By the way do I see any sign of OCSP information in Reader ? I have 3 certificates in chain when creating new PdfPKCS7 object, but I still have no idea whether Reader is ignoring OCSP response or not...
Cert #1 I use for signing. Certs #2 and #3 are from Pkcs12Store when opening Pkcs12 file. > Make sure that the parent certificate is trusted by Reader. > > Paulo > > ________________________________________ > From: Whatever [digita...@hot.ee] > Sent: Friday, February 26, 2010 2:00 PM > To: Post all your questions about iText here > Subject: Re: [iText-questions] Embedding OCSP response > > I would like to add that currenlty I manage to add OCSP revocation into > PKCS7 object using GetAuthenticatedAttributeBytes and GetEncodedPKCS7. I > see that this OCSP response exists in Byterange stream. But I don't > understand why Reader is ignoring them. Is it because nextUpdate is not > set ? > > > I have the following situation: > > > > 1) Before signing PDF I am doing revocation check using OCSP > > 2) if #1 succeeds I am signing PDF on SmartCard using external digest > > > > I would like to know whether it is possible to include OCSP > revocation > > bytes in PDF ? So that in the future Acrobat Reader will know that at > > the time of signing the certificate was valid... > > > > Thanks in advance. ------------------------------------------------------------------------------ Download Intel® Parallel Studio Eval Try the new software tools for yourself. Speed compiling, find bugs proactively, and fine-tune applications for parallel performance. See why Intel Parallel Studio got high marks during beta. http://p.sf.net/sfu/intel-sw-dev _______________________________________________ iText-questions mailing list iText-questions@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/itext-questions Buy the iText book: http://www.1t3xt.com/docs/book.php Check the site with examples before you ask questions: http://www.1t3xt.info/examples/ You can also search the keywords list: http://1t3xt.info/tutorials/keywords/
