jv r,

concerning your main issue, BTW...

jv r wrote
> I'm using the code example of the javadoc
> 
> [...]
>     Object fails[] = PdfPKCS7.verifyCertificates(pkc, myKeyStore, null,
> cal);
> [...]
> 
> myKeyStore is the KeyStore used to sign the document
> pkc has got the intermediate and CA certificates.
> 
> I'm getting the next error:
> 
> Certificate failed: Cannot be verified against the KeyStore or the
> certificate chain

PdfPKCS7.verifyCertificates uses only the entries marked as certEntry or
trustedCertEntry in myKeyStore. As you say "myKeyStore is the KeyStore used
to sign the document," it most likely contains only a PrivateKeyEntry.

If this is the issue, use the keytool to create a keystore with the trusted
certificates as certificate entries.

Regards,   Michael

--
View this message in context: 
http://itext-general.2136553.n4.nabble.com/PdfPKCS7-verifyCertificates-tp4312956p4313332.html
Sent from the iText - General mailing list archive at Nabble.com.

------------------------------------------------------------------------------
Keep Your Developer Skills Current with LearnDevNow!
The most comprehensive online learning library for Microsoft developers
is just $99.99! Visual Studio, SharePoint, SQL - plus HTML5, CSS3, MVC3,
Metro Style Apps, more. Free future releases when you subscribe now!
http://p.sf.net/sfu/learndevnow-d2d
_______________________________________________
iText-questions mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/itext-questions

iText(R) is a registered trademark of 1T3XT BVBA.
Many questions posted to this list can (and will) be answered with a reference 
to the iText book: http://www.itextpdf.com/book/
Please check the keywords list before you ask for examples: 
http://itextpdf.com/themes/keywords.php

Reply via email to