Dear Michael,
I tried to use keytool to generate a keystore and sign the PDF. It shows
LTV-enabled in Adobe reader.
I also use the same method to sign the PDF with PKCS#11 (Smartcard) but the
output signed PDF not LTV-enabled!!!!
What's the difference?
Best regards,
Eric
On Fri, Dec 27, 2013 at 12:49 PM, Eric Chow <eric...@gmail.com> wrote:
> Dear Michael,
>
> Thanks for your help.
> Because of my dummy and leak of knowledge in LTV, would you please to show
> me a simple example to sign a PDF that LTV-enabled with option 2?
>
> Best regards,
> Eric
>
>
>
> On Fri, Dec 27, 2013 at 3:58 AM, mkl <m...@wir-sind-cool.org> wrote:
>
>> Eric Chow wrote
>> > I used the following code to add the LTV to the existed signed PDF. The
>> > attached PDF is the result. But it shows "LTV not enabled ....." in the
>> > Adobe Reader XI.
>> >
>> > test_signed_LTV.pdf (346K)
>> >
>> http://itext-general.2136553.n4.nabble.com/attachment/4659584/0/test_signed_LTV.pdf
>>
>> Your signature contains both a CRL and a time stamp both of which have
>> signatures in their own right. Unfortunately the
>> LtvVerification.addVerification overload you use only inspects the outer
>> signatures.
>>
>> Thus, you have three options,
>>
>> 1. Include all the CRLs / OCSP responses required to verify the
>> certificates
>> of the outer signature, the CRL and OCSP response signatures, and
>> timestamp
>> already in the original signature; in this case you do not need to add
>> extra
>> validation related information. In your case only one CRL is embedded
>> which
>> most likely does not contain the information required for verifying the
>> three signatures used.
>>
>> 2. Don't use CRLs, OCSP reponses or time stamps in the original signature
>> but do add the whole signature chain (in your case there only is the
>> signer
>> certificate). In this case the LtvVerification.addVerification overload
>> you
>> use should add all required information.
>>
>> 3. Collect all validation related information required for all signatures
>> already present in the PDF and in the collected information, and use the
>> other LtvVerification.addVerification overload to add these information.
>>
>> Regards, Michael
>>
>>
>>
>> --
>> View this message in context:
>> http://itext-general.2136553.n4.nabble.com/LTV-problem-tp4659550p4659590.html
>> Sent from the iText - General mailing list archive at Nabble.com.
>>
>>
>> ------------------------------------------------------------------------------
>> Rapidly troubleshoot problems before they affect your business. Most IT
>> organizations don't have a clear picture of how application performance
>> affects their revenue. With AppDynamics, you get 100% visibility into your
>> Java,.NET, & PHP application. Start your 15-day FREE TRIAL of AppDynamics
>> Pro!
>>
>> http://pubads.g.doubleclick.net/gampad/clk?id=84349831&iu=/4140/ostg.clktrk
>> _______________________________________________
>> iText-questions mailing list
>> iText-questions@lists.sourceforge.net
>> https://lists.sourceforge.net/lists/listinfo/itext-questions
>>
>> iText(R) is a registered trademark of 1T3XT BVBA.
>> Many questions posted to this list can (and will) be answered with a
>> reference to the iText book: http://www.itextpdf.com/book/
>> Please check the keywords list before you ask for examples:
>> http://itextpdf.com/themes/keywords.php
>>
>
>
------------------------------------------------------------------------------
Rapidly troubleshoot problems before they affect your business. Most IT
organizations don't have a clear picture of how application performance
affects their revenue. With AppDynamics, you get 100% visibility into your
Java,.NET, & PHP application. Start your 15-day FREE TRIAL of AppDynamics Pro!
http://pubads.g.doubleclick.net/gampad/clk?id=84349831&iu=/4140/ostg.clktrk
_______________________________________________
iText-questions mailing list
iText-questions@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/itext-questions
iText(R) is a registered trademark of 1T3XT BVBA.
Many questions posted to this list can (and will) be answered with a reference
to the iText book: http://www.itextpdf.com/book/
Please check the keywords list before you ask for examples:
http://itextpdf.com/themes/keywords.php
