Even if you were to get it working with iText - the signatures
wouldn't validate in Adobe Acrobat/Reader.
Leonard
On Jul 22, 2008, at 12:04 PM, [EMAIL PROTECTED] wrote:
> Hi Andreas,
>
> actually I want to sign a PDF using a EC-based cert/key.
>
> However, I already tried to workaround this issue by creating a
> external PKCS7 with BC and afterwards trying to insert it into the
> PDF, as described in the howto ("An example with an external signature
> in Self Sign Mode"). Unfortunately, the error remains the same, when
> it comes to initialization of com.lowagie.text.pdf.PdfPKCS7 ...
>
> I'm quite new to PDF structure and cryptography at all - so I will
> have a look at the iText source and try further to get this working
> somehow.
>
> Thanks so far,
> Max
>
> Zitat von Andreas Kuehne <[EMAIL PROTECTED]>:
>
>> Hi Maximilian,
>>
>> yes, of course signing standards is not a concern of PDF, but for
>> ease of use some signing / verification functionality is a
>> 'built-in' feature of iText.
>> For some reason we are not using the built-in signing of iText but
>> do it using a separate crypto provider ( which is capable of EC ).
>> But I didn't quite understand your requirement : Do you need to do
>> EC using iText ? Or do you need EC signatures within a PDF ?
>>
>> Greetings
>>
>> Andreas
>>
>>
>>
>> ----- Original Message ----
>> From: Maximilian Schmidt <[EMAIL PROTECTED]>
>> To: Post all your questions about iText here
>> <[email protected]>
>> Sent: Tuesday, July 22, 2008 8:57:52 AM
>> Subject: Re: [iText-questions] signing/embedding PKCS7 using a key
>> with EC
>>
>> I might be wrong, but as far as I see it, this is not a concern of
>> PDF,
>> as the signature is embedded in a PKCS7 container, regardless of the
>> certificate used. It is however a matter of the signing/verifying
>> component to support those certificates. I'm writing some test
>> cases for
>> our signing component and the requirements state that EC-based
>> certs are
>> supported.
>>
>> Max
>>
>> Leonard Rosenthol schrieb:
>>> Just to follow up on that a bit more - EC certs aren't supported
>>> by PDF.
>>>
>>> Can you give me some idea why you're using EC-based certs over
>>> standard RSA ones? This is the first "request" that I have heard to
>>> support EC in PDF...
>>>
>>> Leonard
>>>
>>>
>>> On Jul 17, 2008, at 4:38 PM, Paulo Soares wrote:
>>>
>>>
>>>> You'll have to use an external signature. The internal signing mode
>>>> only
>>>> supports RSA and DSA. I want to move all the signing logic to
>>>> bouncycastle and avoid this and other problems but there's always
>>>> something more urgent to attend to.
>>>>
>>>> Paulo
>>>>
>>>>
>>>>> -----Original Message-----
>>>>> From: [EMAIL PROTECTED]
>>>>> [mailto:[EMAIL PROTECTED] On
>>>>> Behalf Of Maximilian Schmidt
>>>>> Sent: Thursday, July 17, 2008 12:55 PM
>>>>> To: [email protected]
>>>>> Subject: [iText-questions] signing/embedding PKCS7 using a key
>>>>> with
>>>>> EC
>>>>>
>>>>> Dear all,
>>>>>
>>>>> I'm trying to sign a bunch of PDF documents using a PKCS12
>>>>> keystore.
>>>>> Using the great HowToSign tutorial I already managed to do this
>>>>> in no
>>>>> time. However, once I try to do the same with a PKSC12
>>>>> containing keys
>>>>> that use elliptic curves (EC), I get the following error:
>>>>> ExceptionConverter: java.security.NoSuchAlgorithmException:
>>>>> Unknown Key
>>>>> Algorithm EC
>>>>> at com.lowagie.text.pdf.PdfPKCS7.<init>(PdfPKCS7.java:401)
>>>>> at
>>>>> com.lowagie.text.pdf.PdfSigGenericPKCS.setSignInfo(PdfSigGener
>>>>> icPKCS.java:97)
>>>>> at
>>>>> com.lowagie.text.pdf.PdfSignatureAppearance.preClose(PdfSignat
>>>>> ureAppearance.java:787)
>>>>> at
>>>>> com.lowagie.text.pdf.PdfSignatureAppearance.preClose(PdfSignat
>>>>> ureAppearance.java:717)
>>>>> at com.lowagie.text.pdf.PdfStamper.close(PdfStamper.java:200)
>>>>> at
>>>>> org.emayor.softsigner.SoftSignerOld.sign(SoftSignerOld.java:174)
>>>>> at
>>>>> org.emayor.softsigner.SoftSignerOld.main(SoftSignerOld.java:60)
>>>>> Could not inject signature: Unknown Key Algorithm EC
>>>>>
>>>>> I've managed to produce a P7M with the same key using only
>>>>> BouncyCastle,
>>>>> so I assume at some point iText uses its own logic for these
>>>>> things.
>>>>> I've also tried to force the provider used by doing
>>>>>
>>>>> PdfSignatureAppearance sap = stp.getSignatureAppearance();
>>>>> sap.setProvider( BouncyCastleProvider.PROVIDER_NAME );
>>>>>
>>>>> but that doesn't solve this issue. Any comments on how I
>>>>> could get this
>>>>> working?
>>>>>
>>>>> Thanks in advance,
>>>>> Max
>>>>>
>>>> Aviso Legal:
>>>> Esta mensagem é destinada exclusivamente ao destinatário. Pode
>>>> conter informação confidencial ou legalmente protegida. A
>>>> incorrecta
>>>> transmissão desta mensagem não significa a perca de
>>>> confidencialidade. Se esta mensagem for recebida por engano, por
>>>> favor envie-a de volta para o remetente e apague-a do seu sistema
>>>> de
>>>> imediato. É proibido a qualquer pessoa que não o destinatário de
>>>> usar, revelar ou distribuir qualquer parte desta mensagem.
>>>>
>>>> Disclaimer:
>>>> This message is destined exclusively to the intended receiver. It
>>>> may contain confidential or legally protected information. The
>>>> incorrect transmission of this message does not mean the loss of
>>>> its
>>>> confidentiality. If this message is received by mistake, please
>>>> send
>>>> it back to the sender and delete it from your system immediately.
>>>> It
>>>> is forbidden to any person who is not the intended receiver to use,
>>>> distribute or copy any part of this message.
>>>>
>>>>
>>>> -------------------------------------------------------------------------
>>>> This SF.Net email is sponsored by the Moblin Your Move Developer's
>>>> challenge
>>>> Build the coolest Linux based applications with Moblin SDK & win
>>>> great prizes
>>>> Grand prize is a trip for two to an Open Source event anywhere in
>>>> the world
>>>> http://moblin-contest.org/redirect.php?banner_id=100&url=/_______________________________________________
>>>> iText-questions mailing list
>>>> [email protected]
>>>> https://lists.sourceforge.net/lists/listinfo/itext-questions
>>>>
>>>> Do you like iText?
>>>> Buy the iText book: http://www.1t3xt.com/docs/book.php
>>>> Or leave a tip: https://tipit.to/itexttipjar
>>>>
>>>
>>>
>>> -------------------------------------------------------------------------
>>> This SF.Net email is sponsored by the Moblin Your Move Developer's
>>> challenge
>>> Build the coolest Linux based applications with Moblin SDK & win
>>> great prizes
>>> Grand prize is a trip for two to an Open Source event anywhere in
>>> the world
>>> http://moblin-contest.org/redirect.php?banner_id=100&url=/
>>> _______________________________________________
>>> iText-questions mailing list
>>> [email protected]
>>> https://lists.sourceforge.net/lists/listinfo/itext-questions
>>>
>>> Do you like iText?
>>> Buy the iText book: http://www.1t3xt.com/docs/book.php
>>> Or leave a tip: https://tipit.to/itexttipjar
>>>
>>>
>>
>>
>> -------------------------------------------------------------------------
>> This SF.Net email is sponsored by the Moblin Your Move Developer's
>> challenge
>> Build the coolest Linux based applications with Moblin SDK & win
>> great prizes
>> Grand prize is a trip for two to an Open Source event anywhere in
>> the world
>> http://moblin-contest.org/redirect.php?banner_id=100&url=/
>> _______________________________________________
>> iText-questions mailing list
>> [email protected]
>> https://lists.sourceforge.net/lists/listinfo/itext-questions
>>
>> Do you like iText?
>> Buy the iText book: http://www.1t3xt.com/docs/book.php
>> Or leave a tip: https://tipit.to/itexttipjar
>>
>>
>> -------------------------------------------------------------------------
>> This SF.Net email is sponsored by the Moblin Your Move Developer's
>> challenge
>> Build the coolest Linux based applications with Moblin SDK & win
>> great prizes
>> Grand prize is a trip for two to an Open Source event anywhere in
>> the world
>> http://moblin-contest.org/redirect.php?banner_id=100&url=/
>> _______________________________________________
>> iText-questions mailing list
>> [email protected]
>> https://lists.sourceforge.net/lists/listinfo/itext-questions
>>
>> Do you like iText?
>> Buy the iText book: http://www.1t3xt.com/docs/book.php
>> Or leave a tip: https://tipit.to/itexttipjar
>>
>
>
>
>
> -------------------------------------------------------------------------
> This SF.Net email is sponsored by the Moblin Your Move Developer's
> challenge
> Build the coolest Linux based applications with Moblin SDK & win
> great prizes
> Grand prize is a trip for two to an Open Source event anywhere in
> the world
> http://moblin-contest.org/redirect.php?banner_id=100&url=/
> _______________________________________________
> iText-questions mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/itext-questions
>
> Do you like iText?
> Buy the iText book: http://www.1t3xt.com/docs/book.php
> Or leave a tip: https://tipit.to/itexttipjar
>
-------------------------------------------------------------------------
This SF.Net email is sponsored by the Moblin Your Move Developer's challenge
Build the coolest Linux based applications with Moblin SDK & win great prizes
Grand prize is a trip for two to an Open Source event anywhere in the world
http://moblin-contest.org/redirect.php?banner_id=100&url=/
_______________________________________________
iText-questions mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/itext-questions
Buy the iText book: http://www.1t3xt.com/docs/book.php
