HI,
Indeed, the problem was that it was signed with a certificate for
authentication and not for signature (Non-repudiation). It is also necessary
to import the certificate was signed OCSP response. Now we can see the
details of paragraph revocation(pdf):
The selected certificate is considered valid because it has not been
revoked, as verified by real-time protocol state license online (OCSP,
Online Certificate Status Protocol). OCSP Response was signed AV by the DNIe
FNMT 2009/05/13 15:05:57
IText work OK
----------------------
Thanks
Antonio
2009/5/13 Antonio de Calypo <antonio.cal...@gmail.com>
> I think I made a mistake, the smartcard (DNIe official in Spain) is a
> two-user certificates for authentication and another for signature. Maybe
> the problem has been that I signed with the certificate of authentication.
> When I signed with the other, I will comment the results.
> Thank you
>
> Antonio
>
>
> 2009/5/12 Antonio de Calypo <antonio.cal...@gmail.com>
>
> I think the certificate chain provides information to verify the
>> revocation. ¿Itext is incorporating the information on the document? Paulo
>> gave the idea of including the CRLs, but how can I do this?
>>
>> with certmgr.msc we can see:
>>
>> [1]Acceso a información de autoridad
>>
>> Método de acceso=Protocolo de estado de certificado en línea
>> (1.3.6.1.5.5.7.48.1)
>>
>> Nombre alternativo:
>>
>> Dirección URL=http://ocsp.dnie.es
>>
>> [2]Acceso a información de autoridad
>>
>> Método de acceso=Emisor de la entidad emisora de certificados
>> (1.3.6.1.5.5.7.48.2)
>>
>> Nombre alternativo:
>>
>> Dirección URL=http://www.dnie.es/certs/ACRaiz.crt
>> Paulo, While entering the certificate in the trusted zone
>> Personal.Certificates with the smartcard, the message is the same, no
>> information to validate the revocation
>>
>> Thanks,
>>
>> Antonio
>>
>>
>> 2009/5/12 Paulo Soares <psoa...@glintt.com>
>>
>>> That's a revocation check. Either you put the certificate in the trusted
>>> store or you include the crls or tell Acrobat not to check the revocation
>>> status. There's nothing wrong with the signature itself.
>>>
>>> Paulo
>>>
>>> > -----Original Message-----
>>> > From: Antonio de Calypo [mailto:antonio.cal...@gmail.com]
>>> > Sent: Tuesday, May 12, 2009 4:16 PM
>>> > To: Post all your questions about iText here
>>> > Subject: Re: [iText-questions] certificate validation
>>> >
>>> > I sign with smartcard (DNIe) all OK. But in Adobe reader you see:
>>> >
>>> > "The selected certificate does not provide information on how
>>> > to verify their status revoked. Unable to determine if this
>>> > certificate is valid or has been revoked".
>>> >
>>> >
>>> > The line/s 49 could be :
>>> > PdfStamper pdfStamper;
>>> >
>>> > pdfStamper = PdfStamper.createSignature(pdfReader,
>>> >
>>> > null, '\0', outputFile);
>>> >
>>> > PdfSignatureAppearance sap = pdfStamper.getSignatureAppearance();
>>> >
>>> > sap.setCrypto(
>>> >
>>> > key, chain, null, PdfSignatureAppearance.SELF_SIGNED);
>>> > Thanks,
>>> >
>>> > Antonio
>>> >
>>> > 2009/5/12 Paulo Soares <psoa...@glintt.com>
>>> >
>>> >
>>> > The problem is in line 49 of your code.
>>> >
>>> > Paulo
>>> >
>>> >
>>> > > -----Original Message-----
>>> > > From: Antonio de Calypo [mailto:antonio.cal...@gmail.com]
>>> > > Sent: Tuesday, May 12, 2009 12:59 PM
>>> > > To: itext-questions@lists.sourceforge.net
>>> > > Subject: [iText-questions] certificate validation
>>> > >
>>> > > Hi,
>>> > > first sorry by mi english.
>>> > > I´ve a problem when I sign whit itext, Adobe reader can´t
>>> > > verify the validation.
>>> > > How I can do with to it doesn´t happen?
>>> > >
>>> > >
>>> > > Thank,
>>> > >
>>> > > Antonio
>>>
>>>
>>> Aviso Legal:
>>> Esta mensagem é destinada exclusivamente ao destinatário. Pode conter
>>> informação confidencial ou legalmente protegida. A incorrecta transmissão
>>> desta mensagem não significa a perca de confidencialidade. Se esta mensagem
>>> for recebida por engano, por favor envie-a de volta para o remetente e
>>> apague-a do seu sistema de imediato. É proibido a qualquer pessoa que não o
>>> destinatário de usar, revelar ou distribuir qualquer parte desta mensagem.
>>>
>>> Disclaimer:
>>> This message is destined exclusively to the intended receiver. It may
>>> contain confidential or legally protected information. The incorrect
>>> transmission of this message does not mean the loss of its confidentiality.
>>> If this message is received by mistake, please send it back to the sender
>>> and delete it from your system immediately. It is forbidden to any person
>>> who is not the intended receiver to use, distribute or copy any part of this
>>> message.
>>>
>>>
>>> ------------------------------------------------------------------------------
>>> The NEW KODAK i700 Series Scanners deliver under ANY circumstances! Your
>>> production scanning environment may not be a perfect world - but thanks
>>> to
>>> Kodak, there's a perfect scanner to get the job done! With the NEW KODAK
>>> i700
>>> Series Scanner you'll get full speed at 300 dpi even with all image
>>> processing features enabled. http://p.sf.net/sfu/kodak-com
>>> _______________________________________________
>>> iText-questions mailing list
>>> iText-questions@lists.sourceforge.net
>>> https://lists.sourceforge.net/lists/listinfo/itext-questions
>>>
>>> Buy the iText book: http://www.1t3xt.com/docs/book.php
>>> Check the site with examples before you ask questions:
>>> http://www.1t3xt.info/examples/
>>> You can also search the keywords list:
>>> http://1t3xt.info/tutorials/keywords/
>>>
>>
>>
>
------------------------------------------------------------------------------
The NEW KODAK i700 Series Scanners deliver under ANY circumstances! Your
production scanning environment may not be a perfect world - but thanks to
Kodak, there's a perfect scanner to get the job done! With the NEW KODAK i700
Series Scanner you'll get full speed at 300 dpi even with all image
processing features enabled. http://p.sf.net/sfu/kodak-com
_______________________________________________
iText-questions mailing list
iText-questions@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/itext-questions
Buy the iText book: http://www.1t3xt.com/docs/book.php
Check the site with examples before you ask questions:
http://www.1t3xt.info/examples/
You can also search the keywords list: http://1t3xt.info/tutorials/keywords/
