that returns the signed value which was signed by external signer @Michael 1. prepareToSign() - to prepare pdf for signing - this generates Hash and pass it to the client (HSM) for signing (I access HSM using JS, hashtosign is sent to JS script) -- ANY AMOUNT OF DELAY BETWEEN THESE STEPS-- 2. finishSign() - takes the signed hash value and resumes to sign PDF. (PDF is saved in memory while this is happening)
On Fri, Sep 29, 2017 at 3:12 AM Michael Lindsay <[email protected]> wrote: > Hi Paresh, > > Thanks so much for the quick reply and the code snippets. Very helpful > indeed. > > Couple quick questions…. There’s a reference here to > > final String signedHash = pdfFile.getPdfSignedHash(); > > But I can’t find where pdfFile is created or what it’s type is. > > Also, can you share your generateHash method and your PDFSigner class? > > Thanks again, > - Michael > > > > > On Sep 28, 2017, at 5:09 AM, Paresh Chouhan <[email protected]> > wrote: > > > > here's the setup for signing > > > https://0bin.net/paste/1hDByAx4i9dBAoGh#0CCZBX5Il0FHxsuYQUvoe7otY3-tHxtM0Zs9IYqLozG > > > > On Thu, Sep 28, 2017 at 5:35 PM Paresh Chouhan < > [email protected]> > > wrote: > > > >> Yes, Michael I wrote that post, It is working well with an HSM, > >> > >> > https://0bin.net/paste/iEhbQJm8y-waiV+O#2deRPmaGUdvWwg0iD+htfR4gWm3wmKUe3upyt0+3jRS > >> > >> > >> On Wed, Sep 27, 2017 at 10:19 PM Michael Lindsay > >> <[email protected]> wrote: > >> > >>> Hello List! > >>> > >>> I’ve got an implementation of pdfbox digital signing working fabulously > >>> with a self signed cert based on the examples provided. We are trying > to > >>> switch over to using an HSM and I can’t seem to crack it. I believe > from > >>> the post here that such a thing is possible: > >>> > https://stackoverflow.com/questions/44196316/pdf-signing-generated-pdf-document-certification-is-invalid-using-external-si > >>> < > >>> > https://stackoverflow.com/questions/44196316/pdf-signing-generated-pdf-document-certification-is-invalid-using-external-si > >>>> > >>> > >>> The signing service provides a signing certificate and ocsp which I > need > >>> to use to calculate the digest then pass that along to them for signing > >>> with the private key. All of the examples in the documentation assume > I > >>> have the private key. > >>> > >>> Does anyone here have any example code for calculating and sending pdf > >>> digest to external service to sign pdfs? Any help would be greatly > >>> appreciated. > >>> > >>> Thanks, > >>> - Michael > >> > >> -- > >> Regards > >> Paresh Chouhan > >> https://github.com/pareshchouhan > >> > > -- > > Regards > > Paresh Chouhan > > https://github.com/pareshchouhan > > > --------------------------------------------------------------------- > To unsubscribe, e-mail: [email protected] > For additional commands, e-mail: [email protected] > > -- Regards Paresh Chouhan https://github.com/pareshchouhan
