Digital Signature Certificate algorithm

Hi Friends
Please clarify below points as we are planning to use SHA 256 algorithm with digital certificate while signing using SECULIB libraray.
1) Does SAP support SHA 256 algorithm , if yes doesnt any additional library files are required.
2) Does SAP support SHA 256 algorithm differently from ECC6
Thanks
Lavanya

Please check the below notes:
[Note 455033 - SAPCRYPTOLIB versions, bugs and fixes|https://service.sap.com/sap/support/notes/455033]
[Note 991968 - Value list for login/password_hash_algorithm|https://service.sap.com/sap/support/notes/991968]
Following Algorithms are provided by SAPCryptolib
1. Under HASH Algorithms:
RSA-MD2          OID 1.2.840.113549.2.2, NULL parameter
RSA-MD4          OID 1.2.840.113549.2.4, NULL parameter
RSA-MD5          OID 1.2.840.113549.2.5, NULL parameter
NIST-SHA     OID 1.3.14.3.2.18, NULL parameter
SHA-1          OID 1.3.14.3.2.26, NULL parameter
md2          Same algorithm as RSA-MD2
md4          Same algorithm as RSA-MD4
md5          Same algorithm as RSA-MD5
RIPEMD-160     OID 1.3.36.3.2.1, NULL parameter
ripemd160     Same algorithm as RIPEMD-160
sha          Same algorithm as NIST-SHA
sha1          Same algorithm as SHA-1
For more details on which algo.s are supported and provided by SAPCryptolib, please check the following links:
http://www.sdn.sap.com/irj/scn/index?rid=/library/uuid/e186c590-0201-0010-af8d-a2697dee13c0
[Secure System Management FAQ|http://www.sdn.sap.com/irj/scn/index?rid=/library/uuid/a0b60eb4-a1fa-2b10-58b6-b83ed4d3ff82]
Regards,
Dipanjan

Similar Messages

Remove digital signature certificate in java

Hi,
we are trying to remove the digital signature certificate from the pdf documents and merge it using pdfbox to create a single pdf document. Could someone please give suggestion on how to remove the signature certificate programmatically in java.
Thanks in advance,
Rashmi

Try the PDFBox mailing-list.

Connect smart card reader over usb and access digital signature certificate

Hi,
I got digital signature certificate stored in a smart card.I places smart card into card reader and plugged usb port of server.
I can see card reader in windows environment.My problem is to connect card reader and access digital signature certificate using java code.
I thinh it needs javax.smartcardio but i did not find necessary jar file for jdk 1.5.xx.
1- Where can i download jar fiel for javax.smartcardio for jdk 1.5.xx
2- Is there a blog or forum thread to help me to use smart card over usb?
Thanks.

One of the beauty of Java is that when the Java VM does not let you do something (here: accessing a Smart Card), there is no way that a purely Java solution will add this functionality.
Hence, what you ask simply can not be done in pure Java (1.)5. Some machine-specific non-java code is required. And you did not specify your target.
Unless a jar file could contain machine-specific code (I don't know if this is the case, and I never made one such jar file), there seems to be no way a jar file could help.

Extracting the date value from digital signature/certificate

Hello,
I'd like to extract the date from the signature properties and copy the value over to the date field as shown in snapshot.
I am aware that we can change the appearance of the digital signature to make the date visible but in most case, it is too small to read on hardcopies.
We resort by manually typing in the date, zooming into PDF to read visible date (if any) associated with signature image, to click on the signature image to open the Signature Properties dialog, or to open the Signatures tab window docked to the left.
Manual typing in the date expose us to discrepancy problem when the PDF was created vs. the actual date the PDF was signed (date value associated with digital signature/certificate). For example, person A created a PDF with date typed in and then sent that file over to person B (approving the document), who may digitally sign it a few days later.
Hope I am making sense.
Regards,
Devin
Note: I have originally posted my question in other thread at http://forums.adobe.com/message/3296355

You can get the data and other signature properties using the signatureInfo field method: http://livedocs.adobe.com/acrobat_sdk/9.1/Acrobat9_1_HTMLHelp/JS_API_AcroJS.88.756.html
But for you application you really should be setting the date field before the signature is applied, since changing it afterwards would invalidate the signature. You can execute a script that sets the valud of the data field with the current date using the "Signaute Signed" event, which you'll see as one of the tabs of the signature field properties dialog.

Digital signature / certificate

how does the certificate (digital signature) work in OS X?
I installed one certificate from Trustcenter.de , put it in 'login' keychain.
I created one myself in the 'login' keychain.
I created one myself in the 'system' keychain.
None of those i can see in the Digital Signature menu in: Microsoft Excell, Open Office 2.3, Neooffice
I installed 5-6 certificates on windows xp and vista machines at my work, using digital signature is crutial for me, please help..

Please check the below notes:
[Note 455033 - SAPCRYPTOLIB versions, bugs and fixes|https://service.sap.com/sap/support/notes/455033]
[Note 991968 - Value list for login/password_hash_algorithm|https://service.sap.com/sap/support/notes/991968]
Following Algorithms are provided by SAPCryptolib
1. Under HASH Algorithms:
RSA-MD2          OID 1.2.840.113549.2.2, NULL parameter
RSA-MD4          OID 1.2.840.113549.2.4, NULL parameter
RSA-MD5          OID 1.2.840.113549.2.5, NULL parameter
NIST-SHA     OID 1.3.14.3.2.18, NULL parameter
SHA-1          OID 1.3.14.3.2.26, NULL parameter
md2          Same algorithm as RSA-MD2
md4          Same algorithm as RSA-MD4
md5          Same algorithm as RSA-MD5
RIPEMD-160     OID 1.3.36.3.2.1, NULL parameter
ripemd160     Same algorithm as RIPEMD-160
sha          Same algorithm as NIST-SHA
sha1          Same algorithm as SHA-1
For more details on which algo.s are supported and provided by SAPCryptolib, please check the following links:
http://www.sdn.sap.com/irj/scn/index?rid=/library/uuid/e186c590-0201-0010-af8d-a2697dee13c0
[Secure System Management FAQ|http://www.sdn.sap.com/irj/scn/index?rid=/library/uuid/a0b60eb4-a1fa-2b10-58b6-b83ed4d3ff82]
Regards,
Dipanjan

BPS + Excel Inplace = Macro + Digital Signature (Certificate)

Hi, "All"
To achieve some goals in formatting planning layout, I changed Modul1 module (subs SAPAfterDataPut() and SAPBeforeDataGet()). Because of this SAP certificate doesn't work. To avoid annoying message about macros in opening Excel, I create certificate by Selfcert.exe in office10 folder of MS Office. And I tryed to protect BPS modul with this certificate (In VBA Editor: Tools->Digital Signature...). But after saving modified template there is no cerification record in template.
This works correctly when I protect usual excel files, but doesn't work with BPS. Why? Did anybody try to do something like that?
PS: How can end users use Excel InPlace BPS Layouts? I don't find any method except BPS0...

Hallo
Actually the end user can use Excel by building a planning folder and choose the option Folder without Separate output not web Enabled. Then the front-end is Excel.
You can also build a WEB application Excel Enabled which give you Web Excel as layout but it is not so user friendly (only copy nad paste).
With the planning folder you still have all Excel Functionality.
I hope this can help you.
Regards
Mike

Multiple Digital Signatures (certificates) results in VERY slow PDF

I created a form in Lifecycle that typically has 8 signatures. As more signatures are added the form slows down significantly. Our director, who ultimately signs off on the document, has informed us that it took him 35+ minutes to approve 3 documents. The forms are on a network drive. I had read some old threads that mentioned this issue was being investigated and the newer versions of Acrobat should help speed up this process. We are currently running Acrobat X 10.1.4. Any suggestions as to what might be slowing things down? I know the digital signatures require validating and expect it to slow things down a bit but 11+ minutes is probably more than it should be. Thanks

Hi,
Just out of curiousity, if the form has been Reader Enabled, and, if the director could download the free Adobe Reader v11 from the Adobe web site, and he signs the file using version 11, is the signing process faster? It should be much faster in version 11 because we fixed the recursive validation issue that made dealing with multiple signatures so slow.
If you're interested in the nuts and bolts read on, but if not I'll understand...
The way signature validation use to work is Acrobat (and Reader as well because because the signature creation and validation mechanisms are the same in both) would start to validate signature number 8 right after the signature was created (it needs to do the validation so it knows whether or not to put the green check mark next to the signature). As part of the validation process it would need to re-validate each previous signature (and this is where things start to get weird). In order to validate signature 7 it has to also validate all previous signatures (6 thru 1) and every time it validates a new signature it has to do all of the previous signatures. Each signature would get validated as many times as it was part of the revision list. That is, signature 1 got validated eight times, signature 2 seven times and so on.
Begining with version 11 (or XI as it says in the product) we stopped all of the recursive validation and just do each signature once which makes the signature validation process much quicker. I'm always looking for real world examples, and if you can test it with Reader XI I'd appreciate knowing the results.
Thanks,
Steve

Using DIgital Signature (Certificate)

Dear SIr,
I want to use digital signature using certeficate but the time of using it is disabled and i am unable to use it
Regards,
Pravin Dhore,

Can you please elaborate your problem?

Java Digital Signature - certificate validation question

I am not sure if this is possible but here is my problem/question:
I need to publish a web based program in Citrix. My question is, everytime a user logs into Citrix and executes this application they are prompted to trust the Java certificate. Usually a user would choose "always trust" and they would not be prompted again. However, the Citrix environment is setup so that when a user logs out of Citrix all their user configuration is deleted. So the next time they log in, they are prompted once again to trust the Java cert.
Is there a way to automatically sign this certificate before it prompts a user or a way to script something that wouldn't ask the user again to validate this? Sorry if this sounds like I have no idea what I am talking about but I don't :)
The Citrix admin said he could launch this command or script (if possible) before the application is launched so it would sign the cert or place the needed cert in the users profile. Hope this makes sense.
Any suggestions would be greatly appreciated.
Thanks in advance,
Scott

Try the PDFBox mailing-list.

How can I create digital signatures for my users using Windows 2008 Active Directory Certificate Services?

Hi,
I need to create local digital signatures for my users. How can I do that using W2k8 Active Directory Certificate Services? We are gonna sign Office 2010 documents.
What company offers cheap digital signatures solutions?
Thanks in advanced

Consider the following:
if you use your local CA server to issue digital signature certificates, there is no cost, because you are eligible to issue so many certificates as you need. However, documents signed by these certificates will be considered trusted only within your AD
forest and other machines that explicitly trust your local CA. Any external client will not trust your signatures.
If you want to make your signature trusted outside your network (say, in worldwide), you need to pruchase a certificate from trusted commercial CA (VeriSign, GoDaddy, GlobalSign, StartCom, etc) according to respective vendor price list. In that case you
don't need to have your local CA server, because it is not used. All certificate management is performed by the external CA. A most common scenario is to purchase signing certificate for particular departament principals (head managers) or few certificates
for a whole company (all documents are revised by a responsible person or persons who holds signing certificate and sign them after review).
so, it is not clear from your post what exactly you need.
My weblog: http://en-us.sysadmins.lv
PowerShell PKI Module: http://pspki.codeplex.com
Windows PKI reference:
on TechNet wiki

Fire fox is not reading my XML file for digital signature

I have to upload the xml file in www.incometaxindiaefiling.gov.in by digitally signing the xml file. When I click on the tab for digital sign, the message come " cannot read the xml file"

Not the sort of thing it is easy to help with as by definition it will not be a public site but one for Indian Taxpayers, and can be expected to be secure.
Have you tried using Internet Explorer.
You could try attaching screen shots of the problem pages and any error messages, but please be careful and edit out any confidential or sensitive information before attaching such an image.
Please remember you are posting on a public and websearch indexed website, this is not a private support ticket.
*link is https://support.mozilla.org/en-US/questions/968557
Are you seeing a shield icon in your location bar as explained in this article
* How does content that isn't secure affect my safety?
That is rather a longshot as it is a change in Firefox so could affect you this year, but would not have affected you last year.
* see [[How does content that isn't secure affect my safety?]]
I note the public portion of the site
* https://incometaxindiaefiling.gov.in/
* talks about 'e-Filing' and 'Option 1: Use Digital Signature Certificate (DSC)' and then gives two other alternatives
Other possibilities
*[[Troubleshoot the "Secure Connection Failed" error message]]

Adobe Acrobat Professional & Digital Signatures

OK, I have Acrobat Pro CS3. I can create a "self signed" digital certificate, which will insert my signature onto a .pdf document to "sign" it. But when the recipient opens it, the signature is not digitally certified and the author is UNKNOWN.
I know I need to buy from a third party company a Digital Signature Certificate that works with Adobe Acrobat P:rofessional, but try as I might, using the Help in Acrobat or searching using Google, I cannot find any company that sells a Mac friendly Digital Signature Certificate.
Every site I look at (like Veri-Sign for example) requires Windows and Internet Explorer. Some sites will sell a USB key to make the certificate portable but again these require Windows.
Can anyone help please? What company sells Digital Signing Certificates for Adobe Acrobat on the Mac?

Regarding #1, the short answer is no. Every time the file is digitally signed it necessitates it being saved. That's what allow "View Signed Version" and signature roll back to work.
As for # 2, it depends on the version of Acrobat. Versions 6 and 7 allowed anyone to remove a signature as long as it wasn't a certifying signature. In the case of the certifying signature on the signer could remove. Beginning with version 8 you can only clear if you have access to the digital ID that was used to create the signature.
Steve

Digital Signature from MTNL not working with Adobe reader

Dear Sir/Mam,
I have purchased a third party digital signature certificate. I have also installed in the windows ID. but when i try to click on the sign command it doesnt really work. i have tried it on Adobe 9 as well as adobe X.
Its very important for me to get this done so please let me know if any one has any solution for this.

You really need to tell us your version of ID and OS when posting this sort of question, but to cover all the bases, see http://www.adobe.com/support/downloads/detail.jsp?ftpID=3750 (and don't be fooled by it saying Vista only), and http://kb2.adobe.com/cps/534/cpsid_53468.html

Electronic Signature (Not Digital Signature)

Digital Signature Certificate is very expensive.
Can I implement or create Electronic Signature in InfoPath 2010 or SharePoint 2010 Workflow?
It seems Collect Signature in SharePoint Workflow working on Digital Signature only.
Please help.
Thanks a lot.

How do you integrate Electronic signature to be printed on page / form ?
Are you using any application which converts electronic form into digital or some other form ?
In SharePoint ootb way there is no way to integrate electronic signature, but yes we have option for digital signature.
For electronic signature I found one article (obviously third party), not sure if this fullfils your requiremewnt or not
http://www.infowisesolutions.com/product.aspx?id=SignatureField
Let us know your thoughts on this, thanks
Regards,
Pratik Vyas | SharePoint Consultant |
http://sharepointpratik.blogspot.com
Posting is provided AS IS with no warranties, and confers no rights
Please remember to click Mark As Answer if a post solves your problem or
Vote As Helpful if it was useful.

Can I create digital signatures for other people?

I am trying to determine if there are rules/software limitations that prohibit me from creating a digital signature for other people on my PC. As an example, I support a Vice President-can I create his digital signature and store it to use on his behalf? I would also have my own signature created and stored. Thanks.

Consider the following:
if you use your local CA server to issue digital signature certificates, there is no cost, because you are eligible to issue so many certificates as you need. However, documents signed by these certificates will be considered trusted only within your AD
forest and other machines that explicitly trust your local CA. Any external client will not trust your signatures.
If you want to make your signature trusted outside your network (say, in worldwide), you need to pruchase a certificate from trusted commercial CA (VeriSign, GoDaddy, GlobalSign, StartCom, etc) according to respective vendor price list. In that case you
don't need to have your local CA server, because it is not used. All certificate management is performed by the external CA. A most common scenario is to purchase signing certificate for particular departament principals (head managers) or few certificates
for a whole company (all documents are revised by a responsible person or persons who holds signing certificate and sign them after review).
so, it is not clear from your post what exactly you need.
My weblog: http://en-us.sysadmins.lv
PowerShell PKI Module: http://pspki.codeplex.com
Windows PKI reference:
on TechNet wiki

Digital Signature Certificate algorithm

Similar Messages

Maybe you are looking for