first signature becomes invalid

[jvr968]

With a client-server application I have signed a pdf document 2 times.

The first is a certification and the second is a signature.

The certificacion level is CERTIFIED_FORM_FILLING

To add the first signature and the second signature, I'm using the method setVisibleSignature

In client side the pdf document has got 2 signatures and are being validated correctly.

But, when I have opened, the double signed document, at the server side the first signature of the first revision is invalid. I can see the red cross.
the second signature of the second revision is validated correctly.

The state of the validation of the first signature, tells:
The document has been modified or damaged since the certification has been applied.
The identity of the signer is valid.


At the signature properties of the first signature, in the "Document" label, at Modifications tells that there is an error.

The author of the document is not permitting some realized changes since the signature has been created.
Modification details:

Added form fields:1
   field with labelSignature2 in the first page.
Filled form fields:3
   field with label Signature1 in the first page
   field with label nameofformfield1 in the first page
   field with label nameofformfield2 in the first page

All these changes are permited by the certification level that has been indicated previously CERTIFIED_FORM_FILLING

Then something has changed the document or has damaged the document when is sent to the server.

I have converted the pdf file into a bytearray in the client side to sent to the server, later is saved like a PDF in the server.

This method has been used with only one signature in the document and the signature is valid at client and in the server side.

Any suggestion?
Regards.

------------------------------------------------------------------------------
Virtualization & Cloud Management Using Capacity Planning
Cloud computing makes use of virtualization - but cloud computing
also focuses on allowing computing to be delivered as a service.
http://www.accelacomm.com/jaw/sfnl/114/51521223/
_______________________________________________
iText-questions mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/itext-questions

iText(R) is a registered trademark of 1T3XT BVBA.
Many questions posted to this list can (and will) be answered with a reference to the iText book: http://www.itextpdf.com/book/
Please check the keywords list before you ask for examples: http://itextpdf.com/themes/keywords.php

[mkl]

jvr968 wrote

With a client-server application I have signed a pdf document 2 times.

[...]

But, when I have opened, the double signed document, at the server side the
first signature of the first  revision is invalid. I can see the red cross.
the second signature of the second revision is validated correctly.

[...]

Any suggestion?

Please supply a sample pdf file, otherwise we can only guess; it would be best to supply it in all three states, I.e. unsigned, signed once, and signed twice.

one piece of guesswork, though: are you creating your second signature in append mode? Otherwise that second signing operation obviously invalidates the first signature.

Regards, Michael

[jvr968]

Hello,
I'm sorry at this moment I haven't got the files.

Yes, of course, the second signature is done in append mode.

I have checked the signatures better, and there is not a problem in the first signature (certification signature), maybe is a validation problem.

The client side where the signatures were made it's a windows 7 os, and the server side is a linux os.

When a document is signed once, there is no problem.
In client side and in server side, the signature is correctly validated.

The problem is when there are 2 signatures.

In client side, the certification signature and the approval signature are correctly validated.
In the server side, the first signature (certification signature) becomes invalid.

But I think the problem is, the signatures were made with WINCER_SIGNED filter, at setCrypto method.
I'm not sure but when there is only one signature there is no problem, and the filter used is the same.

I have saved the double signed file of the server side, at the client windows 7 machine and the signatures are correctly validated.

I have made the same process in a linux os like client and server, and the double signed document, has the first signature invalid (certification signature).
But when I have saved this file in a windows 7 os both signatures are correctly validated.

Then seems like I can sign 2 times the document with WINCER_SIGNED filter in a linux system, but will be only correctly validated in a windows os.

The Pdf files, are being signed, with a smartcard. May be helps if I have to select another filter.

The linux os has got installed PDF Reader 8 version and the windows 7 os has PDF Reader X (10).

Any suggestion?.


------------------------------------------------------------------------------
Virtualization & Cloud Management Using Capacity Planning
Cloud computing makes use of virtualization - but cloud computing
also focuses on allowing computing to be delivered as a service.
http://www.accelacomm.com/jaw/sfnl/114/51521223/
_______________________________________________
iText-questions mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/itext-questions

iText(R) is a registered trademark of 1T3XT BVBA.
Many questions posted to this list can (and will) be answered with a reference to the iText book: http://www.itextpdf.com/book/
Please check the keywords list before you ask for examples: http://itextpdf.com/themes/keywords.php

[iText Info]

On 17/02/2012 19:24, jv r wrote:
>
> Any suggestion?
Go to: http://demo.itextsupport.com/SigningApp/
Scroll to 'Verifying' and upload your PDF (it's not stored anywhere, I
promise).
Copy paste the txt file that is returned so that we can see what it says.

------------------------------------------------------------------------------
Virtualization & Cloud Management Using Capacity Planning
Cloud computing makes use of virtualization - but cloud computing
also focuses on allowing computing to be delivered as a service.
http://www.accelacomm.com/jaw/sfnl/114/51521223/
_______________________________________________
iText-questions mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/itext-questions

iText(R) is a registered trademark of 1T3XT BVBA.
Many questions posted to this list can (and will) be answered with a reference to the iText book: http://www.itextpdf.com/book/
Please check the keywords list before you ask for examples: http://itextpdf.com/themes/keywords.php

[jvr968]

I have done few days ago.

The webapp shows some information of the file, 2 diferents revisions.

The signer CN, issuer, etc, of each revision.

But the signatures are not being validated against keystore obviously because in this keystore, there is not installed the same CA certificate that is needed to validate the signatures.

Anyway, I have upgraded thr adobe reader version of linux and now both signatures are being correctly validated.

Thank you.

 

 

 

2012/2/17 jv r <[hidden email]>

Hello,
I'm sorry at this moment I haven't got the files.

Yes, of course, the second signature is done in append mode.

I have checked the signatures better, and there is not a problem in the first signature (certification signature), maybe is a validation problem.

The client side where the signatures were made it's a windows 7 os, and the server side is a linux os.

When a document is signed once, there is no problem.
In client side and in server side, the signature is correctly validated.

The problem is when there are 2 signatures.

In client side, the certification signature and the approval signature are correctly validated.
In the server side, the first signature (certification signature) becomes invalid.

But I think the problem is, the signatures were made with WINCER_SIGNED filter, at setCrypto method.
I'm not sure but when there is only one signature there is no problem, and the filter used is the same.

I have saved the double signed file of the server side, at the client windows 7 machine and the signatures are correctly validated.

I have made the same process in a linux os like client and server, and the double signed document, has the first signature invalid (certification signature).
But when I have saved this file in a windows 7 os both signatures are correctly validated.

Then seems like I can sign 2 times the document with WINCER_SIGNED filter in a linux system, but will be only correctly validated in a windows os.

The Pdf files, are being signed, with a smartcard. May be helps if I have to select another filter.

The linux os has got installed PDF Reader 8 version and the windows 7 os has PDF Reader X (10).

Any suggestion?.

------------------------------------------------------------------------------
Virtualization & Cloud Management Using Capacity Planning
Cloud computing makes use of virtualization - but cloud computing
also focuses on allowing computing to be delivered as a service.
http://www.accelacomm.com/jaw/sfnl/114/51521223/
_______________________________________________
iText-questions mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/itext-questions

iText(R) is a registered trademark of 1T3XT BVBA.
Many questions posted to this list can (and will) be answered with a reference to the iText book: http://www.itextpdf.com/book/
Please check the keywords list before you ask for examples: http://itextpdf.com/themes/keywords.php