Michael, mkl wrote > But I'm a bit surprised by the size of the CMS container in your > 5.4.2-signed document. I assume a very big CRL is included.
Yes, it is big, like 110 KB. mkl wrote > You might want to use OCSP responses instead. Here is the signed file with TS and OCSP included. signed_Technical_data_new_TS_OCSP.pdf <http://itext-general.2136553.n4.nabble.com/file/n4658514/signed_Technical_data_new_TS_OCSP.pdf> mkl wrote > I would start by trying without the revocation information first. Here is the signed file with TS only. signed_Technical_data_new_TS.pdf <http://itext-general.2136553.n4.nabble.com/file/n4658514/signed_Technical_data_new_TS.pdf> Actually what are the necessary things I have to include to fulfill the green check mark requirements? mkl wrote > please provide the relevant signature creation code. / PdfStamper stp = PdfStamper.createSignature(reader, fout, '\0', null, true); PdfSignatureAppearance sap = stp.getSignatureAppearance(); ... ExternalSignature es = new BOBSPDFSignature(certPriv.getPriv(), DigestAlgorithms.SHA1, "RSA", certPriv.getProvider()); TSAClientBouncyCastle tsClient = new TSAClientBouncyCastle("TSAURL); OcspClient ocspClient = new OcspClientBouncyCastle(); List<CrlClient> crlClient = new ArrayList<CrlClient>(); crlClient.add( new CrlClientOnline( new java.security.cert.Certificate[]{certPriv.getCert()} ) ); // sign MakeSignature.signDetached(sap, new BouncyCastleDigest(), es, new java.security.cert.Certificate[]{certPriv.getCert()}, crlClient, ocspClient, tsClient, 0, MakeSignature.CryptoStandard.CMS); / Best Regards, Valentin Ivanov -- View this message in context: http://itext-general.2136553.n4.nabble.com/Green-check-mark-issue-tp4658502p4658514.html Sent from the iText - General mailing list archive at Nabble.com. ------------------------------------------------------------------------------ This SF.net email is sponsored by Windows: Build for Windows Store. http://p.sf.net/sfu/windows-dev2dev _______________________________________________ iText-questions mailing list iText-questions@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/itext-questions iText(R) is a registered trademark of 1T3XT BVBA. Many questions posted to this list can (and will) be answered with a reference to the iText book: http://www.itextpdf.com/book/ Please check the keywords list before you ask for examples: http://itextpdf.com/themes/keywords.php
