Bruno,

Irune Prado wrote
> The chain did in fact have three levels (signing cert - intermediate -
> root) but I was just providing all but the signing cert in the chain ¬.¬
> As I did in fact provide the correct PrivateKey, both Adobe and the
> validation service where quite confused with the private / public key
> paring.

What about checking the generated signature using its alleged private key to
prevent something like this (and also because I remember some signing
software certifications requiring such a test).

Regards,   Michael



--
View this message in context: 
http://itext-general.2136553.n4.nabble.com/MakeSignature-signDetached-problems-with-Certification-chain-tp4660421p4660428.html
Sent from the iText - General mailing list archive at Nabble.com.

------------------------------------------------------------------------------
Meet PCI DSS 3.0 Compliance Requirements with EventLog Analyzer
Achieve PCI DSS 3.0 Compliant Status with Out-of-the-box PCI DSS Reports
Are you Audit-Ready for PCI DSS 3.0 Compliance? Download White paper
Comply to PCI DSS 3.0 Requirement 10 and 11.5 with EventLog Analyzer
http://pubads.g.doubleclick.net/gampad/clk?id=154622311&iu=/4140/ostg.clktrk
_______________________________________________
iText-questions mailing list
iText-questions@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/itext-questions

iText(R) is a registered trademark of 1T3XT BVBA.
Many questions posted to this list can (and will) be answered with a reference 
to the iText book: http://www.itextpdf.com/book/
Please check the keywords list before you ask for examples: 
http://itextpdf.com/themes/keywords.php

Reply via email to