1t3xt.com/docs/book.php
>>> Or leave a tip: https://tipit.to/itexttipjar
>>>
>>
>>
>> -------------------------------------------------------------------------
>> This SF.Net email is sponsored by the Moblin Your Move Developer's challenge
>> Build the coolest Linux based applications with Moblin SDK & win
>> great prizes
>> Grand prize is a trip for two to an Open Source event anywhere in the world
>> http://moblin-contest.org/redirect.php?banner_id=100&url=/
>> _______________________________________________
>> iText-questions mailing list
>> [email protected]
>> https://lists.sourceforge.net/lists/listinfo/itext-questions
>>
>> Do you like iText?
>> Buy the iText book: http://www.1t3xt.com/docs/book.php
>> Or leave a tip: https://tipit.to/itexttipjar
>>
>>
>
>
> -------------------------------------------------------------------------
> This SF.Net email is sponsored by the Moblin Your Move Developer's challenge
> Build the coolest Linux based applications with Moblin SDK & win great prizes
> Grand prize is a trip for two to an Open Source event anywhere in the world
> http://moblin-contest.org/redirect.php?banner_id=100&url=/
> _______________________________________________
> iText-questions mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/itext-questions
>
> Do you like iText?
> Buy the iText book: http://www.1t3xt.com/docs/book.php
> Or leave a tip: https://tipit.to/itexttipjar
>
>
> -------------------------------------------------------------------------
> This SF.Net email is sponsored by the Moblin Your Move Developer's challenge
> Build the coolest Linux based applications with Moblin SDK & win great prizes
> Grand prize is a trip for two to an Open Source event anywhere in the world
> http://moblin-contest.org/redirect.php?banner_id=100&url=/
> _______________________________________________
> iText-questions mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/itext-questions
>
> Do you like iText?
> Buy the iText book: http://www.1t3xt.com/docs/book.php
> Or leave a tip: https://tipit.to/itexttipjar
>
-------------------------------------------------------------------------
This SF.Net email is sponsored by the Moblin Your Move Developer's challenge
Build the coolest Linux based applications with Moblin SDK & win great prizes
Grand prize is a trip for two to an Open Source event anywhere in the world
http://moblin-contest.org/redirect.php?banner_id=100&url=/
_______________________________________________
iText-questions mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/itext-questions
Do you like iText?
Buy the iText book: http://www.1t3xt.com/docs/book.php
Or leave a tip: https://tipit.to/itexttipjar
