Stephan, Stephan Wagner (calac) wrote > I have absolutely no control over the certificates
You might have misunderstood the initial issue I saw in your signature. Not the signer certificate itself is encoded erroneously but a signed attribute in the signature which references the signer certificate. Thus, it's not an issue of your CA but of the signature creating application. > the signed documents are generated and signed by another official > government organization. There is no way to immediately access someone in that organization who is more sensitive concerning doing their job correctly? As mentioned before, if you have to create some verification software for those signatures, your reports should always point out the format deficiencies of the signatures. > Now according to the standard, do you know which version is the correct > one? There is no standard API for ASN.1 BER and DER encoding, thus there is no "correct" behavior here. If there was some decent API documentation, you could compare with that and so decide which behavior is intended. But the difference at hand actually is not a real issue: For correctly DER-encoded SETs any additional sorting calls don't change anything (ok, some additional run time may be required). Therefore, unless you want to make the API believe an unsorted set is a correctly sorted one, the difference is non-existent. If you really want to make sure you have an ASN.1 object encoded just like in some source array, find out its start and end offsets in that array and do a direct byte array copy. Regards, Michael -- View this message in context: http://itext-general.2136553.n4.nabble.com/Signed-PDF-fails-to-verify-in-iText-Java-but-succeeds-in-iTextSharp-and-Acrobat-Reader-tp4658692p4658714.html Sent from the iText - General mailing list archive at Nabble.com. ------------------------------------------------------------------------------ See everything from the browser to the database with AppDynamics Get end-to-end visibility with application monitoring from AppDynamics Isolate bottlenecks and diagnose root cause in seconds. Start your free trial of AppDynamics Pro today! http://pubads.g.doubleclick.net/gampad/clk?id=48808831&iu=/4140/ostg.clktrk _______________________________________________ iText-questions mailing list iText-questions@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/itext-questions iText(R) is a registered trademark of 1T3XT BVBA. Many questions posted to this list can (and will) be answered with a reference to the iText book: http://www.itextpdf.com/book/ Please check the keywords list before you ask for examples: http://itextpdf.com/themes/keywords.php
