cryptography - Cannot verify PDF esig/dss signature with iText -
i have pdf document signed esig/dss https://github.com/esig/dss library. can see singature in acrobat reader. when want verify itext , bouncycastle got exception:
2.16.840.1.101.3.4.2.1withrsa signature not available
i work on fedora oracle jdk 1.8.0_112 unlimited cryptography, itext-2.0.8.jar
, bouncycastle bcprov-jdk16-139.jar
.
when chcecked message digest available in environment using response from: complete list of messagedigest available in jdk
i got:
alias: "oid.2.16.840.1.101.3.4.2.1" -> "sha-256"
so available in jdk.
sho why 2.16.840.1.101.3.4.2.1withrsa signature not available
?
you mention use "itext-2.0.8.jar" , "bcprov-jdk16-139.jar".
those versions ancient, itext 2.0.8 in particular has been released 2008. pades specifications had first been published in 2009, , introduced numerous changes , additions pdf signing. esig/dss had been introduced first implementation of these changes , additions.
thus, should consider updating support current standards.
Comments
Post a Comment