Op 9/01/2013 23:00, jv r schreef:
>
> I'm testing the example part3.chapter12.TimestampOCSP
>
> I have used the pkcs12 keystore to sign the document signature is 
> valid and timestamp is added and LTV is activated.
>

OK...

> 1.- When the document is signed with pkcs12 is possible to deactive LTV?
>

???
You may want to rephrase that question; currently it sounds as if you 
want to remove LTV. That doesn't make sense, does it?

> I have changed the keystore. Key and certificates used to sign the 
> document are from a smartcard(pkcs11). Then document is signed and 
> validated, timestamp is added but LTV is not activated.
>

Any signed document of which all signatures are valid can be LTV-enabled 
by adding a DSS.
Since Adobe Acrobat / Reader XI, the signature panel now shows a (IMHO 
misleading) message if the signature is LTV-enabled or not. After some 
experiments, I found out that Reader says the document is LTV-enabled if 
you sign the document adding ALL the verification information for ALL 
the certificates involved. If for instance, you don't add a CRL for an 
intermediery certificate, you'll get a message that the document isn't 
LTV-enabled.

> 2.- Which is the reason?
>
> At signature details has been written the signature is not activated 
> for LTV and will expire after(smartcardcertificate expirationdate), 
> not after(timestamp certificate expiration date).
>

I'm sorry, I have no idea what you're saying here.

> 3.- Will show, the document, a green check mark in the signature after 
> the (smartcard certificate expiration date), isnt it?, timestamp works 
> on this issue.
>

Again, I don't have a clue what you mean.

If you sign with a CDS or AATL certificate, you will get a green check 
mark without any extra manual intervention by the end user as long as:
- the certificate isn't expired
- there's a valid timestamp that signs the VRI
Once the certificate of the timestamp expires, you need to add a DSS and 
a document-level timestamp.

------------------------------------------------------------------------------
Master Visual Studio, SharePoint, SQL, ASP.NET, C# 2012, HTML5, CSS,
MVC, Windows 8 Apps, JavaScript and much more. Keep your skills current
with LearnDevNow - 3,200 step-by-step video tutorials by Microsoft
MVPs and experts. ON SALE this month only -- learn more at:
http://p.sf.net/sfu/learnmore_122712
_______________________________________________
iText-questions mailing list
iText-questions@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/itext-questions

iText(R) is a registered trademark of 1T3XT BVBA.
Many questions posted to this list can (and will) be answered with a reference 
to the iText book: http://www.itextpdf.com/book/
Please check the keywords list before you ask for examples: 
http://itextpdf.com/themes/keywords.php

Reply via email to