Hi Andriy, PKCS11 support is good news. We build a signature server with support for HSMs offering PKCS11 interface.
There are many posts on this list regarding the problems around external signing using a smart card. It's a tricky business to bring PDF signature and QES together espacially when the card is not instantly available at any time. With our siging server we focussed on mass signing using smart cards and solved the problems like unpredictable signature size and inserting a signature into an already written PDF file. You may use our server right away ( available at http://sourceforge.net/projects/sirius-sign/ ) or grab some classes useful for you ( I would recommend to start at PDFPKCS7ProcessorBean.java ). A guide to setup a PKCS11 signing unit is available in the Wiki ... Greetings Andreas ----- original Nachricht -------- Betreff: Re: [iText-questions] HASH, SMARTCARD and PKCS#7 detached Gesendet: Do, 18. Nov 2010 Von: 0de55a<[email protected]> > > Hi Andreas, > > That's right, I've found a lot of interesting information in this topic. > > OMNI Smart card provides only .so module without any Java middleware. > This smart card works using CardOS. > > The card support PKCS11 interface. Initially I've installed openSC however > there is a difference in > directories structures which openSC suppose to use comparing with the > directories the smartcard has. > OpenSC copies data to the card, sign it, but failed to get the result as > output is provided in another > directory rather than OpenSC expects. Like a rough idea OpenSC in FAQ > propose to format the card, > but this won't work for me as I'll lost private key data. This card was > supplied by the client and I cannot > change it. This is why I've stopped to use openSC and divided signing > process in two steps: PERL script > that covers operation with the smartcard and updated version of JSignPDF > for > supporting external signed > digest. > > However, getting the signed PDF I still have the problem with Adobe reports > "The document has been altered or corrupted since it was signed". > > I would appreciate if someone can advice what's wrong with code or how can > I > locate the > reason of this message from Adobe. > > Cheers, > Andriy. > -- > View this message in context: > http://itext-general.2136553.n4.nabble.com/HASH-SMARTCARD-and-PKCS-7-detache > d-tp3047252p3048411.html > Sent from the iText - General mailing list archive at Nabble.com. > > ---------------------------------------------------------------------------- > -- > Beautiful is writing same markup. Internet Explorer 9 supports > standards for HTML5, CSS3, SVG 1.1, ECMAScript5, and DOM L2 & L3. > Spend less time writing and rewriting code and more time creating great > experiences on the web. Be a part of the beta today > http://p.sf.net/sfu/msIE9-sfdev2dev > _______________________________________________ > iText-questions mailing list > [email protected] > https://lists.sourceforge.net/lists/listinfo/itext-questions > > Many questions posted to this list can (and will) be answered with a > reference to the iText book: http://www.itextpdf.com/book/ > Please check the keywords list before you ask for examples: > http://itextpdf.com/themes/keywords.php > --- original Nachricht Ende ---- ------------------------------------------------------------------------------ Beautiful is writing same markup. Internet Explorer 9 supports standards for HTML5, CSS3, SVG 1.1, ECMAScript5, and DOM L2 & L3. Spend less time writing and rewriting code and more time creating great experiences on the web. Be a part of the beta today http://p.sf.net/sfu/msIE9-sfdev2dev _______________________________________________ iText-questions mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/itext-questions Many questions posted to this list can (and will) be answered with a reference to the iText book: http://www.itextpdf.com/book/ Please check the keywords list before you ask for examples: http://itextpdf.com/themes/keywords.php
