Hi, > 1) I've noticed that opening the 2nd PDF (signed with the PFX) takes much > longer than the first > (signed with the exported cert). I guess Adobe verifies the chain, and that's > the source of the > opening lag. So, what is the recommended approach when signing PDF documents? > To install > the certificate in the target computers? or to embed the whole chain into the > PDF? I know it's > a trade-off (speed vs practicity), but my question points to what the > world/iso/enterprises > or experience recommend.
The difference between your two files is obviously that one contains only your own cert and one contains the full chain to the root. That's also why the 2nd one can be recognized as valid by the 2nd computer - it's got the root certivicate in "trusted root certificates" but it doesn't have the two intermediate certificates. So, for the first file, adobe can't find a path from the signature cert to a trusted root. In the 2nd file, that path is provide by the included intermediate certs. I'd recommend you include the intermediate certs - a signature is only usefull if you can validate its authenticity and you want to make that as simple as possible for the recipient. Requiring manual installation of the intermediate certs isn't going to work. > 2) Why can't the PKCS12Store class (from BouncyCastle) build the whole chain > when using an exported certificate from the store? Sorry, can't help you there, I've only worked with itextsharp and pfx files. Bye, Martin No Disclaimer.icomedias ------------------------------------------------------------------------------ For Developers, A Lot Can Happen In A Second. Boundary is the first to Know...and Tell You. Monitor Your Applications in Ultra-Fine Resolution. Try it FREE! http://p.sf.net/sfu/Boundary-d2dvs2 _______________________________________________ iText-questions mailing list iText-questions@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/itext-questions iText(R) is a registered trademark of 1T3XT BVBA. Many questions posted to this list can (and will) be answered with a reference to the iText book: http://www.itextpdf.com/book/ Please check the keywords list before you ask for examples: http://itextpdf.com/themes/keywords.php
