jv r wrote
> I'm using the code example of the javadoc
> 
> [...]
> 
>     Certificate pkc[] = pk.getCertificates();
> [...]
>     Object fails[] = PdfPKCS7.verifyCertificates(pkc, myKeyStore, null,
> cal);
> 

While this probably may not solve your problem, please use
pk.getSignCertificateChain() instead of pk.getCertificates() as input to
PdfPKCS7.verifyCertificates(...) --- pk.getCertificates() can be manipulated
to contain something verifyCertificates accepts while the actual signing
certificate is not trusted, neither directly nor indirectly via its chain.

Regards,   Michael

--
View this message in context: 
http://itext-general.2136553.n4.nabble.com/PdfPKCS7-verifyCertificates-tp4312956p4312984.html
Sent from the iText - General mailing list archive at Nabble.com.

------------------------------------------------------------------------------
Keep Your Developer Skills Current with LearnDevNow!
The most comprehensive online learning library for Microsoft developers
is just $99.99! Visual Studio, SharePoint, SQL - plus HTML5, CSS3, MVC3,
Metro Style Apps, more. Free future releases when you subscribe now!
http://p.sf.net/sfu/learndevnow-d2d
_______________________________________________
iText-questions mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/itext-questions

iText(R) is a registered trademark of 1T3XT BVBA.
Many questions posted to this list can (and will) be answered with a reference 
to the iText book: http://www.itextpdf.com/book/
Please check the keywords list before you ask for examples: 
http://itextpdf.com/themes/keywords.php

Reply via email to