Hi,
I just noticed that after calling AcroFields.verifySignature (), a PdfPKCS7
instance is returned.
But when calling this instance's getCertificates () method, it returns an
unordered certificate list which doesn't respect the certificate path order.
We have a 4 lenght certification path, and this array returns the 4 certs,
but in a non-realistic order:
1. Signer
2. CA Root
3. Intermediate 2
4. Intermediate 1
It should be:
1. Signer
2. Intermediate 1
3. Intermediate 2
4. CA Root
I also saw that there is a overloaded constructor of PdfPKPCS7 which does
receive a Certificate[] as parameter, which then may respect the order
provided.
How is supposed the following invocation in the itext code ordering the
certificates?
pk = new PdfPKCS7(contents.getOriginalBytes(), cert.getBytes(),
provider);
Why is it returning a different certificate path order than the one
provided when the document was originally signed?
Thanks in advance.
--
*Jonathan Vargas Rodríguez*
IT Business Solution Developer
Alkaid · Open Source Business Software
Office: 2553 5467, Mobile: 8568 3307
Web: alkaid.cr | E-mail: jvar...@alkaid.cr
*Your business needs + Our technical skills = Benefits.
That's my job. Don't be afraid to contact me* :-)
------------------------------------------------------------------------------
Free Next-Gen Firewall Hardware Offer
Buy your Sophos next-gen firewall before the end March 2013
and get the hardware for free! Learn more.
http://p.sf.net/sfu/sophos-d2d-feb
_______________________________________________
iText-questions mailing list
iText-questions@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/itext-questions
iText(R) is a registered trademark of 1T3XT BVBA.
Many questions posted to this list can (and will) be answered with a reference
to the iText book: http://www.itextpdf.com/book/
Please check the keywords list before you ask for examples:
http://itextpdf.com/themes/keywords.php
