The smartcard signs the document hash and returns a signed-hash that is included in the CMS signature. A couple of things to remember when rolling your own: The hash covers the entire document EXCEPT for the Contents area that actually holds the CMS. You need to insert the CMS into the Contents area without disturbing any of the other bytes in the file. See section 12.8 of the PDF reference (PDF 32000-1:2008).

Marc

On 7/2/2024 8:47 AM, Milan Markovic wrote:
Milan Markovic <milan.markovic....@gmail.com>
5:39 PM (8 minutes ago)
to users-help
Hi,

I need some support, and hope that this is the correct address.

I am working on java app which will digitaly sign PDF document, using
pdfbox libraries. Private key is on smartcard and is not exportable. The
goal is not to use any OS middleware (smartcard driver). So far, I followed
comments from this link:
...

Hope that my explanation is clear.

Milan


---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@pdfbox.apache.org
For additional commands, e-mail: users-h...@pdfbox.apache.org

Reply via email to