Do you want to sign the entire PDF, using the methodology defined in ISO 32000-1 (and/or ETSI TS 102778)
OR Do you want to sign the XFA only, using the methodology defined in the XFA specification? On 7/12/11 4:17 PM, "Emmanuel Coste" <rnd...@gmail.com> wrote: >Hello, > >Thanks for your help Balder. > >I am trying again to explain the problem I encounter: > >I need to apply a PDF Signature to the XFA form itself: >- when the PDF file is a static PDF, I get a VALID signature and I can see >through acrobat Reader that everything is correct. >- when the PDF file is a dynamic PDF, I get an INVALID signature. > >If I sign the dynamic PDF with acrobat pro and compare it with the signed >file I get with my program, I can clearly see that the part I am missing >is >contained is the XFA form: the node <form> is incorrect. > >* Acrobat Pro computes a checksum that is added to the node <form>.* > >This checksum is apparently a kind of digest of the PDF file. Its length >corresponds to a SHA1 digest. In my mind, it is probably the digest of the >whole signed file except the node <form> but I unfortunately cannot >confirm >that. > >In the "xfa_spec_3_1.pdf" documentation, the corresponding section is: >Chapter 16, Security and Reliability -- PDF Signatures page 559 and I can >read this: > >"When the PDF signature covers all fields in the form its computation >includes the entire XFA form >embedded in the PDF and most of the non-XFA content in the PDF as well. >Some >portions of the non-XFA >content are omitted as specified in the PDF standard [PDF]." > >But that is exactly what I am doing and it works for the static PDF files. > >Any guess? > >Thanks very much in advance, >Emmanuel > >PS: my input in attached piece >http://itext-general.2136553.n4.nabble.com/file/n3662413/original_input.pd >f >original_input.pdf > > >-- >View this message in context: >http://itext-general.2136553.n4.nabble.com/Xfa-signature-tp2172306p3662413 >.html >Sent from the iText - General mailing list archive at Nabble.com. > >-------------------------------------------------------------------------- >---- >All of the data generated in your IT infrastructure is seriously valuable. >Why? It contains a definitive record of application performance, security >threats, fraudulent activity, and more. Splunk takes this data and makes >sense of it. IT sense. And common sense. >http://p.sf.net/sfu/splunk-d2d-c2 >_______________________________________________ >iText-questions mailing list >iText-questions@lists.sourceforge.net >https://lists.sourceforge.net/lists/listinfo/itext-questions > >iText(R) is a registered trademark of 1T3XT BVBA. >Many questions posted to this list can (and will) be answered with a >reference to the iText book: http://www.itextpdf.com/book/ >Please check the keywords list before you ask for examples: >http://itextpdf.com/themes/keywords.php ------------------------------------------------------------------------------ All of the data generated in your IT infrastructure is seriously valuable. Why? It contains a definitive record of application performance, security threats, fraudulent activity, and more. Splunk takes this data and makes sense of it. IT sense. And common sense. http://p.sf.net/sfu/splunk-d2d-c2 _______________________________________________ iText-questions mailing list iText-questions@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/itext-questions iText(R) is a registered trademark of 1T3XT BVBA. Many questions posted to this list can (and will) be answered with a reference to the iText book: http://www.itextpdf.com/book/ Please check the keywords list before you ask for examples: http://itextpdf.com/themes/keywords.php
