All, >From a Prior thread "RE: [iText-questions] IText Approval Signature Signing >Always Reported as Corrupted" this excerpt has lead me to request help >concerning this other issue raised in that thread:
=== mkl [[email protected]] >> Is there a special reason you create PKCS#1 signatures? As >> ISO 32000-1:2008 states, the format for encoding signature >> values should be adbe.pkcs7.detached. M_Borg wrote: > In answer to your question "Is there a special reason you create > PKCS#1 signatures?" - As a newbie I can only assume it must be the > iText code I am using. In that case you had better, in the long run, revamp that code to create /SubFilter/adbe.pkcs7.detached signature fields. First things first, though. === As detailed above Michael complained that I should be using PKCS#7 versus PKCS#1 storage. Well I am using iText version 2.1.7 and stumbled upon this in the history files post 2.1.7 versions ending with your most current iText Version of 5.0.2: === iText.jar is now compiled with Java 5 PdfPKCS7: support for OCSP and CRL in the same signature (as suggested by Daniel Uribe) PdfPKCS7: The CRLs are extracted from the right place: the signed attribute. PdfPKCS7: Stricter search for the signing certificate. FDF files are now generated as version 1.4 (instead of 1.2) http://www.itextpdf.com/history.php#50 === Do I have to migrate to this to make my signatures conformant with today's specifications. Is this ultimately why my version 2.1.7 generated signature dictionaries are so different when manually applying a signature using Acrobat client versus using iText version 2.1.7? Any guidance on how to correct welcomed. Also, has anyone implemented a PAdES compliant signature yet. I seemed to recall someone on this list was working on such an implementation. See: http://www.mail-archive.com/[email protected]/msg47936.html http://osdir.com/ml/java.lib.itext.general/2009-01/msg00203.html I need to remain 1.4 compliant for my current implementation and the above would likely make me non-conformant? Thanks, Mike ------------------------------------------------------------------------------ _______________________________________________ iText-questions mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/itext-questions Buy the iText book: http://www.itextpdf.com/book/ Check the site with examples before you ask questions: http://www.1t3xt.info/examples/ You can also search the keywords list: http://1t3xt.info/tutorials/keywords/
