Michael, Thanks for the clarification. I can try to figure out what application is used to create the signed PDFs but since there are already >10'000 PDFs archived, I guess that I have to prepare for both cases (old PDFs with the signed attribute problem and possible new ones if they decide to address the issue). It's even worse since they checked the signed PDFs before archiving, and all of them passed.
Thanks a lot for the effort you put into this thread. Regards Stephan On 09.07.2013 21:57, mkl wrote: > Stephan, > > Stephan Wagner (calac) wrote >> I have absolutely no control over the certificates > You might have misunderstood the initial issue I saw in your signature. Not > the signer certificate itself is encoded erroneously but a signed attribute > in the signature which references the signer certificate. Thus, it's not an > issue of your CA but of the signature creating application. >> the signed documents are generated and signed by another official >> government organization. > There is no way to immediately access someone in that organization who is > more sensitive concerning doing their job correctly? > > As mentioned before, if you have to create some verification software for > those signatures, your reports should always point out the format > deficiencies of the signatures. >> Now according to the standard, do you know which version is the correct >> one? > There is no standard API for ASN.1 BER and DER encoding, thus there is no > "correct" behavior here. If there was some decent API documentation, you > could compare with that and so decide which behavior is intended. > > But the difference at hand actually is not a real issue: For correctly > DER-encoded SETs any additional sorting calls don't change anything (ok, > some additional run time may be required). Therefore, unless you want to > make the API believe an unsorted set is a correctly sorted one, the > difference is non-existent. > > If you really want to make sure you have an ASN.1 object encoded just like > in some source array, find out its start and end offsets in that array and > do a direct byte array copy. > > Regards, > > Michael > > > > -- > View this message in context: > http://itext-general.2136553.n4.nabble.com/Signed-PDF-fails-to-verify-in-iText-Java-but-succeeds-in-iTextSharp-and-Acrobat-Reader-tp4658692p4658714.html > Sent from the iText - General mailing list archive at Nabble.com. > > ------------------------------------------------------------------------------ > See everything from the browser to the database with AppDynamics > Get end-to-end visibility with application monitoring from AppDynamics > Isolate bottlenecks and diagnose root cause in seconds. > Start your free trial of AppDynamics Pro today! > http://pubads.g.doubleclick.net/gampad/clk?id=48808831&iu=/4140/ostg.clktrk > _______________________________________________ > iText-questions mailing list > iText-questions@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/itext-questions > > iText(R) is a registered trademark of 1T3XT BVBA. > Many questions posted to this list can (and will) be answered with a > reference to the iText book: http://www.itextpdf.com/book/ > Please check the keywords list before you ask for examples: > http://itextpdf.com/themes/keywords.php ------------------------------------------------------------------------------ See everything from the browser to the database with AppDynamics Get end-to-end visibility with application monitoring from AppDynamics Isolate bottlenecks and diagnose root cause in seconds. Start your free trial of AppDynamics Pro today! http://pubads.g.doubleclick.net/gampad/clk?id=48808831&iu=/4140/ostg.clktrk _______________________________________________ iText-questions mailing list iText-questions@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/itext-questions iText(R) is a registered trademark of 1T3XT BVBA. Many questions posted to this list can (and will) be answered with a reference to the iText book: http://www.itextpdf.com/book/ Please check the keywords list before you ask for examples: http://itextpdf.com/themes/keywords.php
