Attila,

aszomor wrote
> I debugged onwards and I found that int the signature of PAdES LTV the
> pk.SignDate is "1/1/0001 12:00:00 AM".
> 
> Thus the error "The certificate has expired or is not yet valid" is
> correct.
> 
> How can I handle this situation?

That is due to the fact that pk.SignDate (at least in Java) is set from the
contents of the signature dictionary /M entry. In PAdES-LTV document
timestamps, though, /M should not be present (according to the spec) and in
your example document actually is not.

If you want to do pure PAdES-LTV like validation, proceed as outlined in
clause 4.3 of TS 102 778-4, i.e.

> 4.3 Validation Process
> 
> It is recommended that that validation process be as follows:
> 
> 1) The "latest" document Time-stamp should be validated at current time
> with validation data collected at the current time.
> 
> 2) The "inner" document Time-stamp should be validated at previous
> document Time-stamp time with the validation data present (and
> time-stamped for the successive enveloping time-stamps) in the previous
> DSS.
> 
> 3) The signature and the signature Time-stamp should be validated at the
> latest innermost LTV document Time-stamp time using the validation data
> stored in the DSS and time-stamped (by the successive enveloping
> time-stamps)
> 
> Validation of documents without document Time-stamps is outside the scope
> of this profile.

Regards,   Michael

--
View this message in context: 
http://itext-general.2136553.n4.nabble.com/How-can-I-verify-the-PAdES-LTV-from-code-tp4169463p4172700.html
Sent from the iText - General mailing list archive at Nabble.com.

------------------------------------------------------------------------------
Cloud Services Checklist: Pricing and Packaging Optimization
This white paper is intended to serve as a reference, checklist and point of 
discussion for anyone considering optimizing the pricing and packaging model 
of a cloud services business. Read Now!
http://www.accelacomm.com/jaw/sfnl/114/51491232/
_______________________________________________
iText-questions mailing list
iText-questions@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/itext-questions

iText(R) is a registered trademark of 1T3XT BVBA.
Many questions posted to this list can (and will) be answered with a reference 
to the iText book: http://www.itextpdf.com/book/
Please check the keywords list before you ask for examples: 
http://itextpdf.com/themes/keywords.php

Reply via email to