You'll need something else on the client side to sign the PDF hash as the private key cannot be exported from the PKI-Token.
Paulo > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On > Behalf Of Benjamin Schüttler > Sent: Tuesday, April 17, 2007 12:34 PM > To: Post all your questions about iText here > Subject: Re: [iText-questions]Security: Certificatevalid > butSignature invalid > > My Workflow is like this: > > Every employee of my customers corp has got an unique > PKI-Token (via USB). > These tokens contain a certificate wich is the only thing my > application > recieves via a https-request. > This way the user logges in to the application, and by reading the > information from this certificate I'm able to assure the > identity of the > user. > Now there are some forms within the further workflow. > Previously the user created these (PDF), printed it and had to have > their superiors to sign it manually. > > Now the manual signature should be replaced by a valid pdf-signature. > > That's all. > > Ben > > Paulo Soares wrote: > > I don't really understand your workflow (if you have the > private key you may as well have the certificates) but to > sign you must have a certificate and a matched private key. > > > > Paulo > > > > > >> -----Original Message----- > >> From: [EMAIL PROTECTED] > >> [mailto:[EMAIL PROTECTED] On > >> Behalf Of Benjamin Schüttler > >> Sent: Tuesday, April 17, 2007 12:01 PM > >> To: Post all your questions about iText here > >> Subject: Re: [iText-questions] Security: Certificatevalid > >> butSignature invalid > >> > >> Well, that makes sense. > >> Probably just needed to ask to clarify this for myself. > >> thanks a lot :) > >> > >> So, if I want to keep the workflow I would have to add the > >> PrivateKeys > >> for any Certificate that I want to use for signing to my KeyStore? > >> > >> Ben > >> > >> [rest shortened] Aviso Legal: Esta mensagem é destinada exclusivamente ao destinatário. Pode conter informação confidencial ou legalmente protegida. A incorrecta transmissão desta mensagem não significa a perca de confidencialidade. Se esta mensagem for recebida por engano, por favor envie-a de volta para o remetente e apague-a do seu sistema de imediato. É proibido a qualquer pessoa que não o destinatário de usar, revelar ou distribuir qualquer parte desta mensagem. Disclaimer: This message is destined exclusively to the intended receiver. It may contain confidential or legally protected information. The incorrect transmission of this message does not mean the loss of its confidentiality. If this message is received by mistake, please send it back to the sender and delete it from your system immediately. It is forbidden to any person who is not the intended receiver to use, distribute or copy any part of this message. ------------------------------------------------------------------------- This SF.net email is sponsored by DB2 Express Download DB2 Express C - the FREE version of DB2 express and take control of your XML. No limits. Just data. Click to get it now. http://sourceforge.net/powerbar/db2/ _______________________________________________ iText-questions mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/itext-questions Buy the iText book: http://itext.ugent.be/itext-in-action/
