OCSP in DSS seems to be invalid and may crash Acrobat
Hi there!
I'm currently facing some problems when we try to add a DSS to a timestamped document. Afterwards the timestamp is not marked as LTV in Acrobat and if we try to re-add the verification data via Acrobat it crashes. You can find the document in question here.
If I add the verification data to the initial version of the file via Acrobat, there's no problem.
I compared the DSS structure (actually I didn't left the Certs in the VRI entry which is done by Acrobat but this didn't makes a difference to the actual situation) and the OCSP response in detail and noticed that there's only a single strange difference:
This part represents the nonce extension in two ocsp responses (left by Acrobat - working, right by a webservice - not working). The extnValue isn't a valid ASN.1 structure which makes me thinks that this is the problem? The webservice/nonce in the request is out of our scope so I cannot play with this. I just want to ask if anybody can confirm that this little nonce value will let Acrobat crash and will ignore the response completely?
Any comment is welcome!
Thanks
Jan
I do not get a crash when I open your PDF (which I downloaded from the URL you provided) in my copy of Acrobat DC. Acrobat validates the signature fine but looks for OCSP on-line. It rejects the OCSP in DSS because it is malformed. The service that created this signature is at fault.
Similar Messages
-
I upgraded to Yosemite yesterday afternoon on my MacBook Pro. It was an upgrade from the most recent Maverick version. I had already sent out several emails that day, but once the installation was complete, I couldn't send any mail at all. I kept getting this strange dialogue box that said the certificate for the server was invalid, and might be something "pretending" to be my server. It also keeps telling me that my email account is offline. The only account it shows as active is a Verizon POP account, but that doesn't work. I've tried using the Edit functions and the "doctor" functions, but they seem useless. I tried Help, but the instructions it gave included onscreen items I don't seem to have. This is awful, I've already missed deadlines and am desperate.
I have the same issue. My computer has also slowed down. I hope this isn't a malware. I haven't input my password into it, and dont know what I did to turn this on.
Hope someone else can give some insight -
My facebook app seems to be frozen and i cant get it to do anything. what can i do to fix this problem or uninstall the app and then reinstall it?
Try closing the Facebook app completely and see if it works ok when you re-open it : from the home screen (i.e. not with the Facebook app 'open' on-screen) double-click the home button to bring up the taskbar, then press and hold any of the apps on the taskbar for a couple of seconds or so until they start shaking, then press the '-' in the top left of the Facebook app to close it, and touch any part of the screen above the taskbar so as to stop the shaking and close the taskbar.
If that doesn't work then you could try a reset : press and hold both the sleep and home buttons for about 10 to 15 seconds (ignore the red slider), after which the Apple logo should appear - you won't lose any content, it's the iPad equivalent of a reboot. -
My screensaver seems to be freezing and I can't access Safari. I've tried restarting/shutting down and that doesn't work. Any ideas to help?
Which OS X is installed on your Mac ?
Click the Apple () menu top left in your screen. From the drop down menu click About This Mac. The version is noted there.
Troubleshooting advice can depend on that information. -
My iPod won't let me on to the App Store, and whenever I go on to ITunes, an alert pops up that the certificate for the server is invalid, and that I may be connecting to a server that is only pretending to be iTunes.apple.com and my personal info may be at risk. I downloaded an emulator yesterday from coolroms.com but deleted the app this afternoon. I cleared my safari search data, my cookies and data, and web inspector, which still didn't work. I then proceeded to reset my iPod and then download the newest version of IOS 6.1.5 but yet still am having problems. Also to the App Store and iTunes, several other apps aren't working. Any help here?
Also, when I go on to safari, another alert pops up that safari cannot verify the identity of the website, anything that I type in to as common as google.com. It gives me 3 options to either cancel, look at details, and continue. I've looked at the details of the website of Google and it is legitimate the site. Any help?
-
I looked at system.log in the system profiler today and see lots of activity at 2 a.m. when I was fast asleep, should I worry? It seems to reset hostname and mentions frequent transitions for interface, looks weird to me (I'm not a teckie!)
This is a section:
May 12 02:05:10 wendy-drapers-macbook configd[14]: setting hostname to "wendy-drapers-macbook.local"
May 12 02:05:29 wendy-drapers-macbook kernel[0]: Auth result for: 00:26:44:14:17:a3 MAC AUTH succeeded
May 12 02:05:29 wendy-drapers-macbook kernel[0]: AirPort: Link Up on en1
May 12 02:05:29 wendy-drapers-macbook mDNSResponder[16]: Note: Frequent transitions for interface en1 (192.168.1.92); network traffic reduction measures in effect
May 12 02:05:29 macbook configd[14]: setting hostname to "macbook.lan"
May 12 02:05:31 macbook mDNSResponder[16]: Note: Frequent transitions for interface en1 (FE80:0000:0000:0000:021E:C2FF:FEB3:1A3E); network traffic reduction measures in effect
May 12 02:05:34 macbook com.apple.launchd[1] (org.samba.nmbd): Throttling respawn: Will start in 5 secondsI've been seeing messages exactly like that (and many, many other kinds) in the Console since the first version of OS X. They look menacing but are harmless.
You don't need any kind of security software.
Just surf the web carefully, pay attention to where you're going and don't install anything that you don't recognize. If you are asked to enter an admin user name and password, DON'T. Unless you know for sure that you initiated the installation from a known and reliable source (like Apple).
Mac malware relies on social engineering. No amount of security/anti-virus, blah, blah, blah software is going to help. -
I have the oringinal ipad, it does not seem to support ios6 and will not connect to itunes, WHY is this?
Start here... http://www.apple.com/support/iphone/assistant/itunes/
-
Environment is invalid and must be closed (after upgrading to 4.1.7)
Hi,
I started getting this exception (stack trace below) after updating to 4.1.6 and eventually to 4.1.7 as well
Creating the environment and accessing it works fine the first time around and further attempts to access the environment will succeed as long as the applications server is not restarted.
Any idea what could be the problem?
Thanks in advance,
Javier
com.sleepycat.je.EnvironmentFailureException: (JE 4.1.7) /data/bdb/dbEnv/comp_environment_1 This environment's log file has no root. Since the root is the first entry written into a log at environment creation, this should only happen if the initial creation of the environment was never checkpointed or synced. Please move aside the existing log files to allow the creation of a new environment LOG_INTEGRITY: Log information is incorrect, problem is likely persistent. Environment is invalid and must be closed.
at com.sleepycat.je.recovery.RecoveryManager.findLastCheckpoint(RecoveryManager.java:438)
at com.sleepycat.je.recovery.RecoveryManager.recover(RecoveryManager.java:164)
at com.sleepycat.je.dbi.EnvironmentImpl.finishInit(EnvironmentImpl.java:534)
at com.sleepycat.je.dbi.DbEnvPool.getEnvironment(DbEnvPool.java:217)
at com.sleepycat.je.Environment.makeEnvironmentImpl(Environment.java:229)
at com.sleepycat.je.Environment.<init>(Environment.java:211)
at com.sleepycat.je.Environment.<init>(Environment.java:165)Javier,
I'll explain what sequence of events can make this exception happen, and perhaps you can figure out why this occurs in your application.
The JE log files hold different kind of log entries, one of which is a type called the environment root. The root holds metadata about the environment as a whole, and JE needs to find the latest version of the root every time an environment is recovered (that is, re-opened). There should always be at least one version in the log.
When an environment is created, the first version of the root is written to the log almost immediately, and the log is checkpointed. The only way we anticipate seeing this particular error is if the environment creation was interrupted, after that first 00000000.jdb file was created, and before the root was written out, which is a pretty small window. This would occur before the environment constructor had returned.
Does that sound like it matches your scenario?
Linda -
Since loading Lion, I've experienced much more instability than Snow Leopard. In particular, Mail crashes with regularity, full-screen apps seem to run slower and show the beach ball more often for longer, etc. I love the features, but I'm disappointed with the performance. Any help coming from Apple? I've been sending them so many reports after crashes, that their file must be full!
Summoning max. courage, I did what you advised. Here is the result. What does this tell you? My Lion 7.2 (mid 2011 iMac) has several annoying glitches (which I have so far tolerated through gritted teeth) but none that have actually stopped me working.
BTW, I see several items involving CleanMyMac which I did not know I had. It is generally villified as a trouble-maker. Spotlight can't find an app. or a utility of that name. How can I get rid of what's there please? Just delete?
Last login: Thu Nov 3 20:55:11 on console
Steve-Kirkbys-iMac:~ stevekirkby$ kextstat -kl | awk ' !/apple/ { print $6 $7 } '
com.AmbrosiaSW.AudioSupport(4.0)
Steve-Kirkbys-iMac:~ stevekirkby$ sudo launchctl list | sed 1d | awk ' !/0x|apple|com\.vix|edu\.|org\./ { print $3 } '
Password:
com.openssh.sshd
com.stclairsoft.DefaultFolderXAgent
com.microsoft.office.licensing.helper
com.bombich.ccc.scheduledtask.067493DB-2728-4DF3-87D8-092EF69086E8
com.bombich.ccc
com.adobe.SwitchBoard
Steve-Kirkbys-iMac:~ stevekirkby$ launchctl list | sed 1d | awk ' !/0x|apple|edu\.|org\./ { print $3 } '
com.sony.PMBPortable.AutoRun
uk.co.markallan.clamxav.freshclam
com.veoh.webplayer.startup
com.macpaw.CleanMyMac.volumeWatcher
com.macpaw.CleanMyMac.trashSizeWatcher
com.adobe.ARM.202f4087f2bbde52e3ac2df389f53a4f123223c9cc56a8fd83a6f7ae
com.adobe.AAM.Scheduler-1.0
Steve-Kirkbys-iMac:~ stevekirkby$ ls -1A {,/}Library/{Ad,Compon,Ex,Fram,In,La,Mail/Bu,P*P,Priv,Qu,Scripti,Sta}* 2> /dev/null
/Library/Components:
/Library/Extensions:
/Library/Frameworks:
AEProfiling.framework
AERegistration.framework
ApplicationEnhancer.framework
AudioMixEngine.framework
FxPlug.framework
NyxAudioAnalysis.framework
PluginManager.framework
ProFX.framework
ProMetadataSupport.framework
TSLicense.framework
iLifeFaceRecognition.framework
iLifeKit.framework
iLifePageLayout.framework
iLifeSQLAccess.framework
iLifeSlideshow.framework
/Library/Input Methods:
/Library/Internet Plug-Ins:
AdobePDFViewer.plugin
EPPEX Plugin.plugin
Flash Player.plugin
Flip4Mac WMV Plugin.plugin
JavaAppletPlugin.plugin
Quartz Composer.webplugin
QuickTime Plugin.plugin
SharePointBrowserPlugin.plugin
SharePointWebKitPlugin.webplugin
Silverlight.plugin
flashplayer.xpt
iPhotoPhotocast.plugin
nsIQTScriptablePlugin.xpt
/Library/LaunchAgents:
com.adobe.AAM.Updater-1.0.plist
com.sony.PMBPortable.AutoRun.plist
/Library/LaunchDaemons:
com.adobe.SwitchBoard.plist
com.apple.remotepairtool.plist
com.bombich.ccc.plist
com.bombich.ccc.scheduledtask.067493DB-2728-4DF3-87D8-092EF69086E8.plist
com.microsoft.office.licensing.helper.plist
com.stclairsoft.DefaultFolderXAgent.plist
/Library/PreferencePanes:
.DS_Store
Application Enhancer.prefPane
Default Folder X.prefPane
DejaVu.prefPane
Flash Player.prefPane
Flip4Mac WMV.prefPane
/Library/PrivilegedHelperTools:
com.bombich.ccc
com.microsoft.office.licensing.helper
com.stclairsoft.DefaultFolderXAgent
/Library/QuickLook:
iWork.qlgenerator
/Library/QuickTime:
AppleIntermediateCodec.component
AppleMPEG2Codec.component
DesktopVideoOut.component
DivX 6 Decoder.component
FCP Uncompressed 422.component
Flip4Mac WMV Advanced.component
Flip4Mac WMV Export.component
Flip4Mac WMV Import.component
LiveType.component
/Library/ScriptingAdditions:
.DS_Store
Adobe Unit Types.osax
Default Folder X Addition.osax
/Library/StartupItems:
Library/Address Book Plug-Ins:
Library/Frameworks:
EWSMac.framework
Library/Input Methods:
.localized
Library/Internet Plug-Ins:
Library/LaunchAgents:
com.adobe.AAM.Updater-1.0.plist
com.adobe.ARM.202f4087f2bbde52e3ac2df389f53a4f123223c9cc56a8fd83a6f7ae.plist
com.macpaw.CleanMyMac.trashSizeWatcher.plist
com.macpaw.CleanMyMac.volumeWatcher.plist
com.veoh.webplayer.startup.plist
uk.co.markallan.clamxav.freshclam.plist
Library/PreferencePanes:
.DS_Store
Perian.prefPane
WindowShade X.prefPane
Library/QuickTime:
AC3MovieImport.component
Perian.component
Library/ScriptingAdditions:
Steve-Kirkbys-iMac:~ stevekirkby$ -
Site seems to publish fine, and shows up correctly in Preview in console, but doesn't push to www
this was working fine for weeks.
on muse, site changes seem to go fine and when i publish it seem to suggest the correct site name with the www.domainname.com below it. publish action on muse seems fine.
when i look in the admin console, and hit the Preview i see the modified site... but when i go to the www.domainname.com it isn't updated.
the piece of disclosure/info here is that the machine i'm on was on a network that we decided to take off of domain/domain controller and go back to simple workgroup. when i launched muse the first time, i had forgotten to move some of the setup folders back in to the new user directory. this particular site was the only one i opened prior to getting those adobe and adobe muse folders moved. i did try to publish it and had to pick which of my sites to publish to, but that all seemed ok. my other sites (opened after moving the folders) all update fine, show up in Preview in console, and at the live www
if a catalyst person grabs this, i'm happy to give you account and site stuff if that helps.hi sanjit,
back at my desk where i have muse installed. i just re-built and
published the modified site on muse, and sent it.
i still just see the old site at the www.'domain'.com. i hit 'manage' in
muse to pull up my console for that site. in 'preview' tab there i looked
at one of the changed pages, and it shows up in preview in console. in
www. no changes show.
i can make small changes (make a period a semicolon) and always see the
changed pages in preview tab of console but not at www.
i'll see if i can figure out the support case request below and get a
number to forward to you.
tim -
I have been working on the same numbers file for the past few weeks. The last time I opened it was 1 week ago. Today when I tried to open it I am unable and getting a message that the file is invalid and the index.xml file is missing.
Hi Tracie,
I upgraded to Maverick OS X 10.9.5, numbers spreadsheet is saved. Upon re-opening, it appears to be frozen, a warning "file is invalid as index.xml file is missing". I checked, and the file is not "locked". This appears to occur only with using the new numbers app. When I open previous spreadsheets from old iWorks, no such problem occurs.
How did you resolve your problem?
Would appreciate any help here.
Thanks,
Deehay -
I cannot seem to edit PDF files on Adobe Acrobat as it says the files are protected and I need to enter a Permissions Password?
If the files have a permissions password, you need to know it, and remove security, before you can edit the files. That is correct.
-
both of the itunes cards i've tried have said invalid and i triple checked and I typed them in correctly, what could be the problem?
iTunes Store Support
http://www.apple.com/emea/support/itunes/contact.html -
In "edit" mode, my movie speed is fine. Once published it seems to slow down and become all jerky. Any ideas? Thanks
I have a revision a imac g5 with the same problem with only macbreak podcast. I know leo laporte said that the podcast was done in 1080p and my computer with its built in 64 megabyte graphics card might have trouble with this podcast but your machine must have a better graphics card than mine. 1080p requires at least 128 megabytes of graphics memory built in. My machine played this podcast on quicktime fine until they came out with the update to quicktime last week or two ago. I was going to upgrade my memory until I came accross your story and your machines doing the same thing with much better specs. I think it might be the quicktime update that is causing a problem. Maybe Leo will talk about this problem since he is doing a mac show about macs.
-
Using 10.6 iweb 3.04 . I make a small change on a page , then choose publish changes , but seems to take hours and seems to want to publish the whole site , not just a small change?
Doing the following wouldn't hurt either:
delete the iWeb preference files, com.apple.iWeb.plist and com.apple.iWeb.plist.lockfile, that resides in your Home() /Library/Preferences folder.
go to your Home()/Library/Caches/com.apple.iWeb folder and delete its contents.
Click to view full size
launch iWeb and try again.
Maybe you are looking for
-
i want to make a schedular probably in Coldfusion or using javascript , which read xml files from a folder ,import in Indesign template then export as a pdf....
-
Hi! My MacBook seems to be downloading something when i try to turn it on.
Hi! So my MacBook seems to be downloading something when i try to turn it on. It takes roughly 10mins for it to start up! Any suggestions of how i could fix this?
-
The concept of http persistent and non-persistent
pls somebody explain me the concept of "keepalive type http". when and where configure the persistent and non-persistent? not clear from the doc that HTTP-head, HTTP-get, classA and classB. Thanks in advance.
-
IPhone replacement unit (Black Box unit)
I just bought an iPhone 4s, when i activated the handsfreespeaker(loud speaker) was not working,it was not even 24 hours since i bought, i went to the store they also confirmed it arrived with broken speaker, they gave me an option to replace my iPho
-
Hi, I am working with RTS on eclipse, I have written a simple program where i construct a LTMemory object and i print its memoryRemaining() method once before entering the scope and once after exiting the scope.(Inside the scope i allocated two Integ