Hi Bruno, the standards related to PKCS1 signatures are very old. The PKCS7 spec und its successors have many more features readily build in into the spec, e.g. a defined mechanism for adding revocation info and OCSP response. For me there is no need for the PKCS1 any more. But more important : The newbies in the area of PDF signing are magically attracted by this 'simple' standard and get lost later on. The signature related questions in the list often refers to problems that don't exist with PKCS7. I wouldn't expect any funtional loss for iText when setting PKCS1 related stuff to 'deprecated'.
So if there is no veto from the community against dropping the PKCS1 support, I will review the samples and list the neccessary changes. Greetings Andreas ----- original Nachricht -------- Betreff: Re: [iText-questions] Digital signature with DSA key Gesendet: Di, 08. Feb 2011 Von: 1T3XT BVBA<[email protected]> > Op 8/02/2011 9:31, [email protected] schreef: > > I hope you support last nights call to drop PKCS1 support from iText ! > As digital signatures are somewhat outside my area of expertise, I > didn't follow this discussion from the start, but obviously I'm > interested in improving iText and the book. Would it be possible to > summarize the problem: > - which examples in the book should be removed (or how can they be > changed)? > - what exactly would need to be removed from iText? > - can you give me suggestions for refactoring the signing process? > > ---------------------------------------------------------------------------- > -- > The ultimate all-in-one performance toolkit: Intel(R) Parallel Studio XE: > Pinpoint memory and threading errors before they happen. > Find and fix more than 250 security defects in the development cycle. > Locate bottlenecks in serial and parallel code that limit performance. > http://p.sf.net/sfu/intel-dev2devfeb > _______________________________________________ > iText-questions mailing list > [email protected] > https://lists.sourceforge.net/lists/listinfo/itext-questions > > Many questions posted to this list can (and will) be answered with a > reference to the iText book: http://www.itextpdf.com/book/ > Please check the keywords list before you ask for examples: > http://itextpdf.com/themes/keywords.php > --- original Nachricht Ende ---- ------------------------------------------------------------------------------ The ultimate all-in-one performance toolkit: Intel(R) Parallel Studio XE: Pinpoint memory and threading errors before they happen. Find and fix more than 250 security defects in the development cycle. Locate bottlenecks in serial and parallel code that limit performance. http://p.sf.net/sfu/intel-dev2devfeb _______________________________________________ iText-questions mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/itext-questions Many questions posted to this list can (and will) be answered with a reference to the iText book: http://www.itextpdf.com/book/ Please check the keywords list before you ask for examples: http://itextpdf.com/themes/keywords.php
