Tamas,

Tamas wrote:
> 
> I have 3 different certificate, AC, BC, CC and 3 xml document AX, BX, CX.
> 
> version 1: I would like to create an empty pdf doc with AX as document
> attachment, then sign it with with AC.
> version 2: In the next step Id like to add BX as document attachmet and
> sing it with BX as visible signature.
> version 3:  In the final step Id like to add CX as document attachment and
> sign it with CX as visible signature.
> 
> Id like if the CC signature of the result_version_3_pdf would be valid.
> From the result_version_3_pdf Id like to retrieve the version 1 pdf with
> valid AC signature.
> From the result_version_3_pdf Id like to retrieve the version 2 pdf with
> valid BC signature.
> 

Which tool is to be used to test validity? If you use iText, there should be
no problem.

If you are using Adobe software, I'm not that sure about the validity state
shown during each and every phase or sub-phase of your workflow. The overall
signature validity state may not always be ok. You can, on the other hand,
inspect the individual signature validity states, and there should be no
problem with them.

You might have a small misconception, though, as for version two and three
you say you add a document attachment and sign IT. Actually you don't merely
sign the new attachment, you sign the whole PDF file including all formerly
added attachments.


Tamas wrote:
> 
> (With the result pdf Id like to make sure that the AX is added by the
> owner of AC, the BX is added by the owner of BC and the CX is added by the
> owner of CC.)
> 

By checking the signatures and comparing the attachments of the signed
revisions you can do that. You should be aware, though, that it does not
suffice to check whether between version n-1 to n the nth attachment has
been added; you also have to check whether any former attachments have been
replaced (i.e. the old attachment has been removed from the attachment list
while an additional new attachment has been added). Otherwise the final
document might be misleading in spite of all signatures individually being
valid.

Regards,   Michael.
-- 
View this message in context: 
http://old.nabble.com/Append-existing-signed-PDF-with-content-in-such-way-signature-stays-valid.-%28generation-next%29-tp26132337p26160095.html
Sent from the iText - General mailing list archive at Nabble.com.


------------------------------------------------------------------------------
Come build with us! The BlackBerry(R) Developer Conference in SF, CA
is the only developer event you need to attend this year. Jumpstart your
developing skills, take BlackBerry mobile applications to market and stay 
ahead of the curve. Join us from November 9 - 12, 2009. Register now!
http://p.sf.net/sfu/devconference
_______________________________________________
iText-questions mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/itext-questions

Buy the iText book: http://www.1t3xt.com/docs/book.php
Check the site with examples before you ask questions: 
http://www.1t3xt.info/examples/
You can also search the keywords list: http://1t3xt.info/tutorials/keywords/

Reply via email to