Dear Developers, Is the "Has unsupported critical extension" at VerifyCertificates a bug in 5.3.3 ?
If not what is changed since 5.3.2 please inform me about it. Thanks, Attila. Idézet (aszo...@szomor.hu): > Dear Developers, > > I just downloaded the iTextSharp 5.3.3 and tried the OCSP > verification which was wrong in 5.3.2, but I got an error "Has > unsupported critical extension" in VerifyCertificates which was > godd in 5.3.2 ! > > > The VerifyCertificates in PdfInvoiceSigno.Verify method at line 205: > -- Object[] fails = CertificateVerification.VerifyCertificates(pkc, > kall, pk.CRLs, cal); > > The results in iTextSharpNewPdfSigno\iTextSharpNewPdfSignoApplication\ > -- Result\I01110055203_ORIGINAL_APEH_XML_SIGNED_PADES_LTV_5_3_3.pdf > -- Result\Result.txt > > My certificates are test only certificates, > they are in iTextSharpNewPdfSigno\iTextSharpNewPdfSignoApplication\ > -- Store\teszteloPeterke.pfx > > > Regards, Attila. > > > > > > Result of itextsharp-5.3.3 > --------------------------- > CREATE a PdfInvoice, please wait a while .... > ATTACH APEH XML into the PdfInvoice, please wait a while .... > DIGITALLY SIGNING the PdfInvoice, please wait a while .... > VERIFY the digital signature of PdfInvoice > Signature name: Signature1 > Signature covers whole document: True > Document revision: 1 of 1 > Timestamp imprint verifies: True > Timestamp date: 10/18/2012 10:48:03 AM > Subject: ifj. Tesztelo Péterke > Document modified: False > PK is verified > Certificate failed: Has unsupported critical extension > > CREATE PAdES_LTV on PdfInvoice, please wait a while .... > VERIFY the digital signature of PdfInvoice > Signature name: Signature1 > Signature covers whole document: False > Document revision: 1 of 2 > Timestamp imprint verifies: True > Timestamp date: 10/18/2012 10:48:03 AM > Subject: ifj. Tesztelo Péterke > Document modified: False > PK is verified > Certificate failed: Has unsupported critical extension > > Signature name: Signature2 > Signature covers whole document: True > Document revision: 2 of 2 > Subject: e-Szigno Test TSA2 > Document modified: False > LTV Timestamp Certificates verified True > > Press ENTER to continue ... > > > Result of itextsharp-5.3.2 > --------------------------- > CREATE a PdfInvoice, please wait a while .... > ATTACH APEH XML into the PdfInvoice, please wait a while .... > DIGITALLY SIGNING the PdfInvoice, please wait a while .... > VERIFY the digital signature of PdfInvoice > Signature name: Signature1 > Signature covers whole document: True > Document revision: 1 of 1 > Timestamp imprint verifies: True > Timestamp date: 10/18/2012 10:45:58 AM > Subject: ifj. Tesztelo Péterke > Document modified: False > PK is verified > Certificates verified against the KeyStore > OCSP revocation refers to this certificate: False, False > MatchesIssuer True > Certificate count in chain 3 > HashAlgOid cid: 2.16.840.1.101.3.4.2.1 tis: 2.16.840.1.101.3.4.2.1 > SerialNumber cid: 736 tis: 736 > CRL URL http://teszt.e-szigno.hu/TRootCA2008.crl > OCSP URL http://teszt.e-szigno.hu/testroot2008ocsp > EQUALS True > > CREATE PAdES_LTV on PdfInvoice, please wait a while .... > VERIFY the digital signature of PdfInvoice > Signature name: Signature1 > Signature covers whole document: False > Document revision: 1 of 2 > Timestamp imprint verifies: True > Timestamp date: 10/18/2012 10:45:58 AM > Subject: ifj. Tesztelo Péterke > Document modified: False > PK is verified > Certificates verified against the KeyStore > OCSP revocation refers to this certificate: False, False > MatchesIssuer True > Certificate count in chain 3 > HashAlgOid cid: 2.16.840.1.101.3.4.2.1 tis: 2.16.840.1.101.3.4.2.1 > SerialNumber cid: 736 tis: 736 > CRL URL http://teszt.e-szigno.hu/TRootCA2008.crl > OCSP URL http://teszt.e-szigno.hu/testroot2008ocsp > EQUALS True > > Signature name: Signature2 > Signature covers whole document: True > Document revision: 2 of 2 > Subject: e-Szigno Test TSA2 > Document modified: False > LTV Timestamp Certificates verified True > > Press ENTER to continue ... > > ------------------------------------------------------------------------------ Everyone hates slow websites. So do we. Make your web apps faster with AppDynamics Download AppDynamics Lite for free today: http://p.sf.net/sfu/appdyn_sfd2d_oct _______________________________________________ iText-questions mailing list iText-questions@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/itext-questions iText(R) is a registered trademark of 1T3XT BVBA. Many questions posted to this list can (and will) be answered with a reference to the iText book: http://www.itextpdf.com/book/ Please check the keywords list before you ask for examples: http://itextpdf.com/themes/keywords.php
