Digital signature is not valid in acrobat reader 9

digital signature is not valid in acrobat reader 9

Your answers are very short, please give more details so that we can try to help.
- Who signed the document - did you sign it?
- where WAS it valid
- how was it made
- anything else relevant

Similar Messages

Digital signature does not validate with the given key

We are switching our single-signon provider from openssl to Weblogic's SAML. I am trying to create a test application that will send mock SAML assertions to our test Weblogic SAML server before we begin integration with the client that will send real SAML assertions.
I have configured a Weblogic 10.3.5 instance to be a SAML Service Provider as well as created an application that creates test SAML assertions to post to the SAML server. I'm currently using a self-signed certificate to sign the SAML assertion. I've imported the self-signed cert into both the DemoIdentiy.jks and cacerts on the Weblogic SAML server.
The Weblogic SAML server is giving the following error when trying to validate the signature of the assertion:
<SAML2Assert: Start verify assertion signature>
<SAML2Assert: The assertion is signed.>
<SAML2Assert: Digital signature does not validate with the given key
org.opensaml.xml.validation.ValidationException: Digital signature does not validate with the given key
at org.opensaml.xml.signature.SignatureValidator.validate(SignatureValidator.java:68)
at com.bea.security.saml2.util.SAML2Utils.verifySamlObjectSignature(SAML2Utils.java:229)
at com.bea.security.saml2.providers.SAML2Assert.verifySignature(SAML2Assert.java:285)
>
I get this error when the SAML assertion includes both the cert and the public key, just the cert, just the public key or neither.
I'm pretty sure I've configured the SAML instance correctly since I followed the steps provided by another group who got this working with a different client. The only difference is they are using a real signed certificate (Verisign i believe) instead of a self signed cert.
I'm looking for any help to track down which step in the process I've missed or implemented incorrectly.
Thanks!
Edited by: 911967 on Feb 6, 2012 12:26 PM

So I found my own answer to the issue. The error was being caused by an the following xml in the assertion:
<ds:Reference URI="">
The value of URI attribute must have a '#' followed by the same value of the ID attribute in the parent 'Assertion' element (in our case a random string):
<saml:Assertion xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="a5k42vnhsywezqzyufq15c4bb9xuzeozrmbppj38xe" IssueInstant="2012-03-12T14:33:25.986Z" Version="2.0">
<saml:Issuer>ISSUER_NAME</saml:Issuer>
<ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
<ds:SignedInfo>
<ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
<ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
*<ds:Reference URI="#a5k42vnhsywezqzyufq15c4bb9xuzeozrmbppj38xe">*
How this is related to the digital signature is beyond me, though I admit I'm very new to saml and digital signing. However I spent a great deal of time investigating my certs and how I was creating the signature, which it seems is unrelated to the actual issue. I also wasn't able to find any docs specifying that this attribute was required, though I might have just missed it.

UPGRADED 10.4.11 ON MACBOOK PRO TO 10.5, NOW UPDATES TO 10.5.8 WILL NOT SAVE, "DIGITAL SIGNATURE DOES NOT MATCH". ANY IDEAS.

UPGRADED 10.4.11 ON MACBOOK PRO INTEL TO 10.5.1 (FAMILY PACK VERSION), UPDATES TO 10.5.8 WILL NOT SAVE DUE TO, "DIGITAL SIGNATURE DOES NOT MATCH". ANY IDEAS? CAN I UPGRADE TO 10.6.1 WITHOUT SAME ISSUE.

Well, not sure if having the disk in a firewire case or over a network would have made a difference.
The solution of making a disk image as in article http://support.apple.com/kb/TS2664 was what worked for me.
After, mounting the disk image the Migration Assistant completed without errors. So far everything seems to be working like it did on 10.4.11.

Digital Signatures will not show when combined in one PDF

I have multiple PDF's with digital signatures. I'm combining them into one large PDF for distribution. The problem I'm having is the digital signatures are not showing up when I combind into one PDF. I need the digital signatures to show up because they make the document (s) official. To sent all the document out indivdual make it unmanageable and is over 300 sperate PDF's

It is not true. Most documents have pages numbered (like "page 1 of 5"). I never sign documents that do not have this page numbering and each page initialized. This way you cannot add/remove pages in a printed document without forging initials. Electronic documents (PDF) enforce this rule automatically.

Hyperlink that contains backslash is not working in Acrobat Reader 8 and 9

Hi,
Does anyone know why a hyperlink that contains backslash is not working in Acrobat reader 8 and 9?
I created a document in Indesign CS and it contains hyperlinks that open up files from network drive so they contain backslash (for example: c:\foder\forder\filename.jpg). All the hyperlinks work in Acrobat Reader 6 but not in Acrobat Reader 8 or 9.
Anybody could share the solution would be very much appreciated. Thanks!

Did you ever figure this out? I am also having problems with the "No Hand" javascript which turns off the (not very helpful) page-forward hand icon (a hand symbol with a down arrow) which confuses our users when in fullscreen mode. We create interactive PDFs and everything worked fine up to Acrobat X/Reader X. Now in XI it doesn't allow the internal link icon (pointing finger) nor weblink icon (pointing finger with W) to appear. It just remains a plain o’ hand icon no matter what you mouse over even though there are links present.

How to Digital Signature Payload not SOAP header

Hi Gurus,
How to Digital Signature Payload not SOAP header.
Thanks,
imommam

Hi Imommam,
As of now B2B does not have support for it. If you have any specific requirement, please log a SR with support.
Regards,
Anuj

Comments not seen on Acrobat Reader

Comments are not seen on Acrobat Reader when the pdf is sent by e-mail, but it was before. I need help. Yks

Hi,
Can you please check once if your comments are being saved in PDF? Add a comment or other annotation to the pdf, close it and open again to see if these are being saved? If these are getting saved, try sending again through email and see if they work now or not. Please try and share.

Adobe Flash Projector EXE files signed with Authenticode digital signatures do not launch and run.

I am failing to digitally sign Adobe Flash projector exe files.
Adobe Flash Projector EXE files signed with Authenticode digital signatures do not launch and run successfully.
It is not currently possible to directly sign a Flash Projector EXE file. Doing so is causing the projector to fail to launch or run.
What is the way to do it without involving 3rd party tool

I searched for this in our bug database, but the only bug I found was reported (and deferred) back in 2008. Other than using 3rd party tools, it doesn't look like this is possible. I'd recommend opening a new bug report on this over at bugbase.adobe.com. Please post back with the URL or bug number so others can vote and add their comments.
Thanks,
Chris

Can't open PDF. Program does not have valid digital signature. No valid Acrobat S/N found.

I recently bought new HP computer with Windows 7. I loaded my Adobe Creative Suite 2 Premium. Illustrator tries to open then just disappears. I can not open PDF's. Get the following message: This program doesn't have valid digital signature that verifies it's signature. No valid Acrobat S/N found. Acrobat will now quit. Then: There is a problem with Adobe Acrobat/Reader. Please exit and try again. When I exit - computer locks up.

These can be frustrating.
Try restarting your PC.
Using a different browser.
There have been reports that this can be due to router problems.
A simple way round it is to get a friend to download the installer for your and put it on a USB stick.

Signatures applied with Acrobat 11 appear not valid in Acrobat 9

I've attempted to contact Adobe support about this issue, but they referred me here because the issue is with a previous version of Acrobat.
We use Acrobat Standard 11 to digitally sign documents using Adobe Certified Document Services (CDS) certificates issued by GlobalSign. Each document has multiple signatures, the first of which is the certifying signature, then the others are approval signatures. We've followed the Adobe guidelines for applying certificate based signatures (http://helpx.adobe.com/acrobat/using/certificate-based-signatures.html) and have not had a problem until recently when a client reported that the signatures are coming up invalid. When I asked which version of Acrobat they are using, he replied that they have Acrobat 9.
To test, I booted up a VM with Win7 and Acrobat Standard 9 (9.5.5) and was able to reproduce the issue. I opened the signed PDF in Acrobat 9, and the blue certification ribbon showed and indicated that all signatures are valid.
I opened the signatures panel and clicked the "Validate All" button and all of a sudden, the first (certifying) signature was now marked invalid.
The details of the invalid signature indicated that "there have been changes made to this document that invalidate the signature", but all I did was validate the signatures (they were checked and indicated as valid when the document was opened).
I know this is for an older version of Acrobat, but many of our clients are using version 9 and we'd like to be able to have the signatures appear valid (because they are). I've spoken with GlobalSign support who has verified that the certificate chain saved within the document is properly linked to the Adobe certifiate for CDS.
Any help is appreciated.
Thanks,
Phil

This could be a bug in Acrobat 9. I presume you have "Validate on Open" preference set, so that when you open a signed PDF all signtures are validated. What may happen is that on open the first (certification) signatures is validated but the second signature is not processed yet. When you revalidated all signatures, both signatures were already processed and the second validation detects some incompatibility. There were changes in Acrobat X and XI with respect to signature permissions which may not had been ported back to Acrobat 9.

Digital signature will not work in Reader

I need help I have been working on a new form I want to have digatally signed. I add the digital signature box, in the test pdf it pulls in my digital certificates and works. Once I save the form and try opening it with adobe reader 9 nothing happens when I click the signature block. On the other hand when it is opened in adobe pro the signatures work. I am saving the file as static and tried several combinations of options and nothing seems to work. Can anybody give me some easy to follow instructions? I am using version 8. I appreciate any help.

I am having the same problem with signatures. I am including a form in a pdf portfolio to collect signatures from different users who have Reader. I make sure that features have been extended for reader. Most of the time they are okay. But every once in a while (at least one every two weeks) I get a user telling me they can't sign. No message or error of any kind, just a quick blink but no signature. As a work-around I've had to save a copy and re-extend features. This can be time consuming when there are a few documents I need to circulate. Please advise.

SignatureValidate() method not working in acrobat reader 5

Hi All,
Will the method signatureValidate() work in acrobat reader 5. the same pdf validation which is working in acrobat reader versions >= 7 and not working in version 5. Kindly let me know if there are any alternative methods available to detect the digital signature field changes in lower versions. Urgent help required on this.
thanks in advance.

Did you ever figure this out? I am also having problems with the "No Hand" javascript which turns off the (not very helpful) page-forward hand icon (a hand symbol with a down arrow) which confuses our users when in fullscreen mode. We create interactive PDFs and everything worked fine up to Acrobat X/Reader X. Now in XI it doesn't allow the internal link icon (pointing finger) nor weblink icon (pointing finger with W) to appear. It just remains a plain o’ hand icon no matter what you mouse over even though there are links present.

Digital signatures and combining PDFs in Acrobat X

I hope that one of you Acrobat gurus can help me out with one or more of these questions:
Is it possible to maintain digital signatures when inserting signed PDFs into another PDF?
Is it possible to remove a digital signature after a signature has been deleted from the page?
Is it possible to change the format of the date and time on a digital signature?

In the simplest sense a digital signature is a special checksum of all the bytes in the bytes in the PDF combined with all the bytes in the digital signature. If the document is changed in any way the checksum changes, so the signature becomes invalid. A valid signature ensures that the document hasn't changed since the signature was applied. That stuff that's shown on the signature field is irrelevant. It's just a pretty picture. The real stuff is going on inside the PDF where you can't see it.
Obviously it gets a lot more complext then this. The signature can be selectively applied so that the certain types of changes are allowed. A signature does not add real protection to a PDF, but Acrobat plays along with this scheme by trying to not allow changes that would invalidate the signature, and logging all modifications to the PDF.
1) There are ways to maintain the visual appearance of the signature on the page. If the permissions have been set to allow it the PDF can be flattened, which also partially removes much of the stuff that's going on internally. But this isn't always possible. I had to solve this problem once for a client, so I wrote a plug-in that strips the signature permissions from the PDF (I'll post this to www.pdfscripting.com sometime soon), after which the the PDF can be flattened, keeping the appearance. But of course, after this point the document has to be considered invalid. For example, if the document was a contract, the flattened version would be good for use in an analysis of say all contracts for a particular year, or for copying legal language to another contract, but it couldn't be used as the basis of a legal dispute.
2) I don't understand this one. Do you mean you're deleting the signature field and some of the internal digital signature stuff is still hanging around causing problems? If you own the signature (or the permissions allow), then a standard form reset will "Un-Sign" the PDF. Inserting PDF pages into another PDF will strip out all this info as well.
3) The stamp appearance is set at the time the stamp is applied, it cannot be changed after this point. It's a lot like a PDF stamp.
Thom Parker
The source for PDF Scripting Info
pdfscripting.com
The Acrobat JavaScript Reference, Use it Early and Often
http://www.adobe.com/devnet/acrobat/javascript.html
Then most important JavaScript Development tool in Acrobat
The Console Window (Video tutorial)
The Console Window(article)

Using Digital Signatures in a PDF File | Acrobat X | Adobe TV

This video details how to use the new Sign & Certify panel for digital signatures, including the new Time Stamp Document tool, in Acrobat X Std. and Pro.
http://adobe.ly/yDHBdn

I wanted to add a scanned pdf signature to a W-9 form, and I changed the preference in Security as you suggested, but the new icon in the top tool bar is grayed out, as are all the choices within the Sign & Certify drop down. I watched movies, and looked at forums, and no one has this grayed-out issue. I have been trying to figure this out for an hour, and everything I find is a dead end.

Why my signature and stamp disappear with Acrobat Reader DC version ?

I have just install the new Acrobat Reader DC but my signature, paraph and stamp saved in the prevoius version, have disappeared. What is the way to make them back ?

Hi Pascal,
In case is you have not created the back for them before installing Adobe Acrobat Reader DC you won't be able to get them back.
Regards,
Aadesh

Digital signature is not valid in acrobat reader 9

Similar Messages

Maybe you are looking for