Digital Signature verification of a P7M file

Hello folks,
How do you guys verify the signature of such a file?
thank you.

Similar Messages

Digital signature verification failed - Error RTCCTOOL

Hi guys !!!
I am running the report from the SDCCNN - RTCCTOOL, but I get the following error message:
1. Digital signature verification failed
Description - The verification of the recommendation content using digital signatures has failed. Therefore recommendations were suppressed.
Implementation - Consult SAP note 69455 if there is a known issue with content verification. If you do not find a solution open a customer message on SV-SMG-SDD.
When I Goto - Digital signatures Activate button digital content verification is disabled.
Then go to the transaction on the client STRUST 000 and I found the certificate: SSF SAP AGS Online Content View The certificate shows:
Owner: CN=SID SSF SAP AGS Online Content Verification, OU=I0020596183, OU=SAP Web AS, O=SAP Trust Community, C=DE
Certificate List: CN=Online Recommendations, CN=OR-C, CN=V01M, OU=AGS, O=SAP AG, C=DE
CN=Online Recommendations Upd, CN=OR-U, CN=V01M, OU=AGS, O=SAP AG, C=DE
Both certificates will expire on 01.01.2038.
According to the help and OSS note 69455 tell me again that I must create this certificate every year, but I see this current certificate, what is the error?
What is the process because I'm not clear and can not find another OSS note or the SDN forum to tell me what is wrong is happening.
Thanks guys for the help I can provide.
Desiré

Hi all.
I have the same problem and explore all possible solutions found in this discussion and others without satisfactory result.
Everything points that may be an inconsistency error external certificate which is in the DB. Anyone know how to fix this.
Greetings.

How to add digital Signature Field in cfdocument pdf files?

Hi,
We are generating pdf files using cfdocument to populate values and wondering how we can add digital signature field in those pdf files. Any help or comments would be deeply appreciated.
Thanks,
hismail786

Hi,
Yes, we have options to add digital signature to the pdf. We have one attribute called "Permissions" in "cfpdf" tag. If we provide permissions = 'AllowSecure', then system would allow digital signature for that pdf.
Please go though the docs for details info. I will post in details next.
Thanks
Chandrakant

Adobe Acrobat and Reader digital signature verification error logs

Can you help me how enable and where Acrobat 9.2 and Reader 9.2.3 error logs to analyse digital signature certificate revacation (CRL, OCSP)?

Hi Gatis,
Check out the Security and Digital Signature Admin Guide athttp://learn.adobe.com/wiki/download/attachments/52658564/acrobat_reader_security_9x.pdf?v ersion=1
http://learn.adobe.com/wiki/download/attachments/52658564/acrobat_reader_security_9x.pdf?v ersion=1
Once you get the file open look at section 5.3.4.4
The folder path has to exist, but Acrobat will create the file if it's missing. For example, if you want to save the file to C:\LogFile\digSigLog.txt the folder LogFile would have to exist on the C drive, but the log file itself will get created if it's not there already.
When you type in the file path and name in the Edit Binary Value dialog in regedit, make sure you null terminate the string by typing a zero at the end of the hex data on the left side of the dialog. It will look like a dot on the right side, but it's not really a dot (a dot is 2E in hex).
Steve

Does LiveCycle Digital Signatures support unicode pkcs #12 file?

I used Adobe Acrobat and OpenSSL to generated a unicode pkcs#12 file. Import to the Windows are all correct. But when I used for LiveCycle Digital Signatures, after signed, the one use Acrobat generated pkcs12 file signed only can show ASCII character，and other one used OpenSSL pkcs12 file to signed,signature character changed to irrecognizable.

These are two unicode pkcs #12 files. one created by openssl, another one created by Acrobat.
I used this code to sign to the PDF file.
        try    {
            // This example will upload an XDP file to the LiveCycle Repository
            ServiceClientFactory myFactory = ServiceClientFactory.createInstance(LCCommonUtil.getConnectionProps());
            // Create a SignatureServiceClient object
            SignatureServiceClient signClient = new SignatureServiceClient(myFactory);
            // Specify a PDF document to sign
            FileInputStream fileInputStream = new FileInputStream(
                    "C:\\Applications\\pdfForms\\TestDigitalSign\\ConferenceReg_flatten_sf_added.pdf");
            Document credDoc = new Document(fileInputStream);
            // Specify the name of the signature field
            String fieldName = "SignatureField1";
            // Create a Credential object
            Credential myCred = Credential.getInstance("BLC_CHINA"); // LC Server: Local Credentials
             System.out.println("******"+myCred.getSpiName());
            // Specify the reason to sign the document
            String reason = "The document was reviewed";
            // Specify the location of the signer
            String location = "New York HQ";
            // Specify contact information
            String contactInfo = "Tony Blue";
            // Create a PDFSignatureAppearanceOptions object and show date information
            PDFSignatureAppearanceOptionSpec appear = new PDFSignatureAppearanceOptionSpec();
            appear.setShowDate(true);
            appear.setShowReason(true);
            // Set revocation checking to false
            java.lang.Boolean revCheck = new Boolean(false);
            // Create objects to pass to the sign method
            OCSPOptionSpec ocspSpec = new OCSPOptionSpec();
            CRLOptionSpec crlSpec = new CRLOptionSpec();
            TSPOptionSpec tspSpec = new TSPOptionSpec();
            // Sign the PDF document
            Document signedDoc = signClient.sign(
                credDoc,
                fieldName,
                myCred,
                HashAlgorithm.SHA1,
                reason,
                location,
                contactInfo,
                appear,
                revCheck,
                ocspSpec,
                crlSpec,
                tspSpec);
            // Save the signed PDF document
            File outFile = new File("C:\\ConferenceReg_flatten_signed.pdf");
            signedDoc.copyToFile(outFile);
        catch (Exception ee) {
            ee.printStackTrace();

Digital Signature Verification

Hello Friends,
We have used Acrobat 9 Pro (on a Win XP system) to create a form containing about 30 digital signature fields that can be signed (or not) during reviewer circulation. We're finding that once a number of signatures are applied, it becomes cumbersome to open and sign for the reviewers who sign later in the process. This is because of the time it takes to verify all the signatures.
Is it necessary for the form to constantly verify all signatures upon opening and signing? Would it be possible to override the verification using a key combination or something in order to speed things up?
Thanks in advance for your help,
Calamity Vic

In Edit Preferences Security you can turn off "Verify signatures when document is opened". If you later want to verify the signatures, open the signature panel and click "Validate All".

Digital Signature & Encryption of an output file

Hi to all,
I have the following requirement:
I need to digitally sign and encrypt a file generated by SAP. The receiver needs that the digital sign has been made with SHA1withRSA algorithms and the envelope with PKCS#7.
I read many articles about it, but still have a lot of doubts on what really I'm needing to perform the requirement. I already read all the threads in SDN.
My client gave me a .cer file.
I try to run the program SSF01, but i don't know how i have to use it.
My questions are:
1.- Do any have an example of the utilization of function's modules (function group SSFG)?
2.- How do i have to use the .cer file? Do I have to run transaction STRUST?
3.- Who must give me the public and private key?
Many thanks to all, any help or comment will be apreciated.
Regards,
Andrew83.
Moderator message - Moved to the correct forum
Edited by: Rob Burbank on Nov 16, 2010 10:29 AM

Taking up the requirement again (I had to resolved some production issues), I return to perform the test programs to get encrypted and digitally signed.
I'll comment you the news, so finally I'll can give thanks to whom corresponds. I would be glad, if i could mark this thread as "Answered" at the end.
Regards,
News:
OK, now I'm stuck. I'll give you a list of all the things (files, keys, certificates...) I have, and what I need to do.
Version of SAP 4.7 with SAP_BASIS and SAP_ABA Release 620.
Requirement:
1.- Sign an output file for payments with SHA1withRSA.
2.- Envelope with PKCS#7.
3.- This must be done in background mode, so the user doesn't interact with the signing. So I need to perform this in the application server. The problematic of including this on an exit, it's not a big deal, so i only wanted to create some test programs in the first place.
The customer gave to me in order to perform this, the followings files:
1.- File "AAAA.cer" from the receiver, in order to envelope the output file. This I think is the public key of the receiver.
2.- Files "BBBB.crt", "BBBB.key" and "CCCC.pem" from the customer,
in order to sign the output file. This seems to be the private key of the customer.
Now, the questions I have are:
1.- Is there anything missing to perform the encrypt and the file signing?
2.- Do I have to use STRUST, and How? I have already used it, but i think that in the wrong way. Do I have to create 2 PSE files, one for the signing and another for the encrypting?
3.- I read the help.sap, and found in some cases that the SAPSECULIB only works for signing, and not for encrypting. To Encrypt, do I need to install SAP Cryptographic Library?
4.- I cannot run report SSF01 succesfully.
5.- Do I Have to create a SSF Profile?
I'll really appreciate your help. I have been working with abap, since 2005, but this is driving me crazy.
Merry christmas for everyone who read my threads!
Regards,
Andrew83.
Edited by: Andrew83 on Dec 21, 2010 10:12 PM
Edited by: Andrew83 on Dec 21, 2010 10:21 PM

Digital signature: How to sign a file ( algorithm SHA1withRSA )

Hi
I need create and sign a File. I need some example how to do that.
I Found this functions:
ssfSign ( to sign )
ssfEnvelop ( to encrypt )
Thanks a lot!
Mariano

check program SSF01
regards
Prabhu

Excel 2013 crash - related to digital signature?

This is a cross-posting of a thread originally started in Microsoft Answers (Office- Excel) forum, advised to post in this forum by MS support engineer Mohan Suryanarayan (link to other forum: here).
I have a VB macro in file A (which otherwise contains only several Excel Tables with named ranges). My digital signature (for signing code) is attached to file A.
As the macro executes, the Open file dialog is called up so that the User can select a secondary file to open (file B or C).
Files B and C contain several sheets with formulas and Excel Tables, and also their own extensive VB macros. My digital signature is also attached to files B & C.
The remainder of the macro in file A simply executes an update of the Excel Tables in the secondary file, before saving & closing it.
I have been finding that during execution of the file A macro, Excel crashes and closes all open Excel files.
If I remove the digital signature from the secondary files then the macro in file A executes with no problem.
The macro was written in Excel 2007 and on a different laptop, with different digital signature, and used to have no problem at all. When a new laptop was purchased a new digital signature was obtained and placed into all of the files.
Execution of file A is a critical process - I need help with stopping the crash, while maintaining a digital signature in the secondary files (so that their own macros can execute).
Event Viewer error shows the following:
Faulting application name: EXCEL.EXE, version: 15.0.4667.1000, time stamp: 0x543d366c
Faulting module name: mso.dll, version: 0.0.0.0, time stamp: 0x5447696f
Exception code: 0xc0000602
Fault offset: 0x011aafdd
Faulting process id: 0x2d58
Faulting application start time: 0x01d01e17eafcd0bb
Faulting application path: C:\Program Files\Microsoft Office 15\root\office15\EXCEL.EXE
Faulting module path: C:\Program Files (x86)\Common Files\Microsoft Shared\Office15\mso.dll
JL Latham replied:
Tom, all I can give you is relatively non-information. I haven't experienced that type of behavior even in Excel 2013 with digitally signed macros in multiple workbooks. But my digital signature is a commercial one from DigiCert, not
self-cert. I'm not even sure what piece of Excel or Office processes the digital signature (that is, whether it is mso.dll or not). But your whole process has more moving parts than most of mine involving multiple workbooks do - I quite often turn
off .EnableEvents when doing things like that just so event driven macros in the other workbook(s) do not execute.
Do the macros in the 'B files' have to execute during all of this processing in file A? If not, have you tried turning interrupts off:
Application.EnableEvents = False
before starting to work with the B-files? Maybe something in them, such as a Worksheet_Change() or other event triggered process is messing things up?
If you do use Application.EnableEvents=False, remember that you MUST re-enable that later in the code with Application.EnableEvents=True to get responses to things like button clicks, changes in a worksheet or other event driven processes
to run 'normally' again.
Have you looked at this discussion:
http://answers.microsoft.com/en-us/office/forum/office_2013_release-excel/excel-2013-crashing-immediately-when-attempting-to/ea2ab100-5525-4a0d-a3cf-6977319f954f
Sounds very similar to yours - original signature created in 2007, and crashing in 2013. Some suggestions were made, but whether they fixed the issue or not is unknown: OP never came back and said "fixed it" or "didn't fix it".
I replied:
In answer, the secondary B files don't execute any part of their macros during the A file process, and I hadn't included an EnableEvents = False within the file A code. However, I have just tried it to check if it made any difference and unfortunately it didn't.
I had read the thread you gave a link to before posting, and also the sub threads given within that one, but didn't see anything I thought of immediate parallel other than an Excel 2013 crash.
The way I read the linked thread was that a User added a signature in Excel 2007 and when they tried to open the file Excel (2007?) crashes, although other people using Excel 2013 can open it (not clear whether it means others can open the one with
the 2007 signature or without it).
Anyway, the differences in my situation are that:
(1) my B-files were originally created in Excel 2007 on a different laptop to current and had their own signature attached. I maintain a 'stock' of B-file versions, some of which have the old signature and some the new. If I run the A-file macro
on one of the B-files with the old signature then it executes ok;
(2) I am able to open the B-files ok, no matter whether the signature in them derives from the old laptop with Excel 2007 or the new laptop with Excel 2013;
(3) the macros within the B-files execute ok (this includes any versions of the B-files which still have an old signature attached, by removing the old signature and replacing with the new and executing on the new laptop);
(4) the offending operation which triggers the crash (when the B-files have the new signature attached) is a Resize of the Excel Tables within the B-file. I understand that I may eventually have to find a workaround for this operation but initially
I want to sort out the signature issue (I'm reasonably sure the signature issue is not a red herring where the Resize is the 'real' problem).
Regards, Tom

Hi,
According to your description, this issue occurred with some particular files that stored in SharePoint site. Did the user download the file to local disk to print?
Based on the event log >>Faulting module name: EXCEL.EXE<<, it does not show the root Faulting module. Thus, please try to follow this KB to do general troubleshooting:
https://support.microsoft.com/en-us/kb/2758592
Then, if you have used "printer status application", please go to Device settings -> Installable options -> Printer Status notification and select disable.
If this issue still exists, we may need to collect the App crash dump file:
https://technet.microsoft.com/en-us/sysinternals/dd996900.aspx
You can try to analyze dump by yourself if you would like to：
How to analyze app crash dump file:
http://blogs.technet.com/b/askperf/archive/2007/05/29/basic-debugging-of-an-application-crash.aspx
Regards,
George Zhao
TechNet Community Support
It's recommended to download and install
Configuration Analyzer Tool (OffCAT), which is developed by Microsoft Support teams. Once the tool is installed, you can run it at any time to scan for hundreds of known issues in Office
programs.
Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact [email protected]

Pro or Standard for digital signatures

Do I need Adobe Acrobat Pro or can I use Adobe Acrobat Standard X to have digital signatures enabled for Adobe Reader file users. So far, Standard X isn't working for the Reader files.

You need Pro.

Digital signature help

I have a created a PDF in Acrobat 8.0 that requires multiple digital signatures. I am emailing the file to the people and asking for their digital signature. When I try to save the file with Person1's signature to a file with Person's2 digital signature, it deletes Person's1 signature and inserts Person2's signature. How can I save the file so both signatures are retained?
I need help ASAP. It is driving me crazy.

Hi,
You can't merge signed files because it modifies the PDF layer which would break the signature. One of the limitations of digital signatures is they are serial operations, that is one signature follows the previous signature. You cannot do this in parallel and merger the contents into one file. You could put the multiple files into a single Package (later renamed to Portfolio in Acrobat 9) file, but each signed copy would still be a stand alone file attachment within the Package.
The bottom line is, if you really need all of the different digital signatures in the same PDF file you need to send it to the first recipient, have them sign it, and then forward the file to the next recipient (or back to you).
Steve

Unable to add digital signatures using Adobe LCES Digital Security

I have tried running the Sample Java code to add digital signature fields and add signatures. I am getting errors. The log file shows:
com/adobe/idp/Context
Jan 2, 2009 4:00:14 PM com.adobe.livecycle.signatures.common.CommonBaseException logException
SEVERE: ALC-DSS-300-000 Generic SignaturesBaseException (in the operation : addSignatureField)
Caused By: com/adobe/idp/Context(EjbMessageDispatcher.java163)
Caused By: com/adobe/idp/Context(Class.java-2)
ALC-DSS-300-000 Generic SignaturesBaseException (in the operation : addSignatureField)
Caused By: com/adobe/idp/Context(EjbMessageDispatcher.java163)
Caused By: com/adobe/idp/Context(Class.java-2)
com.adobe.livecycle.signatures.client.SignatureServiceClient.addSignatureField(SignatureSe rviceClient.java:342)
apple.AddSignatureField.main(AddSignatureField.java:53)
Caused By: com.adobe.idp.dsc.DSCException
com.adobe.idp.dsc.provider.impl.ejb.EjbMessageDispatcher.doSend(EjbMessageDispatcher.java: 163)
com.adobe.idp.dsc.provider.impl.base.AbstractMessageDispatcher.send(AbstractMessageDispatc her.java:57)
com.adobe.idp.dsc.clientsdk.ServiceClient.invoke(ServiceClient.java:208)
com.adobe.livecycle.signatures.client.SignatureServiceClient.addSignatureField(SignatureSe rviceClient.java:324)
apple.AddSignatureField.main(AddSignatureField.java:53)
Has anyone worked with the JAVA API to add digital signatures on to a PDF file using Adobe LiveCycle ES 8.2? If yes please let me know.
- Ragha

This was traced back to one of the ini files still having a folder name from the last instance installed (i.e. SERVER6).
So it is fixed

Securing pdf document with digital signatures

I have a pdf document that has digital signatures. We need to secure it so no one who has input their digital signature can go back in later, delete their signature and then 're-sign' it. But I get an error message telling me I can't secure the document because it has digital signatures.
Is there any way to secure the document so only I can secure/unsecure it after digital signatures have been input?
Thanks!

You don't need to use document encryption to lock the PDF file. You can set the signature field properties to mark all fields as read-only at signature creation. Try this:
Select the Tools > Toolbars > Advanced Editing menu item
Click the Select Object tool on the Advanced editing toolbar (it's the arrow icon)
Right mouse click on the signature field and select Properties from the pop-up menu
Select the Signed tab on the Digital Signature Properties dialog
Select the Mark as read-only radio button and All fields from the corresponding drop-down list
Click the Close button on the Digital Signature Properties dialog
Select the File > Save As menu item and save a copy (in other words, leave the original copy as is in case you find you locked yourself out of the document, that way you'll have a fall-back recovery option)
Good luck,
Steve

CHARM and Digital signatures

Hi SAP Solman Gurus,
I have configured CHARM in solman 4 system
its working perfectly fine, Now I wanted know if there is anyway by which you can integrate digital signatures with CHARM
I want system to prompt for digital signature verification while approving a change request by change manager.
Waiting for a positive reply
Thanks in advance.
Yunus

Yunus,
Did you find the solution to give a prompt for digital signature? Can you please share it? I am also looking for the same solution.
Thanks in advance.
Bipin

How to add the new Signature Filter to LiveCycle Digital Signatures?

I have been wrote my own plugin for Adobe Reader.
This plugin creates signatures by cryptoalgorithm "GOST R 34.10-2001" instead of RSA used in Reader and Livecycle.
As a result, I can't validate signatures created by my plugin in the LiveCycle Digital Signatures. In the log file of JBoss are written next:
"Unsupported signature filter detected: GostSignaturePlugin".
My question is how to install a support of my signature filter in to the LiveCycle Digital Signatures?
Is it possible to install my existing plugin for adobe reader into LiveSycle, or I must to write new plugin for LiveSycle?

Hello Jose,
Try making an entry in tables SMOFFILTAB and SMOFFILFLD.
This might help!
Best Regards,
Shanthala Kudva.

Digital Signature verification of a P7M file

Similar Messages

Maybe you are looking for