BER error - validating signature

I work for an electronic invoicing software house and we are presently having problems validating signatures within PDF signed using an RBS TrustAssured (Identrus) signature which Adobe tells me “Signature is valid, but revocation of the signer’s identity could not be checked”.
When I then go into the certificate properties revocation tab and hit the problems encountered button the error message is "Error encountered while BER decoding".
RBS say they are confident the problem is Adobe and not their certs. Any ideas what the problem is and what can be done to solve this?
FYI "Perfect PDF 6 Reader" has no problems validating.
Thanks in advance
#15. Crouch

I know this is an old thread but I'm experiencing the same issue as well. Using Acrobat Reader v11.0.6 on Windows XP.
I filled out a PDF via Adobe Reader and then signed the document via DocuSign and when I open the PDF to see if it validates, I get the following error: “Signature is valid, but revocation of the signer’s identity could not be checked”.
I've tried reinstalling Reader and the issue still exists.
What's interesting is that in Acrobat at home on my Mac, the same file validates just fine.
Any help would be appreciated.
Here is a photo of the issue:

Similar Messages

Error encountered while BER decoding Digital Signatures

Hello -
I work for a GOV agency and we use Common Access Cards/Smart Cards to login to our PC's and we subsequently use them to digitally sign PDF documents.
We have just recently switched to Adobe Acrobat 9.x Pro. Before this, we had Adobe 7.x Pro and had no troubles digitally signing documents, clearing those digital signature to reuse old documents, etc.
We first got Acrobat 9.x and had issues with digital signatures right away. We had to import this into the registry, which I believe I found on adobe forum.
Windows Registry Editor Version 5.00
[HKEY_CURRENT_USER\Software\Adobe\Adobe Acrobat\9.0\Security\cASPKI\cASPKI\cCustomCertPrefs\c4974BB0C5EBA7AFE0254EF7BA0C695C60980 7096]
[HKEY_CURRENT_USER\Software\Adobe\Adobe Acrobat\9.0\Security\cASPKI\cASPKI\cCustomCertPrefs\c4974BB0C5EBA7AFE0254EF7BA0C695C60980 7096\cAdobe_OCSPRevChecker]
[HKEY_CURRENT_USER\Software\Adobe\Adobe Acrobat\9.0\Security\cASPKI\cASPKI\cCustomCertPrefs\c4974BB0C5EBA7AFE0254EF7BA0C695C60980 7096\cAdobe_OCSPRevChecker\cURL]
[HKEY_CURRENT_USER\Software\Adobe\Adobe Acrobat\9.0\Security\cASPKI\cASPKI\cCustomCertPrefs\c4974BB0C5EBA7AFE0254EF7BA0C695C60980 7096\cAdobe_OCSPRevChecker\cURL\c0]
"sValue"=hex:68,74,74,70,3a,2f,2f,6f,63,73,70,2e,64,69,73,61,2e,6d,69,6c,00
[HKEY_CURRENT_USER\Software\Adobe\Adobe Acrobat\9.0\Security\cASPKI\cASPKI\cCustomCertPrefs\c4974BB0C5EBA7AFE0254EF7BA0C695C60980 7096\cAdobe_OCSPRevChecker\cURLToConsult]
[HKEY_CURRENT_USER\Software\Adobe\Adobe Acrobat\9.0\Security\cASPKI\cASPKI\cCustomCertPrefs\c4974BB0C5EBA7AFE0254EF7BA0C695C60980 7096\cAdobe_OCSPRevChecker\cURLToConsult\c0]
"iValue"=dword:00000001
Lately we've had trouble verifying signatures. Once we sign a document and then click the signature, we get the attached error.
Error during signature verification
Error encountered while validating
Error encountered while BER decoding
When we started to notice this we were on Acrobat 9.2. I think we may have went from 9.0 to 9.1.3 and then to 9.2 pretty quick. I removed it and installed our base load of Acrobat 9.0 and everything was working fine. I then updated to 9.1, 9.1.1, 9.1.2, 9.1.3 and none of them worked or fixed the issue. We have recently approved the update to 9.3, but that didn't fix it either. Because of this BER decoding issue, we cannot right click the signature field and clear a signature as well. Even after updates I could clear a signature field signed under Adobe 9.0.
Adobe, what should I do? Do we have a problem elsewhere, outside of Acrobat?
Again, we use smart card's to sign the documents, thus cannot change certificates.
Thanks, Nick

Hi Nick,
When you mentioned that upgrading to 9.3 didn't fix the problem, did you mean when creating a new signature in Acrobat/Reader 9.3 or did you mean opening a previously signed file and doing the signature verification?
If you meant the later, no version of Acrobat will be able to decode the signature if it was created incorrectly, which is what I fear you are referring to. What happened was Acrobat 9.0 changed the default digest method from the older SHA-1 to the the new SHA-256, but if the device that encrypts the digest (the actual signing operation) cannot handle the larger digest Acrobat is supposed to fall back to the older, smaller SHA-1 digest. There was a bug where Acrobat wasn't re-computing the digest if the smart card couldn't handle SHA-256 and creating a corrupt signature. Once this corrupt signature is written out to the PDF file there is no getting around it. Update 9.3 fixes the problem at signature creation and you should be able to successfully sign using your CAC card, but sadly there is no fixing the existing corrupt signatures.
Steve

Error #2046: The loaded file did not have a valid signature in flex 4

As part of our CI build, the ant script that builds the client side (flex 4) projects also runs a set of FlexUnit4 tests on the deployed project. Most of the tests work but a few fail with this error
RSL
http://local.foo.com/bar/com/blah/components/someComponent/framework_4.1.0.16076.swz failed to load.
Error #2046: The loaded file did not have a valid signature.
The build machine is running Ununtu 10.10 with Firefox 3.6 and Flashplayer 10.2. If I run the exact same set of tasks, accessed from the same URL in windows everything passes with no problem. After some searching I did run across this thread: http://forums.adobe.com/message/2747415#2747415 but when I went looking for the libflashsupport.so file mentioned, the Ubuntu docs seemed to indicate that it was no longer needed.
I'm at my wits end here. Is libflashsupport.so actually needed in Ubuntu 10.10 and if so where would I find it? If not does anyone know of another issue that could be responsible for this?

hello,
I have the same issue, Ubuntu 10.10, flashplayer 10.3rc1
mxmlc SimplePrj.mxml -debug=true -benchmark=true --target-player=10 -output ../deploy/SimplePrj.swf
mxlc verbose:
Loading configuration file /home/.../flex-config.xml
Initial setup: 79ms
start loading swcs 9ms Running Total: 88ms
Loaded 34 SWCs: 740ms
precompile: 1062ms
Required RSLs:
    http://fpdownload.adobe.com/pub/swz/flex/4.5.0.20967/framework_4.5.0.20967.swz with 1 failover.
    http://fpdownload.adobe.com/pub/swz/tlf/2.0.0.232/textLayout_2.0.0.232.swz with 1 failover.
    http://fpdownload.adobe.com/pub/swz/flex/4.5.0.20967/spark_4.5.0.20967.swz with 1 failover.
    http://fpdownload.adobe.com/pub/swz/flex/4.5.0.20967/sparkskins_4.5.0.20967.swz with 1 failover.
    http://fpdownload.adobe.com/pub/swz/flex/4.5.0.20967/mx_4.5.0.20967.swz with 1 failover.
Files: 540 Time: 3380ms
Linking... 27ms
SWF Encoding... 18ms
/.../SimplePrj/deploy/SimplePrj.swf (80059 bytes)
postcompile: 45ms
Total time: 4259ms
Peak memory usage: 81 MB (Heap: 62, Non-Heap: 19)
I had to copy the swz to deploy folder since failovers are not yet available.
* accessing from windows machines it loads swz without complaints.
Jaco

Error #2046: The loaded file did not have a valid signature.

I have three different applications which suddenly stopped working with this error
Error #2046: The loaded file did not have a valid signature.
None of the sites has been touched in Months, I assumed they would keep working the way they had.
I wonder how many other sites are experiencing this and how many PO'd customers there are out there??
This is really bad business practice, what is causing it?
Dan Pride
Note: the three were developed around the same time, one domain went down for a few days and was then renewed????

Daniel... have you found a solution to your problem?
I am also having the same problem. I was googling with no avail, when I noticed you added this post just yesterday,
so I am thinking that adobe has done something to the swz files hosted on thier servers.
Can someone from Adobe confirm if anything was done to either swz files or the crossdomain files on their end?
I am in the same boat as you... no changes on our side, but the application has suddenly stopped working.
We were building against a beta build of flex 4 (4.0.0.10485)
I wonder which sdk version you are using?
Here is what I see through the debugger...
Warning: Ignoring 'secure' attribute in policy file from http://fpdownload.adobe.com/pub/swz/crossdomain.xml. The 'secure' attribute is only permitted in HTTPS and socket policy files. See http://www.adobe.com/go/strict_policy_files for details.
[SWF] C:\Inetpub\wwwdata\xxxxxxxxx_Application.swf - 847,661 bytes after decompression
Error #2046: The loaded file did not have a valid signature.
Failed to load RSL http://fpdownload.adobe.com/pub/swz/flex/4.0.0.10485/framework_4.0.0.10485.swz
Failing over to RSL framework_4.0.0.10485.swz
Error #2046: The loaded file did not have a valid signature.
PS... I have tried multple PCs (XP, Vista, Server 2008) with different versions of flash player (10.0.45.2, 10.0.22.87)
Any help appreciated.

Anyone know what is Error #2046: The loaded file did not have a valid signature

can anyone help me solve this issue? when i try to run project or make swf file
Error #2046: The loaded file did not have a valid signature
show up. how do i get a valid signature? or it show up because it is a trial version?
please help me!!

Hi Ryan,
Please see this recent post: http://forums.adobe.com/message/3277736#3277736
Your best option is to open your project in the shipping version of Flash Catalyst CS5 and re-publish it. Catalyst CS5 can open projects that were created with the beta 2 release (October 2009) or newer.
If your project won't open, then it was probably created in an earlier beta/alpha version of Catalyst. If you know how to write Flex code, with some work you can upgrade these old projects by hand: import the project into Flash Builder 4 and then resolve any problems you encounter with compiling and running the project.
Sorry for the trouble -- hope this info helps,
- Peter

The extension does not contain a valid signature

hey guys, newbie on deck!
So, after installing CS6 I ran the Adobe Update Manger. During the update the Adobe Extension Manager (AEM) fired off and began updating as well. One error I saw was:
The extension 'Adobe_Flash_Professional_Toolkit_for_CreateJS' does not contain a valid signature. The extension will not be installed.
I'm not sure what this is or what it does but I would like to:
Understand the Adobe ecosystem and
Clear any problems.
Here's what I do know:
The Mac I have is 2 days old and probably in the best shape of its life.
I installed CS6 fresh from a DVD.
Ran the Adobe Update Manager the next day (today).
I don't intend to use Flash.
If anyone can expain common causes for this behavior and a fix I would greatly appreciate it.
Thanks in advance,
TT

Hi JesusPresley,
The root cause is the updater updated Adobe Flash, which tried to install the extension above by Extension Manager in the installation. However, this extension was NOT signed with the updated Adobe certificate, so the extension installation will be rejected by Extension Manager. That is what you got. We have sent this issue to Flash team.
If you don't use Flash, you can manually edit C:\Program Files\Adobe\Adobe Flash CS6\XManConfig.xml, and remove the line <Data key="SupportedInSuite">CS6</Data>. Thanks.
Xiaoyi

Appstudio exporter does not contain a valid signature

HI I am trying to install AppStudio plugin to work with InDesign but Extension Manager is throwing the following error...
appstudio exporter does not contain a valid signature !
I have updated all software.
(I am downloading new apps in the background)
I have a CC subscription

Hi,
please click "tools"->"preferences", unselect "Allow Extension Manager to access Internet" option, and then try to install it again.

Recently updated to itunes 10.6.1, but during update it says itunes does not have a valid signature and update fails ,now older version is not able to connect to itunes store

Recently updated to itunes 10.6.1, but during update it says itunes does not have a valid signature and update fails ,now older version is not able to connect to itunes store error 306. I am using windows 7.

(Apologies for butting in, wha.)
now older version is not able to connect to itunes store error 306. I am using windows 7.
If you still get the 306 after updating to 10.6.1.7, perhaps try the following user tip:
iTunes for Windows 9.0.x: Error 306

The extention does not contain valid signature...".

Hi
I made .ZPX file. But during unpacking it shows an alert "The extention does not contain valid signature...". What can be reason and how to fix it?

Hi Maxim3,
It is difficult to tell what is wrong with your ZXP without inspecting what's inside it, but here are a few things which could cause this kind of error in Extension Manager
Adding files to the ZXP after it has already been signed
Adding a whole folder to a ZXP, rather than the contents of a folder (since Extension Manager won't find your MXI in the root level of your ZXP)
Adding files which contain double-byte characters (e.g. Traditional Chinese)
The command should have looked something like this:
java -jar ucf.jar -package -storetype PKCS12 -keystore cert.p12 -storepass password outputfile.zxp -C "/inputfolder" .
[note the dot (.) at the end of the command]
Probably the easiest way to package a ZXP is using Adobe Exchange Packager:
https://www.adobeexchange.com/api/Packager.exe
https://www.adobeexchange.com/api/Packager.dmg
...as you can use this to create self-signed certificates, and it guides you through the process of packaging and signing.
Fraser

Old/Bad Extension Manager 5.5 on Adobe Exchange- Extension does not contain a valid signature

The Adobe Exchange Download page has an old version of Adobe Extension Manager that fails on Mac OS Mountain Lion and later. Anyone who attempts to download Extension Manager gets this old version, 5.5.0.163.
BAD - http://www.adobe.com/exchange/em_download/em55_download.html
Version 5.5.3 is available from the following link, but Adobe search and download page link to the exchange download, not this link.
http://download.macromedia.com/pub/dw_exchange/extension_manager/mac/AdobeExtensionManager _5_5_3_mul_AdobeUpdate.dmg
Adobe, Please update the link so that we can a little more easily download a version that doesn't show the misleading error "The Extension does not contain a valid signature. The extension will not be installed".

Sorry for that. We listed the old version in that page because the latest 5.5.3 patch can be installed ONLY AFTER you have installed the old version. Actually you can find the product updates at http://www.adobe.com/downloads/updates/. Also you can launch Adobe Application Manager or Creative Cloud app to learn which products are updatable and update them if necessary.

Method 'publishCatalog' does not match any of the valid signatures for mess

When I run my client, I get "Method 'publishCatalog' does not match any of the valid signatures for message-style service methods" I know that it means that my web service method should conform to one of those 4 methods (http://ws.apache.org/axis/java/user-guide.html#ServiceStylesRPCDocumentWrappedAndMessage), and I made it conform, yet I still get that error.
Here's my Service and Client code:
import org.w3c.dom.Element;
import org.apache.axis.client.Service;
import org.apache.axis.client.Call;
import org.apache.axis.message.SOAPBodyElement;
import org.apache.axis.utils.XMLUtils;
import java.io.File;
import java.io.FileInputStream;
import java.net.URL;
import java.util.Vector;
public class CatalogPublisherServiceClient {
     public static void main(String[] args) throws Exception{
          String endpointURL="http://localhost:8080/axis/services/CatalogPublisherService";
          org.apache.axis.client.Service service = new Service();
          Call call = (Call)service.createCall();
          call.setTargetEndpointAddress(new URL(endpointURL));
          SOAPBodyElement[] reqSOAPBodyElements = new SOAPBodyElement[1];
          File catalogFile = new File("catalog.xml");
          FileInputStream fis = new FileInputStream(catalogFile);
          reqSOAPBodyElements[0] = new SOAPBodyElement(XMLUtils.newDocument(fis).getDocumentElement());
          SOAPBodyElement[] resSOAPBodyElements = (SOAPBodyElement[]) call.invoke(reqSOAPBodyElements);
          SOAPBodyElement resSOAPBodyElement = null;
          for(int i=0; i<resSOAPBodyElements.length; i++){
               resSOAPBodyElement = (SOAPBodyElement)resSOAPBodyElements;
               System.out.println(XMLUtils.ElementToString(resSOAPBodyElement.getAsDOM()));
import javax.xml.parsers.DocumentBuilderFactory;
import javax.xml.parsers.DocumentBuilder;
import javax.xml.soap.MessageFactory;
import javax.xml.soap.SOAPMessage;
import org.w3c.dom.Document;
import org.w3c.dom.Element;
import org.w3c.dom.NodeList;
import org.w3c.dom.Node;
import org.w3c.dom.Text;
import java.util.Vector;
import java.util.Date;
import java.text.SimpleDateFormat;
import org.apache.axis.MessageContext;
import org.apache.axis.utils.XMLUtils;
import org.apache.axis.message.SOAPBodyElement;
public class CatalogPublisherService {
     public SOAPBodyElement[] publishCatalog (SOAPBodyElement[] soapBodyElements) throws Exception {
          Element soapBody = (Element)soapBodyElements[0];
          NodeList productList = soapBody.getElementsByTagName ("PRODUCT");
     int productCount = productList.getLength();
     DocumentBuilderFactory factory = DocumentBuilderFactory.newInstance();
     factory.setNamespaceAware(true);
     DocumentBuilder builder = factory.newDocumentBuilder();
     Document responseDoc = builder.newDocument();
     Element resRoot = responseDoc.createElementNS("http://www.axis03.ws", "CATALOGUPDATE");
     resRoot.setPrefix("CU");
     Element itemCount = responseDoc.createElement("ITEMCOUNT");
     Text itemCountText = responseDoc.createTextNode (String.valueOf(productCount));
     Element dateReceived = responseDoc.createElement("DATERECEIVED");
     SimpleDateFormat sdf = new SimpleDateFormat("MM/dd/yyyy");
     String date = sdf.format(new Date());
     Text dateReceivedText = responseDoc.createTextNode(date);
     //Append the child elements appropriately
     resRoot.appendChild(itemCount);
     itemCount.appendChild(itemCountText);
     resRoot.appendChild(dateReceived);
     dateReceived.appendChild(dateReceivedText);
     SOAPMessage message=null;
     MessageFactory msgFactory = MessageFactory.newInstance();
     message = msgFactory.createMessage();
     SOAPBodyElement[] result = new SOAPBodyElement[1];
     result[0] = new SOAPBodyElement(resRoot);
     return(result);

That's a really helpful answer and not smug at all, thanks Carey.
I just downloaded a DVD image from my university's MSDN Academic Alliance program, named "Microsoft
Windows 7 with Service Pack 1 Debug/Checked Build 64-bit (English)", which I wanted to use to install over an existing 32-bit version. I thought the install screen was giving this weird unskippable error described in the OP before I even entered
a key because the 32-bit key I had used on the HDD was somehow interpreted to be used in an upgrade, but no. Even after I wiped the hard drive, this error persisted.
Guess I'll go Google some more on how to install my legit copy of Windows, because this self-serving shit sure isn't helping.
edit: IF YOU GOOGLED THIS AND ARE STILL LOOKING FOR YOUR ANSWER, CHECK HERE:
http://answers.microsoft.com/en-us/windows/forum/windows_8-windows_install/the-product-key-entered-does-not-match-any-of-the/47e6f575-5792-404b-9b7f-2065bdb91011

Not valid signature on hybrid extension

I'm trying to sign an hybrid extension with my Globalsign certificate, I have tried using the signing toolkit and also directly in FlashBuilder ( Export Extension - hybrid).
While installing the extension I always get "Extension ... does not contain valid signature". It creates the package without any warning or error, but I can't install it.
I have successfully signed non hybrid extensions and they install fine, it's just the hybrid one. The certificate is also recent and I have tried including timestamp and without.
Using Windows Vista and Extension Manager 6.0.1.26 , I have heard about issues with Mac OS X in the past but it's not the case.
When using the signing tool the command is: java -jar ucf.jar -package -storetype PKCS12 -keystore globalsign.p12 com.mycompany.myextension.zxp -C "C:\myextfolder" .
If I create the hybrid package using the Extension Manager it installs fine but I get this ugly warning for not signed extension.

After a lot of try and error I have found the reason:
My hybrid extension includes many resource files, the certificate adds a signature for each of this files, after around 300 files the signature starts to become corrupt ( this can be seen in the signature file included in the package) and logically extension manager issues a not valid certificate message when installing.
The solution I have adopted is to include only one compressed file with all resource files instead of any single file, then my extension must unzip it the first time at runtime. It's not ideal but works and all packages are correctly signed.
I have not found any mention to a limit of the files in the documentation but propably no one was thinking on so large extensions
Hope it helps somebody

Installation Problems - does not contain valid signature

Anything I download from exchange panel fails to install with "does not contain valid signature" and gives error code 1. I am using widows 8 with adobe cloud versions of products. I have tried many exchange products using photoshop 32 and 64 bit versions with the same error every time. I have tried re-installing the extension manager as well as the exchange panel with no effect. I have ran the programs as the administrator as well. I have tried disabling my virus software but nothing works.

1) In the path: C:\Users\<username>\AppData\Roaming\Adobe\CEPServiceManager4 I can not find the extensions folder.
2) AdobeEchange isn,t in the list:
3) The extension that I'm trying to install, has been discharged from that address about an hour ago...
The problem is stil present.
Thanks
Andrea

Help! i need to get components id with error validation!

Hi guys, im really new in jsf, i have a tabset, in with several tabs generated dinamically, each tab have several components generated dinamically as well, im trying to get all components id which have validation errors, and show in the page an alert summary with the name of tabs which have the components with error validation, to do that, i will have to get the components id with error validations, so i will get the tab name which contains it.
I tried to use this, but didnt work for other components in others tabs than tabSelected.
public void prerender() {
Object tmp="";
FacesContext context = FacesContext.getCurrentInstance();
Iterator iter = context.getClientIdsWithMessages();
while(iter.hasNext()){
Object obj = iter.next();
This detect components in the current tab, because they are who have messages.
Please guys, hopefully you could help me at this, ive been trying to achieve this since 3 days ago, im really desperated, i dont know, if i could do this using some of jsf, otherwise i will have to do validation components manually.
By the way guys:
How do i do to call the validation phase, when im using a button with inmediate = true. Thats, because i could do a method to validate components (manually) and then call the validation phase, to show the input errors to user.
Thanks in advanced,
Yellr
Message was edited by:
yellr

I suggest you do this stuff in the event handlers, such as in the action handler , such as in the tab action handler.

HT1222 Wheb I try to update iTune I am getting a message "the site has not a valid signature" and the downloading is stopped. How can I fix IT?

Wheb I try to update iTune I am getting a message "the site has not a valid signature" and the downloading is stopped. How can I fix IT?
I am using windows 7 64

That suggests that the installer is getting damaged during the download.
I'd first try downloading an installer from the Apple website using a different web browser:
http://www.apple.com/itunes/download/
If you use Firefox instead of IE for the download (or vice versa), do you get a working installer?

BER error - validating signature

Similar Messages

Maybe you are looking for