Hi Bram, yes, that's the usual problem with the crypto stuff :
The simple PKCS1 implementation is easy to adapt to card APIs, but it suffers from many drawbacks. On the other hand the CMS version (aka PKCS7 or detached) use a fully fledged signature container with many problems / compatibilty issues and extensibilty topics already solved by e.g. the Bouncy Castle classes. But here you'll see diffculties to bring in your signing card. I'm not very used to Bouncy Castle details. But afaik there are some parties active to implement stuff around the belgian ID card. E.g. some official organisation from Belgium is working on a signing applet using the OASIS DSS interface. MAybe you could join forces ? Greetings Andreas ----- original Nachricht -------- Betreff: Re: [iText-questions] Signing PDF with Belgian EID card: issuing certificates missing from path Gesendet: Do, 24. Feb 2011 Von: Bram<[email protected]> > > But that example requires a private key, right? And if I understand it > correctly, it is not possible to retrieve the private key from a smart > card. > > In my original code, based on the method signPdfSelf() from the sample > "SignatureExternalHash.java", I could replace "signature.sign()" with > "scd.generateNonRepudiationSignature(hash)" and let the EID card do the > signing. This way I didn't need to get the private key from the card. But I > don't see how I can apply a similar trick in the code of "SignWithBC.java". > Any ideas? > > Thanks in advance, > Bram > -- > View this message in context: > http://itext-general.2136553.n4.nabble.com/Signing-PDF-with-Belgian-EID-card > -issuing-certificates-missing-from-path-tp3317042p3322743.html > Sent from the iText - General mailing list archive at Nabble.com. > > ---------------------------------------------------------------------------- > -- > Free Software Download: Index, Search & Analyze Logs and other IT data in > Real-Time with Splunk. Collect, index and harness all the fast moving IT > data > generated by your applications, servers and devices whether physical, > virtual > or in the cloud. Deliver compliance at lower cost and gain new business > insights. http://p.sf.net/sfu/splunk-dev2dev > _______________________________________________ > iText-questions mailing list > [email protected] > https://lists.sourceforge.net/lists/listinfo/itext-questions > > Many questions posted to this list can (and will) be answered with a > reference to the iText book: http://www.itextpdf.com/book/ > Please check the keywords list before you ask for examples: > http://itextpdf.com/themes/keywords.php > --- original Nachricht Ende ---- ------------------------------------------------------------------------------ Free Software Download: Index, Search & Analyze Logs and other IT data in Real-Time with Splunk. Collect, index and harness all the fast moving IT data generated by your applications, servers and devices whether physical, virtual or in the cloud. Deliver compliance at lower cost and gain new business insights. http://p.sf.net/sfu/splunk-dev2dev _______________________________________________ iText-questions mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/itext-questions Many questions posted to this list can (and will) be answered with a reference to the iText book: http://www.itextpdf.com/book/ Please check the keywords list before you ask for examples: http://itextpdf.com/themes/keywords.php
