Annotation field locked and subsequent digital signatures

Hi all,
i'm testing my PAdES digital signature library in Obj-C and i encountered this kind of PDF file
http://dl.dropbox.com/u/3995257/PDF/Locked.pdf
Acrobat Reader tells that the document is locked by a signature (Signature2). As far as i know locked means that the file can't be modified but is is impossible to append a digital signature too?
I tried to sign the document with my lib and as expected the second signature invalidates the first.
http://dl.dropbox.com/u/3995257/PDF/Sign_Locked.pdf
But... i tried to sign for the third time the previous file. I would expect that the first (locked) signature would be invalid but the second and the third would be not.
http://dl.dropbox.com/u/3995257/PDF/Sign_Sign_Locked.pdf
Despite my expectations, only the last signature is avalid according to Acrobat Reader.
Does the first locked signatures invalidates the subsequents? Or more simply i can't sign a Document locked PDF?
Thanks

Yes, because the first is a lock – anything you do after the fact will invalidate.
From: Adobe Forums <[email protected]<mailto:[email protected]>>
Reply-To: "[email protected]<mailto:[email protected]>" <[email protected]<mailto:[email protected]>>
Date: Wed, 28 Sep 2011 02:11:54 -0700
To: Leonard Rosenthol <[email protected]<mailto:[email protected]>>
Subject: Annotation field locked and subsequent digital signatures
Annotation field locked and subsequent digital signatures
created by Luigi Cuomo<http://forums.adobe.com/people/Luigi+Cuomo> in PDF Language and Specifications - View the full discussion<http://forums.adobe.com/message/3942243#3942243

Similar Messages

How to Create a PDF Document and apply Digital Signature in C# using the Adobe SDK?

Hi Everybody!
I have to do two distinct tasks here:
1) How can I create a PDF document using the Adobe SDK in my .NET Applications(C# - 2.0)?
I just need a basic sample to create a document with a simple text, for example. I did not find any useful information in the adobe documentation. I have the Acrobat Professional 8.0 in my computer, but it's very dificult to work whith de Acrobat.dll and .NET with a poor documentaion.
2)How can I apply digital signature in a existent pdf document?
I need to sign documents using the SDK, just a basic sample in c# would be helpful to start!
Anybody could help?
Thank in advance!

Leonard Rosenthol or anybody that can help, sorry to insist.
I will explain better my problem:
I have an ASP.NET WebPAge (C# - 2.0). In this page, the user make a request. The request should generate a PDF document with the informations of the request and with a field to add a digital signature. The document created will be send to a approver that will confirm the approval applying his digital signature (I need to do too, a webpage where the approver open the page, choose the pdf document, and sign, just selecting his own certificate and clicking in the button SIGN... but this is another problem).
That's the reason that I have to create a PDF document. If I create a WORD or HTML document, and then convert to PDF, how can I add a field to digital signature in this pdf document?
Is there any solution using Acrobat SDK?
Thank you very much!

Connect smart card reader over usb and access digital signature certificate

Hi,
I got digital signature certificate stored in a smart card.I places smart card into card reader and plugged usb port of server.
I can see card reader in windows environment.My problem is to connect card reader and access digital signature certificate using java code.
I thinh it needs javax.smartcardio but i did not find necessary jar file for jdk 1.5.xx.
1- Where can i download jar fiel for javax.smartcardio for jdk 1.5.xx
2- Is there a blog or forum thread to help me to use smart card over usb?
Thanks.

One of the beauty of Java is that when the Java VM does not let you do something (here: accessing a Smart Card), there is no way that a purely Java solution will add this functionality.
Hence, what you ask simply can not be done in pure Java (1.)5. Some machine-specific non-java code is required. And you did not specify your target.
Unless a jar file could contain machine-specific code (I don't know if this is the case, and I never made one such jar file), there seems to be no way a jar file could help.

I have acrobat 8 and my digital signature has been corrupted. How do I fix that?

I have acrobat 8 and my digital signature has been corrupted. How do I fix that?

Make a new one.

How to embedd author certificate and user digital signature?

Hi,
I want to implement Digital Signature in my pdf using Netweaver technology. I am working on an offline scenario.
I have few question on this topic.
1) Once I sign the pdf do the input-fields in them get locked? Is no then how do I lock them to ensure that they are not tampered?
2) How to pass the certificate along with the pdf? Can I pass it through an email?
3) Is the digital signature completely done on Adobe Reader side or the program side?
Please reply urgently...
Thanks,
Vishal

hi
i've the same problem. i've found this solution, but you need download a JCE Provider that allow you to read the explorer certificate store.
You can try this one: https://download.assembla.se/jceprovider/
and the code:
import se.assembla.*;
public class Listcerts {
     public static void list() throws Exception{
          java.security.Security.insertProviderAt(new se.assembla.jce.provider.ms.MSProvider(), 2);
          KeyStore ks = KeyStore.getInstance("MSKS","assembla");
          ks.load(null,null);
          X509Certificate cert=null;
          String alias=null;
          int count=0;
          for (java.util.Enumeration e=ks.aliases();e.hasMoreElements();){
                    alias=(String)e.nextElement();
                    cert=(X509Certificate)ks.getCertificate(alias);
                    System.out.println("\n Certificado alias"+alias+":");
                    System.out.println(cert);
               count++;
          System.out.println ("NUM CERTS="+count);
now, i need the same solution for Firefox browser XP
good luck
Message was edited by:
meteko

Acrobat 9 Standard and the Digital Signature usage right

Acrobat 9 Standard is apparently able to apply certain usage rights to a document. I am trying to confirm whether or not the digital signature usage right is included. The
Acrobat 9 product comparison seems to indicate it is not, but the online help implies that it is.
Can someone with Acrobat 9 Standard confirm this for me by testing a document that you've enabled for use with Reader by attempting to sign a digital signature field with Reader?
George

In the office area, the Pro version might be good to have for the forms and other features. For the general library, Reader is probably adequate. Actually allowing PDF creation on public machines can be an issue. In a small libary system, Acrobat might be reasonable where you do not have to deal with a large, diverse population. However, for basic PDF creation, only Std is needed. Having both AA8 and AA9 on the same machine can lead to problems. However, if you remove one, you will likely have to repair the other.
The problem with older versions is that they may not properly read some of the newer PDFs that might be downloaded. For the latter, you could install the latest version of Reader, but you need to be aware that you may have to deal with issues of right clicking (windows) on a file and selecting which application to open a PDF with. For forms and some editing, the Pro version would be good to have. You also have PDF Optimize and PreFlight with the Pro version that generally are not including in the Std version.
To help compatibility with the files you create, you can select Start>Printers>Adobe PDF preferences (right click on printer). In the settings tab>Default settings> select at least Std or better Press or Print and then push edit. Under the general tab select the compatibility and set it to AA8 so that every thing is compatibile with the oldest version of Acrobat you have.
If you have more than one computer in the office, you might consider having AA8 on one and AA9 on the other. Do check and be sure you have licenses for whatever you have and that someone has not come in and installed a pirated version. Also be sure you keep the original CDs and licenses (or if they were downloaded, burn the downloaded version to a CD as an archive and write the SN on the label).
Now that I have confused you, are there more questions?

Placement and appearance digital signature

I have a couple of questions about the placement and appearance of the digital signature.
First the placement:
Is it technically possible to place the digital signature after Word-fields when you convert Word to PDF/A? For example the { DOCPROPERTY "Name" }? Where the name is a custom field.
Appearance:
What I am trying to achieve is to get a digital signature appearance just like the one on an analog paper. Just the name, date and a picture of the analog signature (created by tablet, scan or mouse). Is it possible to get rid of the following:
Question/check mark?
The text "Digitally signed by"?
The line with the attributes from the certificate?
Thanks in advance!

Conversion of Word->PDF (PDF/A) is a specific application process (be it Acrobat or some other program). The visual appearance of the signature is defined by the application that you are using to sign the PDF.
This forum is for PDF file format discussions not application ones - so try the forum for the program (Acrobat?) you are using.
As a general answer - YES, you can put the signature anywhere on the page you want with whatever contents you want.

Embedding Documents and Adding Digital Signatures

I have the following two questions regarding Adobe Acrobat XI pdf fillable forms that I can't find in the manual:
Embed supporting documentation and/or copy and paste information within the form
Allow digital signatures to be saved within the electronic version of the form
I would appreciate any feedback available.
Thanks!

Use the Acrobat forum.

Annotation field name and -

Hi all,
In an annotation, if I declare a field like this one : public boolean auto-update();
I receive this error during the compilation :
src/XmlRepository.java:10: = expected
public boolean auto-update();
If I change the field name : public boolean autoUpdate();
all is OK.
Is '-' character is forbidden in an annotation field name ?
Thanks,
Micka�l

the '-' character mean the mathematical operation Minus and cannot be used in a name.
Imagine if it could...
var1-var2 would mean a single variable instead of the difference between var1 and var2. The ambiguities are nasty there. If you really want the - look, try using underscores '_'
peace

Adobe Acrobat and Reader digital signature verification error logs

Can you help me how enable and where Acrobat 9.2 and Reader 9.2.3 error logs to analyse digital signature certificate revacation (CRL, OCSP)?

Hi Gatis,
Check out the Security and Digital Signature Admin Guide athttp://learn.adobe.com/wiki/download/attachments/52658564/acrobat_reader_security_9x.pdf?v ersion=1
http://learn.adobe.com/wiki/download/attachments/52658564/acrobat_reader_security_9x.pdf?v ersion=1
Once you get the file open look at section 5.3.4.4
The folder path has to exist, but Acrobat will create the file if it's missing. For example, if you want to save the file to C:\LogFile\digSigLog.txt the folder LogFile would have to exist on the C drive, but the log file itself will get created if it's not there already.
When you type in the file path and name in the Edit Binary Value dialog in regedit, make sure you null terminate the string by typing a zero at the end of the hex data on the left side of the dialog. It will look like a dot on the right side, but it's not really a dot (a dot is 2E in hex).
Steve

ServerAdmin and Valid Digital Signatures

How does one setup an XServer so that it issues a valid digital signature?
I'm attempting to enforce a requirement for valid digital signatures within ServerAdmin.
Any help or pointers to relevant documentation is greatly appreciated.
Thanks,
Carl.

OK, a little more digging around reveals some information on page 147 of the Server Administration Manual.
For the moment, this looks like my question has been answered!?
Carl.

Rich text fields, field locking, and form saving/re-opening

I have a LiveCycle form that has 2 text fields (email and info) and a button. When the button is pressed, the 2 text fields are set readonly and the button is set hidden. A rich text field is populated to provide a mailto link using the email and info text fields:
form1.firstpage.HyperlinkSF.rtField.value.exData.loadXML(sRichText, false, true);
This appears to work fine, but when I save the form and re-open it, the readonly fields are now editable and the button has re-appeared. If I remove the functionality associated with the rich text hyperlink, the form correctly re-opens with the readonly fields set readonly and the button is not visible.
Any idea why populating a rich text field is affecting the form state on saving/re-opening?

Thank you Bruce for your very helpful links.
I see that I had incorrectly formed the rich text body tag. I had omitted:
xmlns="http://www.w3.org/1999/xhtml" xmlns:xfa="http://www.xfa.org/schema/xfa-data/1.0/"
I had also been unable to get the &body= of the mailto working, and see that I should have had & as in:
var sURL = "mailto:" + sTo + "?subject=" + sSubject + "\&body=" + sBody;
All appears to work as expected. Great links. Thanks!
Robin

Acrobat 9 and Validating Digital Signatures

I'd heard that Acrobat 9 had found a way to eliminate the problem of sending your certificate to everyone who needs to validate your signature on a form, but I haven't been able to prove that. I'm testing 9 and so far the only difference I see is that instead of seeing an icon next to the signature stating that it can't be validated, it now states it in a bar across the top of the document. Has anyone else found something different?
Thanks!
Anita

For a signature to be considered valid, there must be a "trust" relationship between the validator and the signer. So if I sign a document and claim to be be "Bill Clinton", the signature doesn't show as valid unless you've established that I really signed the document using Bill Clinton's credentials. Public key cryptography provides this assurance by signing using a private key and publishing a public key that can be used to verify that the real private key was used. But you have to have that public key, and that is what is distributed and "trusted" within Acrobat or Reader.
In Acrobat 8, there are basically 2 ways to get that trust relationship: 1) Exchanging certificates with people you trust or 2) purchasing a certificate from an Adobe partner that sells pre-vetted and trusted certificates (where you have to do some work to prove you are who you say you are). These certificates have a trust relationship pre-built into Acrobat so you don't have to set up trust.
In Acrobat 9 there are 2 new mechanisms for establishing trust, but they facilitate, but not eliminate the need to establish trust.
First, you can create a security settings file which includes trust relationships and distribute it to your group either in an ad-hoc way (email, etc.) or by posting on a server and having Acrobat or Reader automatically load the settings. This makes it easier to set up signature workflows in a small group or enterprise environment.
Second, there is a new way for establishing large scale trust for digital identities issued by large organizations such as government agencies or countries where these will also have trust automatically managed by Acrobat and Reader.
The new features are described in http://www.adobe.com/devnet/acrobat/pdfs/sharing_security_settings_90.pdf

Acrobat/Reader and PADES (Digital Signatures)

I've read the document that James King of Adobe published and made the configurations to make Acrobat PADES compliant. However when I sign a document and inspect the generated CMS package inside the PDF, the signing-certificate value in Signed-Attributes is not present. So I'm assuming that the signature is still not PADES-BES compliant. Is there anything I can do to make Acrobat put a PADES-BES signature?
Also, I for verification, I made a test. I've externally signed a PDF with a CMS packet that has signing-certificate signed attribute. The signature has been validated in Acrobat. After that, I've intentionally put a random value as signing-certificate value. When I opened that PDF, it still validated fine in Acrobat. Therefore I understand that Acrobat doesn't do full PADES-BES validation. Is this right? Is there a configuration that can make Acrobat make a full PADES validation?
I'm using 9.1.3 version of Acrobat under Windows.
Thanks in advance

Hi Stewen,
Thank you for your answer.
I've took the value of Contents dictionary value and inspected it with an ASN.1 viewer. You're right, the signing certificate is on the PKCS7 (CMS) package. However, PaDES doesn't suffice with that. It requires a signing-certificate value in the signed attributes inside SignerInfo sequence in CMS. Also, the subfilter value should say ETSI.CAdES.detached as mandated in ETSI TS 102 708-3 V.1.1.1 page 8.
e) The signature dictionary shall contain a value of ETSI.CAdES.detached for the key SubFilter.
Since we are mandated by EU guidelines our customers require ETSI compatibility.
Thanks for you help

WSS4J with Soap and XML digital signatures

Hi,
I need to write a web client to access data from my friend's server
However, I do not have access to the WSDL or the Axis part and instead need to manually generate the SOAP
message that needs to be sent . I have been able to generate the SOAP body without the WSS4J part but I haven't been able to get it working
with the security part. I have read through the documents on the OASIS website but haven't been able to find any sample java code to
help me on this. Can you please give me some pointers on this ? Some sort of sample java code would be extremely helpful.
thanks,

gary,
How did you configure the subsystem. could you plz expalain me in detail. bond_chaitu at yahoo.com
kris.

Annotation field locked and subsequent digital signatures

Similar Messages

Maybe you are looking for