Iv'e got the certificate of the trusted root,
The signature is fine, its realy the CRL that is not embeded.
Like Paulo Soares said, I have to add the crl has Signature Attributes.
But the problems is , I can't add the signature via external signature
dictionary because I use Entrust
and the hash provide by entrust is too large for the signature ... well ..
Iv'e got an exception.
Maybe I miss something but I will have to modify PdfPKCS7.Java to set the
attribute after this part.
if (!crls.isEmpty()) {
v = new ASN1EncodableVector();
for (Iterator i = crls.iterator();i.hasNext();) {
ASN1InputStream t = new ASN1InputStream(new
ByteArrayInputStream(((X509CRL)i.next()).getEncoded()));
v.add(t.readObject());
}
DERSet dercrls = new DERSet(v);
body.add(new DERTaggedObject(false, 1, dercrls));
}
??
Leonard Rosenthol-3 wrote:
>
> Signature looks fine - but since it's not chained to a trusted root, I get
> unknown validity.
>
> -----Original Message-----
> From: java-chris [mailto:[email protected]]
> Sent: Tuesday, September 29, 2009 9:48 AM
> To: [email protected]
> Subject: Re: [iText-questions] Embeded CRL not recognize by Adobe
>
>
> Thanks for your quick answers !
>
> Here my concerns :
>
>
> CRLs must be added as a signed attribute.
>
> Ok , any clue of how I can do this, im pretty new with itext and
> signatures
> field ?
>
> By the way I use
>
> Adobe Reader 9
> Windows Xp Pro
>
> Put the document here :
>
> http://chris.sphere3solutions.com/test_crl.pdf Here
>
>
>
>
>
> Paulo Soares-3 wrote:
>>
>> CRLs must be added as a signed attribute.
>>
>> Paulo
>>
>>> -----Original Message-----
>>> From: java-chris [mailto:[email protected]]
>>> Sent: Monday, September 28, 2009 8:32 PM
>>> To: [email protected]
>>> Subject: [iText-questions] Embeded CRL not recognize by Adobe
>>>
>>>
>>> Hi guy's,
>>>
>>> Iv'e got problems with Embeded CRL'S with itext.
>>>
>>> I have an application that sign a PDF File with some certificate in
>>> Microsoft Capi. ( Certificates is provide by Entrust provider)
>>>
>>> Well .. when im Embeded my CRL'S in the pdf, everything works
>>> fine without
>>> errors.
>>> When I Re-Open my pdf with my application, everythings works
>>> fine too,the
>>> document have some embeded CRL.
>>>
>>> Now the problems is , when I open the PDF in ADOBE READER the
>>> CRL is not
>>> recognize.
>>> Adobe Reader tells me that no CRL is embeded in the document.
>>>
>>> Well .. im screwed because I really need this CRL things to
>>> works by the end
>>> of the week :o( !
>>> Can someone help me with that ??
>>>
>>> Here some codes :
>>>
>>> appearance.setCrypto(aDigitalIdentity.getPrivateKey(),
>>> aDigitalIdentity
>>> .getCertificateChain(), aDigitalIdentity.getCrlList(),
>>> PdfSignatureAppearance.WINCER_SIGNED);
>>>
>>>
>>> And I add you the way I get the CRL in attachement, maybe the
>>> problems is
>>> from the crl array.
>>>
>>> http://www.nabble.com/file/p25650913/CRLFetcher.java CRLFetcher.java
>>> http://www.nabble.com/file/p25650913/CRLHolder.java CRLHolder.java
>>
>>
>> Aviso Legal:
>>
>> Esta mensagem é destinada exclusivamente ao destinatário. Pode conter
>> informação confidencial ou legalmente protegida. A incorrecta transmissão
>> desta mensagem não significa a perca de confidencialidade. Se esta
>> mensagem for recebida por engano, por favor envie-a de volta para o
>> remetente e apague-a do seu sistema de imediato. É proibido a qualquer
>> pessoa que não o destinatário de usar, revelar ou distribuir qualquer
>> parte desta mensagem.
>>
>>
>>
>> Disclaimer:
>>
>> This message is destined exclusively to the intended receiver. It may
>> contain confidential or legally protected information. The incorrect
>> transmission of this message does not mean the loss of its
>> confidentiality. If this message is received by mistake, please send it
>> back to the sender and delete it from your system immediately. It is
>> forbidden to any person who is not the intended receiver to use,
>> distribute or copy any part of this message.
>>
>>
>>
>>
>> ------------------------------------------------------------------------------
>> Come build with us! The BlackBerry® Developer Conference in SF, CA
>> is the only developer event you need to attend this year. Jumpstart your
>> developing skills, take BlackBerry mobile applications to market and stay
>> ahead of the curve. Join us from November 9-12, 2009. Register
>> now!
>> http://p.sf.net/sfu/devconf
>> _______________________________________________
>> iText-questions mailing list
>> [email protected]
>> https://lists.sourceforge.net/lists/listinfo/itext-questions
>>
>> Buy the iText book: http://www.1t3xt.com/docs/book.php
>> Check the site with examples before you ask questions:
>> http://www.1t3xt.info/examples/
>> You can also search the keywords list:
>> http://1t3xt.info/tutorials/keywords/
>>
>
> --
> View this message in context:
> http://www.nabble.com/Embeded-CRL-not-recognize-by-Adobe-tp25650913p25663385.html
> Sent from the iText - General mailing list archive at Nabble.com.
>
>
> ------------------------------------------------------------------------------
> Come build with us! The BlackBerry® Developer Conference in SF, CA
> is the only developer event you need to attend this year. Jumpstart your
> developing skills, take BlackBerry mobile applications to market and stay
> ahead of the curve. Join us from November 9-12, 2009. Register
> now!
> http://p.sf.net/sfu/devconf
> _______________________________________________
> iText-questions mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/itext-questions
>
> Buy the iText book: http://www.1t3xt.com/docs/book.php
> Check the site with examples before you ask questions:
> http://www.1t3xt.info/examples/
> You can also search the keywords list:
> http://1t3xt.info/tutorials/keywords/
> ------------------------------------------------------------------------------
> Come build with us! The BlackBerry® Developer Conference in SF, CA
> is the only developer event you need to attend this year. Jumpstart your
> developing skills, take BlackBerry mobile applications to market and stay
> ahead of the curve. Join us from November 9-12, 2009. Register
> now!
> http://p.sf.net/sfu/devconf
> _______________________________________________
> iText-questions mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/itext-questions
>
> Buy the iText book: http://www.1t3xt.com/docs/book.php
> Check the site with examples before you ask questions:
> http://www.1t3xt.info/examples/
> You can also search the keywords list:
> http://1t3xt.info/tutorials/keywords/
>
--
View this message in context:
http://www.nabble.com/Embeded-CRL-not-recognize-by-Adobe-tp25650913p25664133.html
Sent from the iText - General mailing list archive at Nabble.com.
------------------------------------------------------------------------------
Come build with us! The BlackBerry® Developer Conference in SF, CA
is the only developer event you need to attend this year. Jumpstart your
developing skills, take BlackBerry mobile applications to market and stay
ahead of the curve. Join us from November 9-12, 2009. Register now!
http://p.sf.net/sfu/devconf
_______________________________________________
iText-questions mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/itext-questions
Buy the iText book: http://www.1t3xt.com/docs/book.php
Check the site with examples before you ask questions:
http://www.1t3xt.info/examples/
You can also search the keywords list: http://1t3xt.info/tutorials/keywords/
