aar,

aar wrote
> We are using a SSL certificate of our site issued by Thawte in this case.
> It is a chained certificate with 3 certs in it. I cannot provide the
> certificate because it contains a private key.
> 
> If we cannot use SSL certificate, Can I know what kind of certificates
> itextsharp supports.

It's not a question of which certificates iTextSharp supports (after all, it
was not an iTextSharp class which returned null but instead PKCS12Store) but
which certificates are allowed to sign documents.

Please check the key usage and extended key usage extensions of the
certificate. Do they allow document signing?

I'm just looking at a Thawte SSL certificate we use here. This certificate
doesn't have a key usage extension at all and the extended key usage
extension values

   id-kp-serverAuth             OBJECT IDENTIFIER ::= { id-kp 1 }
   -- TLS WWW server authentication

   id-kp-clientAuth             OBJECT IDENTIFIER ::= { id-kp 2 }
   -- TLS WWW client authentication

So, there is no indication that this certificate may be used for anything
but SSL / TLS purposes.

Maybe it's the same with yours.

You should ask your PKI for a certificate for digital signing. Depending on
your requirements it might be more important to get either a certificate
compliant with the local signature law or a certificate trusted by Adobe
Reader out-of-the-box.

Regards,   Michael




--
View this message in context: 
http://itext-general.2136553.n4.nabble.com/GetCertificateChain-alias-is-null-tp4659428p4659448.html
Sent from the iText - General mailing list archive at Nabble.com.

------------------------------------------------------------------------------
DreamFactory - Open Source REST & JSON Services for HTML5 & Native Apps
OAuth, Users, Roles, SQL, NoSQL, BLOB Storage and External API Access
Free app hosting. Or install the open source package on any LAMP server.
Sign up and see examples for AngularJS, jQuery, Sencha Touch and Native!
http://pubads.g.doubleclick.net/gampad/clk?id=63469471&iu=/4140/ostg.clktrk
_______________________________________________
iText-questions mailing list
iText-questions@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/itext-questions

iText(R) is a registered trademark of 1T3XT BVBA.
Many questions posted to this list can (and will) be answered with a reference 
to the iText book: http://www.itextpdf.com/book/
Please check the keywords list before you ask for examples: 
http://itextpdf.com/themes/keywords.php

Reply via email to