Valentin, Valentin Ivanov wrote > Here is the signed file with TS and OCSP included. > signed_Technical_data_new_TS_OCSP.pdf > <http://itext-general.2136553.n4.nabble.com/file/n4658514/signed_Technical_data_new_TS_OCSP.pdf> > > > Here is the signed file with TS only. > signed_Technical_data_new_TS.pdf > <http://itext-general.2136553.n4.nabble.com/file/n4658514/signed_Technical_data_new_TS.pdf> >
I've had a look at these two new files. Neither of them actually includes an OCSP response. Maybe the OCSP responder was not available? Anyways, just like your other signed documents, they look ok inside. Thus, to actually check for a green check mark, I additionally need the CA and root certificates involved (to make them known here and to make the roots trusted). Valentin Ivanov wrote > Actually what are the necessary things I have to include to fulfill the > green check mark requirements? It is foremost necessary that the Acrobat Reader has the necessary information to build a certificate chain which leads from the user certificate to a trusted certificate. And, of course, the signature must not be invalidated anyhow. But the latter is not the issue here. This reminds me... where did you add the CA and trust the root certificates? Did you do that in the Windows (or whichever OS you use) certificate management? Or in the Adobe Reader certificate management? I ask because there is another small difference between your old 5.2.1 signature and your new ones: The old adbe.pkcs7.sha1 signature uses the filter Adobe.PPKMS and the new adbe.pkcs7.detached signatures use Adobe.PPKLite. While the PDF specification does not require certain filters to imply anything, I think that Adobe Reader for certain filters also trusts the certificates trusted by the OS and for others only trusts those trusted by its own settings. (At least that seems to have been true some years ago, e.g. cf. https://www.eldos.com/forum/read.php?PAGEN_3=1&FID=7&TID=1579#message8699 and other google hits.) Regards, Michael -- View this message in context: http://itext-general.2136553.n4.nabble.com/Green-check-mark-issue-tp4658502p4658539.html Sent from the iText - General mailing list archive at Nabble.com. ------------------------------------------------------------------------------ This SF.net email is sponsored by Windows: Build for Windows Store. http://p.sf.net/sfu/windows-dev2dev _______________________________________________ iText-questions mailing list iText-questions@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/itext-questions iText(R) is a registered trademark of 1T3XT BVBA. Many questions posted to this list can (and will) be answered with a reference to the iText book: http://www.itextpdf.com/book/ Please check the keywords list before you ask for examples: http://itextpdf.com/themes/keywords.php
