iText - General

Sign a PDF/A

Classic

List

Threaded

34 messages Options

mpino

Sign a PDF/A

Does anybody have signed a PDF/A generated through itext or itextsharp?. Any suggestions should be welcome.

Best regards
mpino

iText Software

Re: Sign a PDF/A

On 27/06/2011 16:42, mpino wrote:
> Does anybody have signed a PDF/A generated through itext or itextsharp?. Any
> suggestions should be welcome.
PDF/A excludes the use of encryption algorithms, doesn't it?
Then how exactly would you sign a PDF and keep it conform with PDF/A?

------------------------------------------------------------------------------
All of the data generated in your IT infrastructure is seriously valuable.
Why? It contains a definitive record of application performance, security
threats, fraudulent activity, and more. Splunk takes this data and makes
sense of it. IT sense. And common sense.
http://p.sf.net/sfu/splunk-d2d-c2
_______________________________________________
iText-questions mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/itext-questions

iText(R) is a registered trademark of 1T3XT BVBA.
Many questions posted to this list can (and will) be answered with a reference to the iText book: http://www.itextpdf.com/book/
Please check the keywords list before you ask for examples: http://itextpdf.com/themes/keywords.php

mkl

Re: Sign a PDF/A

1T3XT BVBA wrote

On 27/06/2011 16:42, mpino wrote:
> Does anybody have signed a PDF/A generated through itext or itextsharp?.
> Any suggestions should be welcome.
PDF/A excludes the use of encryption algorithms, doesn't it?
Then how exactly would you sign a PDF and keep it conform with PDF/A?

You might want to take a look at the PDF/A Competence Center Technical Note TN0006 - Digital Signatures in PDF/A-1 (http://www.pdfa.org/lib/exe/fetch.php?id=pdfa%3Atechdok&cache=cache&media=pdfa:techdoc:tn0006_digital_signatures_in_pdfa-1_2008-03-14.pdf).

Regards, Michael

iText Software

Re: Sign a PDF/A

On 27/06/2011 17:14, mkl wrote:
> 1T3XT BVBA wrote:
>> PDF/A excludes the use of encryption algorithms, doesn't it?
>> Then how exactly would you sign a PDF and keep it conform with PDF/A?
> You might want to take a look at the PDF/A Competence Center Technical Note
Interesting!
I failed to see why one would want to sign a PDF/A document, because
there's no obligation for PDF/A compliant readers to be able to verify
the signature.
But the note made it clear it's possible to sign a PDF/A document anyway.
Thanks!

------------------------------------------------------------------------------
All of the data generated in your IT infrastructure is seriously valuable.
Why? It contains a definitive record of application performance, security
threats, fraudulent activity, and more. Splunk takes this data and makes
sense of it. IT sense. And common sense.
http://p.sf.net/sfu/splunk-d2d-c2
_______________________________________________
iText-questions mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/itext-questions

iText(R) is a registered trademark of 1T3XT BVBA.
Many questions posted to this list can (and will) be answered with a reference to the iText book: http://www.itextpdf.com/book/
Please check the keywords list before you ask for examples: http://itextpdf.com/themes/keywords.php

Leonard Rosenthol-3

Re: Sign a PDF/A

First, remember that signatures don't use encryption (well, not in the
same way) so that signatures are most certainly allowed in PDF/A (parts 1,
2 and 3). In PDF/A-1, we don't speak at all about signatures and they are
simply there as defined by PDF 1.4. However, PDF/A-2 and PDF/A-3 both
have very detailed sections on Digital Signatures and PDF/A, based on the
PAdES (ETSI TS 102778) standard.

Signing PDF/A is VERY IMPORTANT...

Leonard

On 6/27/11 5:20 PM, "1T3XT BVBA" <[hidden email]> wrote:

>On 27/06/2011 17:14, mkl wrote:
>> 1T3XT BVBA wrote:
>>> PDF/A excludes the use of encryption algorithms, doesn't it?
>>> Then how exactly would you sign a PDF and keep it conform with PDF/A?
>> You might want to take a look at the PDF/A Competence Center Technical
>>Note
>Interesting!
>I failed to see why one would want to sign a PDF/A document, because
>there's no obligation for PDF/A compliant readers to be able to verify
>the signature.
>But the note made it clear it's possible to sign a PDF/A document anyway.
>Thanks!
>
>--------------------------------------------------------------------------
>----
>All of the data generated in your IT infrastructure is seriously valuable.
>Why? It contains a definitive record of application performance, security
>threats, fraudulent activity, and more. Splunk takes this data and makes
>sense of it. IT sense. And common sense.
>http://p.sf.net/sfu/splunk-d2d-c2
>_______________________________________________
>iText-questions mailing list
>[hidden email]
>https://lists.sourceforge.net/lists/listinfo/itext-questions
>
>iText(R) is a registered trademark of 1T3XT BVBA.
>Many questions posted to this list can (and will) be answered with a
>reference to the iText book: http://www.itextpdf.com/book/
>Please check the keywords list before you ask for examples:
>http://itextpdf.com/themes/keywords.php

------------------------------------------------------------------------------
All of the data generated in your IT infrastructure is seriously valuable.
Why? It contains a definitive record of application performance, security
threats, fraudulent activity, and more. Splunk takes this data and makes
sense of it. IT sense. And common sense.
http://p.sf.net/sfu/splunk-d2d-c2
_______________________________________________
iText-questions mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/itext-questions

iText(R) is a registered trademark of 1T3XT BVBA.
Many questions posted to this list can (and will) be answered with a reference to the iText book: http://www.itextpdf.com/book/
Please check the keywords list before you ask for examples: http://itextpdf.com/themes/keywords.php

mkl

Re: Sign a PDF/A

In reply to this post by iText Software

1T3XT BVBA wrote

I failed to see why one would want to sign a PDF/A document, because
there's no obligation for PDF/A compliant readers to be able to verify
the signature.

Especially in the use case of archiving I see a necessity to sign, time stamp, or both sign and time stamp documents. And if your processes are PDF-centric, integrated signatures and time stamps are obvious techniques to use, independant of the capabilities of viewer programs. Unless, of course, you first need to archive the unsigned document and your archival policy doesn't allow updates of these documents.

Regards, Michael.

stefanu

Re: Sign a PDF/A

Hello,

I am currently evaluating the possibility to sign PDF/A with iText, using the free release.

I have checked both input and output PDFs with Acrobat X Pro Trial Preflight tool. First document conformance verification succeeds whereas the signed PDF is no longer compliant. The 2 errors signaled by Preflight are:

1. Metadata missing (XMP) : PDF may contain metadata information in the document properties as well as in the XMP metadata stream. Some PDF-based ISO standards require the presence of XMP metadata.

According to the online documentation, metadata information is not required in the document properties. Morover, the initial metadata is correctly preserved (the initial document is PDF/A compliant), but after signing additional information is added to the metadata (for e.g. creator and modification date) which somehow invalidates the document.

2. PDF/A entry missing : The document's XMP metadata does not contain a PDF/A entry, or the PDF/A entry is not stored under the correct namespace URI which must be "http://www.aiim.org/pdfa/ns/id/" (including the trailing slash).

As you can see above the metadata contains the PDF/A entry and the namespace is correct.

Initial metadata:

<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?>
<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 4.0-c316 44.253921, Sun Oct 01 2006 17:14:39">
<rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">
<rdf:Description rdf:about=""
xmlns:xap="http://ns.adobe.com/xap/1.0/">
<xap:CreatorTool>Outside In (C) Technology</xap:CreatorTool>
</rdf:Description>
<rdf:Description rdf:about=""
xmlns:pdf="http://ns.adobe.com/pdf/1.3/">
<pdf:Producer>PDF Export 8.3.0</pdf:Producer>
</rdf:Description>
<rdf:Description rdf:about=""
xmlns:pdfaid="http://www.aiim.org/pdfa/ns/id/">
<pdfaid:part>1</pdfaid:part>
<pdfaid:conformance>A</pdfaid:conformance>
</rdf:Description>
</rdf:RDF>
</x:xmpmeta>

After signing:

<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?>
<x:xmpmeta x:xmptk="Adobe XMP Core 4.0-c316 44.253921, Sun Oct 01 2006 17:14:39" xmlns:x="adobe:ns:meta/">
<rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">
<rdf:Description rdf:about="" xmlns:xap="http://ns.adobe.com/xap/1.0/">
<xap:CreatorTool>Outside In (C) Technology</xap:CreatorTool>
<xmp:ModifyDate>2011-06-23T11:07:04+03:00</xmp:ModifyDate></rdf:Description>
<rdf:Description rdf:about="" xmlns:pdf="http://ns.adobe.com/pdf/1.3/">
<pdf:Producer>iText® 5.1.1 ©2000-2011 1T3XT BVBA</pdf:Producer>
</rdf:Description>
<rdf:Description rdf:about="" xmlns:pdfaid="http://www.aiim.org/pdfa/ns/id/">
<pdfaid:part>1</pdfaid:part>
<pdfaid:conformance>A</pdfaid:conformance>
</rdf:Description>
</rdf:RDF>
</x:xmpmeta>

Am I doing something wrong, or iText does not support this yet ?

Thank you.

Best regards,
Stefan.

On Tue, Jun 28, 2011 at 12:36 AM, mkl <[hidden email]> wrote:

1T3XT BVBA wrote:
>
> I failed to see why one would want to sign a PDF/A document, because
> there's no obligation for PDF/A compliant readers to be able to verify
> the signature.
>

Especially in the use case of archiving I see a necessity to sign, time
stamp, or both sign and time stamp documents. And if your processes are
PDF-centric, integrated signatures and time stamps are obvious techniques to
use, independant of the capabilities of viewer programs. Unless, of course,
you first need to archive the unsigned document and your archival policy
doesn't allow updates of these documents.

Regards, Michael.

--
View this message in context: http://itext-general.2136553.n4.nabble.com/Sign-a-PDF-A-tp3627882p3628913.html

Sent from the iText - General mailing list archive at Nabble.com.

------------------------------------------------------------------------------

All of the data generated in your IT infrastructure is seriously valuable.
Why? It contains a definitive record of application performance, security
threats, fraudulent activity, and more. Splunk takes this data and makes
sense of it. IT sense. And common sense.
http://p.sf.net/sfu/splunk-d2d-c2
_______________________________________________
iText-questions mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/itext-questions

iText(R) is a registered trademark of 1T3XT BVBA.
Many questions posted to this list can (and will) be answered with a reference to the iText book: http://www.itextpdf.com/book/
Please check the keywords list before you ask for examples: http://itextpdf.com/themes/keywords.php

error1.JPG (172K) Download Attachment

error2.JPG (174K) Download Attachment

mkl

Re: Sign a PDF/A

Stefan,

stefanu wrote

I am currently evaluating the possibility to sign PDF/A with iText, using the free release.

Which version exactly? (BTW, all the publicly available iText versions are for free use as long as you adhere to the respective license restrictions.)

stefanu wrote

I have checked both input and output PDFs with Acrobat X Pro Trial Preflight tool. First document conformance verification succeeds whereas the signed PDF is no longer compliant. The 2 errors signaled by Preflight are:

Please also supply a sample file, both before signing and after signing, showing this behavior.

BTW, you checked for PDF/A-1a compliance. Do you get different results when checking for PDF/A-1b compliance?

Regards, Michael.

iText Software

Re: Sign a PDF/A

On 28/06/2011 10:30, mkl wrote:
> Which version exactly?
That's shown in the metadata. The producer is "iText® 5.1.1 ©2000-2011
1T3XT BVBA".
However: I would have expected "PDF Export 8.3.0 modified by iText®
5.1.1 ©2000-2011 1T3XT BVBA".
Strange.

------------------------------------------------------------------------------
All of the data generated in your IT infrastructure is seriously valuable.
Why? It contains a definitive record of application performance, security
threats, fraudulent activity, and more. Splunk takes this data and makes
sense of it. IT sense. And common sense.
http://p.sf.net/sfu/splunk-d2d-c2
_______________________________________________
iText-questions mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/itext-questions

iText(R) is a registered trademark of 1T3XT BVBA.
Many questions posted to this list can (and will) be answered with a reference to the iText book: http://www.itextpdf.com/book/
Please check the keywords list before you ask for examples: http://itextpdf.com/themes/keywords.php

stefanu

Re: Sign a PDF/A

In reply to this post by mkl

Hello,

I am aware of the license restrictions; this is why I am posting this message; I need to be sure I can sign PDF/A before purchasing a commercial license.

I am currently using version 5.0.2, but have tried with 5.1.1, too.

Here are the files. Apparently all checks for compliance on the signed file show the same errors; on the other hand, I cannot alter in any way the input file, so all I can do is tweak the parameters of the signing process, if possible.

Best regards,
Stefan.

On Tue, Jun 28, 2011 at 11:30 AM, mkl <[hidden email]> wrote:

Stefan,

stefanu wrote:
>
> I am currently evaluating the possibility to sign PDF/A with iText, using
> the free release.

Which version exactly? (BTW, all the publicly available iText versions are
for free use as long as you adhere to the respective license restrictions.)

stefanu wrote:
>
> I have checked both input and output PDFs with Acrobat X Pro Trial
> Preflight tool. First document conformance verification succeeds whereas
> the signed PDF is no longer compliant. The 2 errors signaled by Preflight
> are:

Please also supply a sample file, both before signing and after signing,
showing this behavior.

BTW, you checked for PDF/A-1a compliance. Do you get different results when
checking for PDF/A-1b compliance?

Regards, Michael.

--
View this message in context: http://itext-general.2136553.n4.nabble.com/Sign-a-PDF-A-tp3627882p3629767.html

Sent from the iText - General mailing list archive at Nabble.com.

------------------------------------------------------------------------------
All of the data generated in your IT infrastructure is seriously valuable.
Why? It contains a definitive record of application performance, security
threats, fraudulent activity, and more. Splunk takes this data and makes
sense of it. IT sense. And common sense.
http://p.sf.net/sfu/splunk-d2d-c2
_______________________________________________
iText-questions mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/itext-questions

iText(R) is a registered trademark of 1T3XT BVBA.
Many questions posted to this list can (and will) be answered with a reference to the iText book: http://www.itextpdf.com/book/
Please check the keywords list before you ask for examples: http://itextpdf.com/themes/keywords.php

picture.pdf (3M) Download Attachment

picture_signed.pdf (3M) Download Attachment

Leonard Rosenthol-3

Re: Sign a PDF/A

I am investigating why Acrobat thinks the file is correct, but Preflight does not.

However, in the meantime, I want to point out that this file should NOT be marked as PDF/A-1a compliant as it does NOT contain any text NOR is the image properly tagged. It should be PDF/A-1b.

Leonard

From: stefanu <[hidden email]>
Reply-To: Post here <[hidden email]>
Date: Tue, 28 Jun 2011 03:06:26 -0700
To: Post here <[hidden email]>
Subject: Re: [iText-questions] Sign a PDF/A

On Tue, Jun 28, 2011 at 11:30 AM, mkl <[hidden email]> wrote:

Stefan,

stefanu wrote:
>
> I am currently evaluating the possibility to sign PDF/A with iText, using
> the free release.

Which version exactly? (BTW, all the publicly available iText versions are
for free use as long as you adhere to the respective license restrictions.)

stefanu wrote:
>
> I have checked both input and output PDFs with Acrobat X Pro Trial
> Preflight tool. First document conformance verification succeeds whereas
> the signed PDF is no longer compliant. The 2 errors signaled by Preflight
> are:

Please also supply a sample file, both before signing and after signing,
showing this behavior.

BTW, you checked for PDF/A-1a compliance. Do you get different results when
checking for PDF/A-1b compliance?

Regards, Michael.

--
View this message in context: http://itext-general.2136553.n4.nabble.com/Sign-a-PDF-A-tp3627882p3629767.html
Sent from the iText - General mailing list archive at Nabble.com.

------------------------------------------------------------------------------
All of the data generated in your IT infrastructure is seriously valuable.
Why? It contains a definitive record of application performance, security
threats, fraudulent activity, and more. Splunk takes this data and makes
sense of it. IT sense. And common sense.
http://p.sf.net/sfu/splunk-d2d-c2
_______________________________________________
iText-questions mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/itext-questions

iText(R) is a registered trademark of 1T3XT BVBA.
Many questions posted to this list can (and will) be answered with a reference to the iText book: http://www.itextpdf.com/book/
Please check the keywords list before you ask for examples: http://itextpdf.com/themes/keywords.php

iText Software

Re: Sign a PDF/A

In reply to this post by stefanu

On 28/06/2011 12:06, stefanu wrote:
> Here are the files. Apparently all checks for compliance on the signed
> file show the same errors; on the other hand, I cannot alter in any
> way the input file, so all I can do is tweak the parameters of the
> signing process, if possible.
There's certainly a date mismatch between the PDF metadata and the XMP
metadata.
The same goes for the Producer data.
Have you tried signing the PDF in append mode?

------------------------------------------------------------------------------
All of the data generated in your IT infrastructure is seriously valuable.
Why? It contains a definitive record of application performance, security
threats, fraudulent activity, and more. Splunk takes this data and makes
sense of it. IT sense. And common sense.
http://p.sf.net/sfu/splunk-d2d-c2
_______________________________________________
iText-questions mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/itext-questions

iText(R) is a registered trademark of 1T3XT BVBA.
Many questions posted to this list can (and will) be answered with a reference to the iText book: http://www.itextpdf.com/book/
Please check the keywords list before you ask for examples: http://itextpdf.com/themes/keywords.php

stefanu

Re: Sign a PDF/A

I think so. I've been using this :

stamper = PdfStamper.createSignature(
     new PdfReader(
          inputFile.getAbsolutePath(),
          password.getBytes()),
     new FileOutputStream(outputFile.getAbsoluteFile()),
     '\0',
     null,
     true);

Best regards,
Stefan.

On Tue, Jun 28, 2011 at 2:15 PM, 1T3XT BVBA <[hidden email]> wrote:

On 28/06/2011 12:06, stefanu wrote:
> Here are the files. Apparently all checks for compliance on the signed
> file show the same errors; on the other hand, I cannot alter in any
> way the input file, so all I can do is tweak the parameters of the
> signing process, if possible.

There's certainly a date mismatch between the PDF metadata and the XMP
metadata.
The same goes for the Producer data.
Have you tried signing the PDF in append mode?

------------------------------------------------------------------------------
All of the data generated in your IT infrastructure is seriously valuable.
Why? It contains a definitive record of application performance, security
threats, fraudulent activity, and more. Splunk takes this data and makes
sense of it. IT sense. And common sense.
http://p.sf.net/sfu/splunk-d2d-c2
_______________________________________________
iText-questions mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/itext-questions

iText(R) is a registered trademark of 1T3XT BVBA.
Many questions posted to this list can (and will) be answered with a reference to the iText book: http://www.itextpdf.com/book/
Please check the keywords list before you ask for examples: http://itextpdf.com/themes/keywords.php

stefanu

Re: Sign a PDF/A

In reply to this post by Leonard Rosenthol-3

Thanks for the tip, but unfortunately I have no control on how the PDF is produced...

Best regards,
Stefan.

On Tue, Jun 28, 2011 at 2:03 PM, Leonard Rosenthol <[hidden email]> wrote:

I am investigating why Acrobat thinks the file is correct, but Preflight does not.

However, in the meantime, I want to point out that this file should NOT be marked as PDF/A-1a compliant as it does NOT contain any text NOR is the image properly tagged. It should be PDF/A-1b.

Leonard

From: stefanu <[hidden email]>
Reply-To: Post here <[hidden email]>
Date: Tue, 28 Jun 2011 03:06:26 -0700
To: Post here <[hidden email]>
Subject: Re: [iText-questions] Sign a PDF/A

Hello,

I am aware of the license restrictions; this is why I am posting this message; I need to be sure I can sign PDF/A before purchasing a commercial license.

I am currently using version 5.0.2, but have tried with 5.1.1, too.

Here are the files. Apparently all checks for compliance on the signed file show the same errors; on the other hand, I cannot alter in any way the input file, so all I can do is tweak the parameters of the signing process, if possible.

Best regards,
Stefan.

On Tue, Jun 28, 2011 at 11:30 AM, mkl <[hidden email]> wrote:

Stefan,

stefanu wrote:
>
> I am currently evaluating the possibility to sign PDF/A with iText, using
> the free release.

Which version exactly? (BTW, all the publicly available iText versions are
for free use as long as you adhere to the respective license restrictions.)

stefanu wrote:
>
> I have checked both input and output PDFs with Acrobat X Pro Trial
> Preflight tool. First document conformance verification succeeds whereas
> the signed PDF is no longer compliant. The 2 errors signaled by Preflight
> are:

Please also supply a sample file, both before signing and after signing,
showing this behavior.

BTW, you checked for PDF/A-1a compliance. Do you get different results when
checking for PDF/A-1b compliance?

Regards, Michael.

--
View this message in context: http://itext-general.2136553.n4.nabble.com/Sign-a-PDF-A-tp3627882p3629767.html

Sent from the iText - General mailing list archive at Nabble.com.

------------------------------------------------------------------------------
All of the data generated in your IT infrastructure is seriously valuable.
Why? It contains a definitive record of application performance, security
threats, fraudulent activity, and more. Splunk takes this data and makes
sense of it. IT sense. And common sense.
http://p.sf.net/sfu/splunk-d2d-c2
_______________________________________________
iText-questions mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/itext-questions

iText(R) is a registered trademark of 1T3XT BVBA.
Many questions posted to this list can (and will) be answered with a reference to the iText book: http://www.itextpdf.com/book/
Please check the keywords list before you ask for examples: http://itextpdf.com/themes/keywords.php

------------------------------------------------------------------------------
All of the data generated in your IT infrastructure is seriously valuable.
Why? It contains a definitive record of application performance, security
threats, fraudulent activity, and more. Splunk takes this data and makes
sense of it. IT sense. And common sense.
http://p.sf.net/sfu/splunk-d2d-c2
_______________________________________________
iText-questions mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/itext-questions

iText(R) is a registered trademark of 1T3XT BVBA.
Many questions posted to this list can (and will) be answered with a reference to the iText book: http://www.itextpdf.com/book/
Please check the keywords list before you ask for examples: http://itextpdf.com/themes/keywords.php

iText Software

Re: Sign a PDF/A

In reply to this post by stefanu

On 28/06/2011 14:01, stefanu wrote:
> I think so.
The source code looks OK (with append = true), but when I look at
picture_signed.pdf I only see one occurrence of %%EOF which tells me
your PDF isn't created with the source code you provided.

------------------------------------------------------------------------------
All of the data generated in your IT infrastructure is seriously valuable.
Why? It contains a definitive record of application performance, security
threats, fraudulent activity, and more. Splunk takes this data and makes
sense of it. IT sense. And common sense.
http://p.sf.net/sfu/splunk-d2d-c2
_______________________________________________
iText-questions mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/itext-questions

iText(R) is a registered trademark of 1T3XT BVBA.
Many questions posted to this list can (and will) be answered with a reference to the iText book: http://www.itextpdf.com/book/
Please check the keywords list before you ask for examples: http://itextpdf.com/themes/keywords.php

stefanu

Re: Sign a PDF/A

Let me check again. I was playing with different parameters and I may have messed up the files.

Stefan.

On Tue, Jun 28, 2011 at 3:08 PM, 1T3XT BVBA <[hidden email]> wrote:

On 28/06/2011 14:01, stefanu wrote:
> I think so.
The source code looks OK (with append = true), but when I look at
picture_signed.pdf I only see one occurrence of %%EOF which tells me
your PDF isn't created with the source code you provided.

------------------------------------------------------------------------------
All of the data generated in your IT infrastructure is seriously valuable.
Why? It contains a definitive record of application performance, security
threats, fraudulent activity, and more. Splunk takes this data and makes
sense of it. IT sense. And common sense.
http://p.sf.net/sfu/splunk-d2d-c2
_______________________________________________
iText-questions mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/itext-questions

iText(R) is a registered trademark of 1T3XT BVBA.
Many questions posted to this list can (and will) be answered with a reference to the iText book: http://www.itextpdf.com/book/
Please check the keywords list before you ask for examples: http://itextpdf.com/themes/keywords.php

Leonard Rosenthol-3

Re: Sign a PDF/A

In reply to this post by stefanu

Well, you should! Or at least you should let the producer know they are doing it wrong.

(and it's NOT a tip – it's clearly stipulated in the PDF/A standard that what is done here is WRONG!)

Leonard Rosenthol

Project Leader, ISO 19005 (PDF/A)

From: stefanu <[hidden email]>
Reply-To: Post here <[hidden email]>
Date: Tue, 28 Jun 2011 05:02:31 -0700
To: Post here <[hidden email]>
Subject: Re: [iText-questions] Sign a PDF/A

Thanks for the tip, but unfortunately I have no control on how the PDF is produced...

Best regards,
Stefan.

On Tue, Jun 28, 2011 at 2:03 PM, Leonard Rosenthol <[hidden email]> wrote:

I am investigating why Acrobat thinks the file is correct, but Preflight does not.

However, in the meantime, I want to point out that this file should NOT be marked as PDF/A-1a compliant as it does NOT contain any text NOR is the image properly tagged. It should be PDF/A-1b.

Leonard

From: stefanu <[hidden email]>
Reply-To: Post here <[hidden email]>
Date: Tue, 28 Jun 2011 03:06:26 -0700
To: Post here <[hidden email]>
Subject: Re: [iText-questions] Sign a PDF/A

Hello,

I am aware of the license restrictions; this is why I am posting this message; I need to be sure I can sign PDF/A before purchasing a commercial license.

I am currently using version 5.0.2, but have tried with 5.1.1, too.

Here are the files. Apparently all checks for compliance on the signed file show the same errors; on the other hand, I cannot alter in any way the input file, so all I can do is tweak the parameters of the signing process, if possible.

Best regards,
Stefan.

On Tue, Jun 28, 2011 at 11:30 AM, mkl <[hidden email]> wrote:
Stefan,

stefanu wrote:
>
> I am currently evaluating the possibility to sign PDF/A with iText, using
> the free release.

Which version exactly? (BTW, all the publicly available iText versions are
for free use as long as you adhere to the respective license restrictions.)

stefanu wrote:
>
> I have checked both input and output PDFs with Acrobat X Pro Trial
> Preflight tool. First document conformance verification succeeds whereas
> the signed PDF is no longer compliant. The 2 errors signaled by Preflight
> are:

Please also supply a sample file, both before signing and after signing,
showing this behavior.

BTW, you checked for PDF/A-1a compliance. Do you get different results when
checking for PDF/A-1b compliance?

Regards, Michael.

--
View this message in context: http://itext-general.2136553.n4.nabble.com/Sign-a-PDF-A-tp3627882p3629767.html
Sent from the iText - General mailing list archive at Nabble.com.

------------------------------------------------------------------------------
All of the data generated in your IT infrastructure is seriously valuable.
Why? It contains a definitive record of application performance, security
threats, fraudulent activity, and more. Splunk takes this data and makes
sense of it. IT sense. And common sense.
http://p.sf.net/sfu/splunk-d2d-c2
_______________________________________________
iText-questions mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/itext-questions

iText(R) is a registered trademark of 1T3XT BVBA.
Many questions posted to this list can (and will) be answered with a reference to the iText book: http://www.itextpdf.com/book/
Please check the keywords list before you ask for examples: http://itextpdf.com/themes/keywords.php

------------------------------------------------------------------------------
All of the data generated in your IT infrastructure is seriously valuable.
Why? It contains a definitive record of application performance, security
threats, fraudulent activity, and more. Splunk takes this data and makes
sense of it. IT sense. And common sense.
http://p.sf.net/sfu/splunk-d2d-c2
_______________________________________________
iText-questions mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/itext-questions

iText(R) is a registered trademark of 1T3XT BVBA.
Many questions posted to this list can (and will) be answered with a reference to the iText book: http://www.itextpdf.com/book/
Please check the keywords list before you ask for examples: http://itextpdf.com/themes/keywords.php

Leonard Rosenthol-3

Re: Sign a PDF/A

In reply to this post by stefanu

Here's the deal:

The property <xmp:ModifyDate> uses an undefined namespace prefix (xmp instead of xap), hence the XMP metadata cannot be parsed and Preflight claims that the XMP Metadata are missing.

From: stefanu <[hidden email]>
Reply-To: Post here <[hidden email]>
Date: Tue, 28 Jun 2011 05:16:52 -0700
To: Post here <[hidden email]>
Subject: Re: [iText-questions] Sign a PDF/A

Let me check again. I was playing with different parameters and I may have messed up the files.

Stefan.

On Tue, Jun 28, 2011 at 3:08 PM, 1T3XT BVBA <[hidden email]> wrote:

On 28/06/2011 14:01, stefanu wrote:
> I think so.
The source code looks OK (with append = true), but when I look at
picture_signed.pdf I only see one occurrence of %%EOF which tells me
your PDF isn't created with the source code you provided.

------------------------------------------------------------------------------
All of the data generated in your IT infrastructure is seriously valuable.
Why? It contains a definitive record of application performance, security
threats, fraudulent activity, and more. Splunk takes this data and makes
sense of it. IT sense. And common sense.
http://p.sf.net/sfu/splunk-d2d-c2
_______________________________________________
iText-questions mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/itext-questions

iText(R) is a registered trademark of 1T3XT BVBA.
Many questions posted to this list can (and will) be answered with a reference to the iText book: http://www.itextpdf.com/book/
Please check the keywords list before you ask for examples: http://itextpdf.com/themes/keywords.php

stefanu

Re: Sign a PDF/A

In reply to this post by stefanu

Here is a correct file, I hope, created in append mode. Yesterday's file was probably mistaken from another test.

Stefan.

On Tue, Jun 28, 2011 at 3:16 PM, stefanu <[hidden email]> wrote:

Let me check again. I was playing with different parameters and I may have messed up the files.

Stefan.

On Tue, Jun 28, 2011 at 3:08 PM, 1T3XT BVBA <[hidden email]> wrote:

On 28/06/2011 14:01, stefanu wrote:
> I think so.
The source code looks OK (with append = true), but when I look at
picture_signed.pdf I only see one occurrence of %%EOF which tells me
your PDF isn't created with the source code you provided.

------------------------------------------------------------------------------
All of the data generated in your IT infrastructure is seriously valuable.
Why? It contains a definitive record of application performance, security
threats, fraudulent activity, and more. Splunk takes this data and makes
sense of it. IT sense. And common sense.
http://p.sf.net/sfu/splunk-d2d-c2
_______________________________________________
iText-questions mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/itext-questions

iText(R) is a registered trademark of 1T3XT BVBA.
Many questions posted to this list can (and will) be answered with a reference to the iText book: http://www.itextpdf.com/book/
Please check the keywords list before you ask for examples: http://itextpdf.com/themes/keywords.php

picture_signed.pdf (3M) Download Attachment

stefanu

Re: Sign a PDF/A

In reply to this post by Leonard Rosenthol-3

Thank you. Is there something I can fix, or it is inside the iText API ?

Stefan.

On Tue, Jun 28, 2011 at 4:03 PM, Leonard Rosenthol <[hidden email]> wrote:

Here's the deal:

The property <xmp:ModifyDate> uses an undefined namespace prefix (xmp instead of xap), hence the XMP metadata cannot be parsed and Preflight claims that the XMP Metadata are missing.

From: stefanu <[hidden email]>
Reply-To: Post here <[hidden email]>

Date: Tue, 28 Jun 2011 05:16:52 -0700

To: Post here <[hidden email]>
Subject: Re: [iText-questions] Sign a PDF/A

Let me check again. I was playing with different parameters and I may have messed up the files.

Stefan.

On Tue, Jun 28, 2011 at 3:08 PM, 1T3XT BVBA <[hidden email]> wrote:
On 28/06/2011 14:01, stefanu wrote:
> I think so.
The source code looks OK (with append = true), but when I look at
picture_signed.pdf I only see one occurrence of %%EOF which tells me
your PDF isn't created with the source code you provided.

------------------------------------------------------------------------------
All of the data generated in your IT infrastructure is seriously valuable.
Why? It contains a definitive record of application performance, security
threats, fraudulent activity, and more. Splunk takes this data and makes
sense of it. IT sense. And common sense.
http://p.sf.net/sfu/splunk-d2d-c2
_______________________________________________
iText-questions mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/itext-questions

iText(R) is a registered trademark of 1T3XT BVBA.
Many questions posted to this list can (and will) be answered with a reference to the iText book: http://www.itextpdf.com/book/
Please check the keywords list before you ask for examples: http://itextpdf.com/themes/keywords.php

------------------------------------------------------------------------------
All of the data generated in your IT infrastructure is seriously valuable.
Why? It contains a definitive record of application performance, security
threats, fraudulent activity, and more. Splunk takes this data and makes
sense of it. IT sense. And common sense.
http://p.sf.net/sfu/splunk-d2d-c2
_______________________________________________
iText-questions mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/itext-questions

iText(R) is a registered trademark of 1T3XT BVBA.
Many questions posted to this list can (and will) be answered with a reference to the iText book: http://www.itextpdf.com/book/
Please check the keywords list before you ask for examples: http://itextpdf.com/themes/keywords.php