cryptography - Cannot verify PDF esig/dss signature with iText -


i have pdf document signed esig/dss https://github.com/esig/dss library. can see singature in acrobat reader. when want verify itext , bouncycastle got exception:

2.16.840.1.101.3.4.2.1withrsa signature not available 

i work on fedora oracle jdk 1.8.0_112 unlimited cryptography, itext-2.0.8.jar , bouncycastle bcprov-jdk16-139.jar.

when chcecked message digest available in environment using response from: complete list of messagedigest available in jdk

i got:

alias: "oid.2.16.840.1.101.3.4.2.1" -> "sha-256" 

so available in jdk.

sho why 2.16.840.1.101.3.4.2.1withrsa signature not available?

you mention use "itext-2.0.8.jar" , "bcprov-jdk16-139.jar".

those versions ancient, itext 2.0.8 in particular has been released 2008. pades specifications had first been published in 2009, , introduced numerous changes , additions pdf signing. esig/dss had been introduced first implementation of these changes , additions.

thus, should consider updating support current standards.


Comments

Popular posts from this blog

python - How to insert QWidgets in the middle of a Layout? -

python - serve multiple gunicorn django instances under nginx ubuntu -

module - Prestashop displayPaymentReturn hook url -