Hi Michael and Andreas, I have been trying to figure out what the issue could be based on your comments.
1) In the JSP I did the following The alert pops up the cert that was selected then I went into the details tab and looked at the key usage it shows Digital Signature, Non-Repudiation (c0) - see screen shot attached 2) Once the digest is signed and I send it back to the servlet I verify it with some java code And on the console it shows the following: 23:43:26,674 INFO [X509ServletExternalSignature] verifyDigest (begin)... 23:43:26,674 INFO [STDOUT] org.bouncycastle.cms.CMSSignedData@47d6a49 23:43:26,690 INFO [X509ServletExternalSignature] CN=HHS-SSP-CA-B7,OU=HHS,O=U.S. Government,C=US,DC=hhs,DC=gov 23:43:26,690 INFO [X509ServletExternalSignature] DC=gov,DC=hhs,C=US,O=U.S. Government,OU=HHS,CN=HHS-SSP-CA-B7 23:43:26,690 INFO [X509ServletExternalSignature] C=US,O=U.S. Government,OU=HHS,OU=CDC,OU=People,UID=1111817686+CN=XXXXXX XXXXXXX (Affiliate) 23:43:26,690 INFO [X509ServletExternalSignature] VERIFIED: true 23:43:26,690 INFO [X509ServletExternalSignature] verifyDigest (end)... 23:43:26,690 INFO [X509ServletExternalSignature] x509 AJAX End call... 3) How can I verify if I have the right padding I am way in over my head at this point I have attached the Java method I used to verify (cannot take credit I lifted it from http://bozhobg.wordpress.com/2009/07/02/how-to-obtain-signers-details-from-a-javascript-signed-data/ I am beginning to wonder if my approach completely wrong in trying to get itext to give me a digest then return it to the browser which then sings it with the smart card and returns it back to the server where I inject it back in the PDF? When I Googled I could not really everget a definitive answer that this implementation would actually work. Maybe it’s just not meant to work? The smartcard is working I just tried to sign a PDF with my smart card using Adobe professional and the document was signed correctly so it something on my side butI doubt it’s itext. Thanks again, max http://itext-general.2136553.n4.nabble.com/file/n4353711/2-2-2012_23-59-17.png 2-2-2012_23-59-17.png http://itext-general.2136553.n4.nabble.com/file/n4353711/verifyDigestt.java verifyDigestt.java -- View this message in context: http://itext-general.2136553.n4.nabble.com/Sign-and-PDF-with-SmartCard-and-web-browser-only-tp4319344p4353711.html Sent from the iText - General mailing list archive at Nabble.com. ------------------------------------------------------------------------------ Try before you buy = See our experts in action! The most comprehensive online learning library for Microsoft developers is just $99.99! Visual Studio, SharePoint, SQL - plus HTML5, CSS3, MVC3, Metro Style Apps, more. Free future releases when you subscribe now! http://p.sf.net/sfu/learndevnow-dev2 _______________________________________________ iText-questions mailing list iText-questions@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/itext-questions iText(R) is a registered trademark of 1T3XT BVBA. Many questions posted to this list can (and will) be answered with a reference to the iText book: http://www.itextpdf.com/book/ Please check the keywords list before you ask for examples: http://itextpdf.com/themes/keywords.php
