Java Mailing List Archive

http://www.junlu.com/

Google
Google
Mailing List
Home
Forum Home
JBoss - Java Application Server
Tomcat - JSP/Servlet container
Struts - A MVC web framework
iText - An open source PDF Java Library
JDOM - JDOM XML Parser
JSP - A mailing list about Java Server Pages specification and reference
J2EE - A mailing list for Java(tm) 2 Platform, Enterprise Edition
J2EE Pattern - An interest list for Sun Java Center J2EE Pattern Catalog
Servlet - A mailing list for discussion about Sun Microsystem's Java Servlet API Technology
Struts & Hibernate
Subjects
JSP editor plugin for eclipse ?
org apache jasper JasperException: Unable to compile class for JSP
Tomcat: Connection reset by peer: socket write error
Cannot retrieve definition for form bean null
Struts Tiles Tutorial (free Struts training)
Where do I download Tomcat 4 0 6?
Data Access Object (DAO) pattern, example DAO 's
Where to download Tomcat v 4 1 24 from?
Tomcat 5 0 16 Requested resource not available
Subject: Servlet : Session invalidate
Oracle Connection Pooling in 3 2 2
Servlet action is currently unavailable
Tomcat/Struts Unicode Encoding/Decoding problems
Subject: Running a Simple JMS Example
Tomcat and webapplication specific java library path
Mapping in workers2 properties
org apache jasper JasperException
problem with html:text bean throwing exception
Cannot find message resources under key org apache struts action
   MESSAGE
Cannot find message resources under key org apache struts action MESSAGE
invalid direct reference problem with solution
Tool for jsp debug Try Sysdeo Eclipse Plugin
Tomcat 5 Cannot load JDBC driver class 'null ' SQL state: null
weblogic ejbc
java properties file
Jboss 3 2 3 Coyote Can 't re
Tomcat 5, Apache2 and mod jk2 integration problem
JBoss example problem new to J2EE
Value attribute of <html:checkbox
url string for connecting jboss to oracle
javax servlet ServletException: BeanUtils populate
5 0 18: Windows XP Pro vs Windows 2000
HTTP Status 404 The requested resource is not available
 
Subject: How to verify PKCS#7 signature and timestamp present in PDF

Subject: How to verify PKCS#7 signature and timestamp present in PDF

2007-10-08       - By Gurpreet Singh

 Back
Hi,

I have certified the PDF and embedded the digital signature with timestamp
using iText and Bouncy Castle API's. Can anybody tells me that how to verify
the PKCS#7 digital signature, certificate chain and timestamp present in the
PDF?

I am using the same code present at the following URL:

http://itextpdf.sourceforge.net/howtosign.html#howtoverify

I have used the example given at the following location to create the
PKCS#7signature and timstamp using Bouncy Castle API:

http://www.nabble.com/PDF-Digital-signature-with-timestamp---using-Time-Stamp
-Authority---example-t4147508.html

I am using external HSM device to read the keystore and keys stored on it.
But while verifying the signature, it is failing at the following line:

java.security.SignatureException: Verification failed
       at com..crypto.<devieName>CertificateX509.verify(<HSMdeviceName>
CertificateX509.java:461)
       at com..crypto.<deviceName>CertificateX509.verify(<HSMDeviceName>
CertificateX509.java:396)
       at pdf.certify.timestamp.PdfPKCS7.verifyCertificates(PdfPKCS7.java
:648)
       at MySigner.verify(MySigner.java:495)
       at MySigner.signPDF(MySigner.java:367)
       at MySigner.main(MySigner.java:105)

There are 3 certificates in the chain: it passes the first certificate
verification but in the second and third it fails and finally Signature
Exception.

Please let me know about the clue to resolve the above issue.

Thanks
Gurpreet Singh

<div class="pad5x10">Hi,<br><br>I have certified the PDF and embedded the
digital signature with timestamp using iText and Bouncy Castle API&#39;s. Can
anybody tells me that how to verify the PKCS#7 digital signature, certificate
chain and timestamp present in the PDF?
</div>
<div class="pad5x10">&nbsp;</div>
<div class="pad5x10">I am using the same code present at the following URL:<
/div>
<div class="pad5x10">&nbsp;</div>
<div class="pad5x10"><a href="http://itextpdf.sourceforge.net/howtosign.html
#howtoverify">http://itextpdf.sourceforge.net/howtosign.html#howtoverify</a><
/div>
<div class="pad5x10">&nbsp;</div>
<div class="pad5x10">I have used the example given at the following location to
create the PKCS#7signature and timstamp using Bouncy Castle API:</div>
<div class="pad5x10">&nbsp;</div>
<div class="pad5x10"><a href="http://www.nabble.com/PDF-Digital-signature-with
-timestamp---using-Time-Stamp-Authority---example-t4147508.html">http://www
.nabble.com/PDF-Digital-signature-with-timestamp---using-Time-Stamp-Authority--
-example-t4147508.html
</a></div>
<div class="pad5x10">&nbsp;</div>
<div class="pad5x10">I am using external HSM device to read the keystore and
keys stored on it. But while verifying the signature, it is failing at the
following line:</div>
<div class="pad5x10">&nbsp;</div>
<div class="pad5x10">java.security.SignatureException: Verification failed<br>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; at com..crypto.&lt;devieName&gt
;CertificateX509.verify(&lt;HSMdeviceName&gt;CertificateX509.java:461)<br>&nbsp;
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; at com..crypto.&lt;deviceName&gt;
CertificateX509.verify(&lt;HSMDeviceName&gt;CertificateX509.java:396)<br>&nbsp;
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; at pdf.certify.timestamp.PdfPKCS7
.verifyCertificates(PdfPKCS7.java:648)<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
&nbsp; at MySigner.verify(MySigner.java:495)<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
&nbsp;&nbsp; at MySigner.signPDF
(MySigner.java:367)<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; at MySigner
.main(MySigner.java:105)<br>&nbsp;</div>
<div class="pad5x10">There are 3 certificates in the chain: it passes the first
certificate verification but in the second and third it fails and finally
Signature Exception. </div>
<div class="pad5x10">&nbsp;</div>
<div class="pad5x10">Please let me know about&nbsp;the clue to resolve the
above issue.</div>
<div class="pad5x10">&nbsp;</div>
<div class="pad5x10">Thanks<br>Gurpreet Singh</div>

-- ---- ---- ---- ---- ---- ---- ---- ---- ---- ---- ---- ---- ---- -----
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >> http://get.splunk.com/
__ ____ ____ ____ ____ ____ ____ ____ ____ ____
iText-questions mailing list
iText-questions@(protected)
https://lists.sourceforge.net/lists/listinfo/itext-questions
Buy the iText book: http://itext.ugent.be/itext-in-action/

©2008 junlu.com - Jax Systems, LLC, U.S.A.