Correct, ISO 32000-1 doesn’t refer to Advanced Signatures because that is an EU
specific concept – it doesn’t apply outside the EU. Also, the work of ESI STF
364 on PAdES is recent.
My point was what you found lacking in ISO 32000-1 that would you want to use
CAdES or XAdES instead?
Yes, I am aware of the DSS-X profiles – I am an observer in that group ;). I
also talk with Ezer and Juan Carlos frequently – and Juan Carlos is also a
member of ETSI/ESI STF364 and helped developed PAdES. I would think that you
folks would indeed be best to base your work on PAdES…
Leonard
From: Andreas Kuehne [mailto:[email protected]]
Sent: Sunday, May 10, 2009 4:58 PM
To: Post all your questions about iText here
Subject: Re: [iText-questions] OCSP and timestamping PDF trouble with PKCS11
provider
Hi Leonhard,
ETSI-representative, that's quite impressive !
CadES versus PAdES is an interesting topic. Is there a document on pros / cons
available ?
ISO 32000-1 : Yes, I searched the version PDF 32000-1:2008 before replying to
Andrius mail. There is no place where 'Advanced' is even near 'Signature' ...
Or do you refer to the 'original' ISO version ? I try to avoid to use
non-public standards.
In the OASIS DSS-X we are currently working on a new set of signature profiles.
A profile related to PAdES would be very useful, I guess !
Greetings
Andreas
________________________________
From: Leonard Rosenthol <[email protected]>
To: Post all your questions about iText here
<[email protected]>
Sent: Friday, May 8, 2009 10:45:07 AM
Subject: Re: [iText-questions] OCSP and timestamping PDF trouble with PKCS11
provider
I am the Adobe representative to ETSI/ESI (the folks who do CAdES/XAdES, and
now PAdES, for PDF).
The direction being taken by ETSI/ESI and the ISO (who own PDF) is to NOT do
CAdES/XAdES natively in PDF – because the models aren’t completely compatible –
but instead to take the philosophy behind those standards and adjust the PDF
signature functionality (as necessary) to offer similar functionality.
Have you read the PDF Reference/ISO 32000-1 concerning PDF signatures? What
there isn’t clear?
Leonard
On 5/8/09 9:21 AM, "Andreas Kuehne" <[email protected]> wrote:
Cool, I didn't know that !
Anyway, the current topic is about how to fiddle OCSP responses into PKCS7 /
CMS attributes.
I would recommend something to use like CAdES / XAdES as a standard where the
semantic of any type of certificate status and revocation information is
clearly defined.
I have heard Adobe is active in that direction. Does the good old reader
support these standards already ?
Greetings
Andreas
________________________________
Von: Leonard Rosenthol <[email protected]>
Gesendet: Donnerstag, 7. Mai 2009 17:39
An: Post all your questions about iText here
<[email protected]>
Betreff: Re: [iText-questions] OCSP and timestamping PDF trouble with PKCS11
provider
PDF IS an approved “Advanced Signature standard” by the EU under ETSI TS 102
778.
Leonard
On 5/7/09 4:24 PM, "Andreas Kuehne" <[email protected]> wrote:
Hi Andrius,thanks for the quick reply !
I haven't seen OCSP included in a PKCS7, would expect to use an Advanced
Signature standard to use a standard way to included it.
Greetings
Andreas
----- Ursprüngliche Nachricht -----
Von: Andrius Juozapaitis <[email protected]>
Gesendet: Donnerstag, 7. Mai 2009 15:42
An: Post all your questions about iText here
<[email protected]>
Betreff: Re: [iText-questions] OCSP and timestamping PDF trouble with PKCS11
provider
IIRC, I got it here:
http://www.digistamp.com/toolkitDownload.htm
anyone at all managed to add OCSP responses to a pdf?..
regards,
Andrius
On Thu, May 7, 2009 at 4:12 PM, Andreas Kuehne <[email protected]> wrote:
>
> Hi Andrius,
>
> this toolkit sounds interesting ! But how did you manage to get it ? I even
> fail to create an accout at digistamp !?!
>
> Greetings
>
> Andreas
>
>
>
> ----- Original Message ----
> From: Andrius Juozapaitis <[email protected]>
> To: [email protected]
> Sent: Thursday, May 7, 2009 1:54:19 PM
> Subject: [iText-questions] OCSP and timestamping PDF trouble with PKCS11
> provider
>
> Hey,
>
> I've been trying to make this combination work for more than a week
> now, with little success. I was able to add the signature and
> timestamp using digistamp.com<http://digistamp.com> java toolkit
> (http://www.digistamp.com/pdf.htm, they use a modified version of
> PdfPKCS7 class and bouncycastle tsp package). I have trouble embedding
> OCSP reponse though (generated pdf is invalid, complaining about
> signer info being empty). Does anyone have a working code sample that
> embeds an ocsp response into a pdf? Also, Paulo stated in the mailing
> list in the beginning of March, that itext will have built-in
> timestamp and ocsp support in the next version, any ETA on that?
>
> regards,
> Andrius
>
> ------------------------------------------------------------------------------
> The NEW KODAK i700 Series Scanners deliver under ANY circumstances! Your
> production scanning environment may not be a perfect world - but thanks to
> Kodak, there's a perfect scanner to get the job done! With the NEW KODAK i700
> Series Scanner you'll get full speed at 300 dpi even with all image
> processing features enabled. http://p.sf.net/sfu/kodak-com
> _______________________________________________
[Die ursprüngliche Nachricht ist nicht vollständig enthalten..]
--
Leonard Rosenthol
PDF Standards Architect
Adobe Systems Incorporated
------------------------------------------------------------------------------
The NEW KODAK i700 Series Scanners deliver under ANY circumstances! Your
production scanning environment may not be a perfect world - but thanks to
Kodak, there's a perfect scanner to get the job done! With the NEW KODAK i700
Series Scanner you'll get full speed at 300 dpi even with all image
processing features enabled. http://p.sf.net/sfu/kodak-com
_______________________________________________
iText-questions mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/itext-questions
Buy the iText book: http://www.1t3xt.com/docs/book.php
Check the site with examples before you ask questions:
http://www.1t3xt.info/examples/
You can also search the keywords list: http://1t3xt.info/tutorials/keywords/
