Random timeout with digital sign, DocumentManagerClient.java:329

hey guys,
Not sure if any one of you have similar experience. We are running Livecyle.ES 8.2.1 and so far we use this for signing PDF files only for a government agency.We use EJB endpoint.
Our application is a custom webapp which use Livecycle Java AIP. The problem we see is on and off, we see this exception during sign PDF.
2009-04-04 10:37:50,420 ERROR [STDERR] Apr 4, 2009 10:37:50 AM com.adobe.idp.DocumentManagerClient requestRemotePassivation
SEVERE: DOCS001: Unexpected exception. See the stack trace for details.
org.omg.CORBA.COMM_FAILURE:   vmcid: SUN minor code: 208 completed: Maybe
    at com.sun.corba.se.impl.logging.ORBUtilSystemException.connectionAbort(ORBUtilSystemExcepti on.java:2372)
And this error is raised from,
com.adobe.idp.DocumentError: org.omg.CORBA.COMM_FAILURE:   vmcid: SUN minor code: 208 completed: Maybe
    at com.adobe.idp.DocumentManagerClient.requestRemotePassivation(DocumentManagerClient.java:32 9)
    at com.adobe.idp.Document.passivate(Document.java:1069)
    at com.adobe.idp.Document.passivate(Document.java:1012)
    at com.adobe.idp.Document.getInputStream(Document.java:1524)
The interesting this about this error is, documents get signed before and after this error, are just fine. This problem used to last about 1 minute and gone. And this happens only in our PROD env . I dont see this in my DEV or TEST. The tricky thing is, in PROD, we connect to a hardware signature profile, rather than a normal scenario, not sure if related.
My guessing is that the document do get signed on the server side, and then somehow when client request it, it is gone or something.
Well, i am stomped. Really appreciate if anyone of you can share some insight.
Thanks.
-ying

Well, after a week's test I have a walkaround for this problem, I changed code to use SOAP endpoint instead of EJB. I have to do this for another reason.
My application is a webservice running under another JBoss instance. Before, I have to restart JBoss, each time, if Livecycle get bounced. This, I guess has to do with ServiceFactory cached javax.naming.InitialContext. Once Livecycle get bounced, the InitialContext get obsolete. The good part of using a SOAP endpoint is, I dont need bounce my JBoss any more.
After I made the switch, this old random timeout problem seems like going away. I still not fully understand the reason. One thing is a fact that for EJB, I have to get permission to open 1099 port through firewall (two of them). But, for SOAP, 8080 also need be opened. I am not a network kind of person, maybe HTTP is treated differently?
Well, well, as long as I dont see the problem, I let it go ...
-ying

Similar Messages

Adobe PDF iFilter 9 for 64-bit platforms does not index my PDF files with Digital Sign

Adobe PDF iFilter 9 for 64-bit platforms does not index my PDF files with Digital Sign, why?

hi Phillip
i am not sure what you mean
I downloaded the ifilter and installed it
then configured everything as shown in the pdf file
I tried indexing from scratch exactly as i did successfully in the other computer
and got some errors in the log file
i checked the sql server log and the event viewer logs and got :
Error '0x80004005' occurred during full-text index population for table or indexed view '[Pirsumim_ext_ck].[dbo].[T_PUBLICATIONS]' (table or indexed view ID '2073058421', database ID '14'), full-text key value 0x0000027A. Attempt will be made to reindex it.
The component 'PDFFilter.dll' reported error while indexing. Component path 'C:\Program Files\Adobe\Adobe PDF iFilter 9 for 64-bit platforms\bin\PDFFilter.dll'.
Informational: Full-text retry pass of Full population completed for table or indexed view '[Pirsumim_ext_ck].[dbo].[T_PUBLICATIONS]' (table or indexed view ID '2073058421', database ID '14'). Number of retry documents processed: 1. Number of documents failed: 1.
Changing the status to MERGE for full-text catalog "Pirsumim_ext_catalog_ck" (5) in database "Pirsumim_ext_ck" (14). This is an informational message only. No user action is required.
Informational: Full-text Auto population initialized for table or indexed view '[Pirsumim_ext_ck].[dbo].[T_PUBLICATIONS]' (table or indexed view ID '2073058421', database ID '14'). Population sub-tasks: 1
the same dll worked fine in another computer...
how can i see more details what is wrong with this dll ?
meidad

Bug with digitally signed/encrypted emails

Summary:
In Lion, inbound emails that are digitally signed and/or encrypted do not contain any indicators that show that the email is encrypted and that the sender has digitally signed it.
Even worse, if the contents of a digitally signed email have been altered, Mail does not display any warnings that the message has been tampered with.
Steps to Reproduce:
Send an encrypted and digitally signed email. It will be received without any indicators saying it was signed/encrypted. In addition, alter the digitally signed email source with a text editor, and then send the email (using telnet commands) to the mail server. When received, Mail does not warn the user that the email was modified.
Both of these issues were not present in Mail under Snow Leopard
Expected Results:
Digitally signed/encrypted emails should have visual indicators to show it (see screenshot below showing same email in Lion and a different client). In addition, digitally signed emails that were altered must cause mail to warn the user about the tampering.
Actual Results:
Mail does not show that an email is signed/encrypted. Mail does not show that a digitally signed email has been tampered with.
Neither of these two issues were present in the Mail.app in Snow Leopard.
Anyone found a solution....?

Running OS X 10.7.3 Apple Mail version 5.2(1257)
My signature and encryption work fine for both incoming and outgoing e-mail. However there is an odd thing I see with e-mail received from Outlook senders.
The e-mail from Outlook 2007 and 2010 show in my Apple Mail as Encrypted,Encrypted. Not as Signed,Encrypted as one would expect. Also in some cases I do not see anything in the header to indicate that the e-mail is Signed or Encrypted, unless I open the e-mail a second time.
On the second attempt to view the e-mail I then can see in the header Encrypted,Encrypted when from Outlook. I only see this behavior when the Sender is using MS Outlook or Mozilla Thunderbird.
I hope this bug is addressed as soon as possible.

Difficulty with Digitally Signed Email

I have been having trouble downloading and displaying email messages that are digitally signed. I have downloaded the required certificates and imported them onto the Pre, using the methods outlined both here and in the Pre documentation. I have confirmed that they are the correct certificates by importing the certificates into Thunderbird and seeing the verification of the digital signatures there.
The behavior I am seeing is that the messages take forever to load the body and eventually just time out. This is happening for ORC ECA SW3 and DoD Email CA-19 certificates. It may occur for others also, but I have not received signed messages using any other certificates.
Has anyone else seen this behavior, after correctly installing certificates? Are there any work-arounds?
Post relates to: Pre p100eww (Sprint)

The Exchange server here will send messages to clients under the IMAP protocol with the proper certificates attached. I would not recieve the digital signatures on Thunderbird if the server did not send them. I can view the signature information using Thunderbird without difficulty. These same messages will not load, except for the headers, using the IMAP portion of the WebOS client. Using the EAS portion of the WebOS client, they load both the headers and the body, but do not indicate that they have been signed.
While I am not the IT person for this server, I have run email serves in the past. In addition, the IT people are just a door or two down from me here. I believe the problem is really on your (Palm's) side. Can anyone there confirm that a properly digitally signed email can be fully loaded using the Palm Pre's email client from a conforming IMAP server?
Remember, IMAP is a well defined protocol, and it should conform to rigid guidelines. Therefore, using a conforming IMAP server, you should be able to test the reception of digitally signed emails using the Pre client.

Problems with digitally signed PDF FORM

Hi everyone,
I am having a situation as follows:
I have a adobe form that is digitally signed. In Adobe 9 once it is signed, the two properties are set as -
1)Document assembly not allowed
2)Changing the document not allowed.
By saving the pdf into .ps file and reopening it with Adobe pro, I was able to put some links from the text in PDF, using "LINK TOOL" button. But if I redo the links again, then comes the problem. And also, When I merge this pdf form with another the signatures are lost!!! Can anyone please help me and shed some light on this.
Appreciate all your help.
rgds,
Suma.

Hi Suma
One thing to realize is one of the purposes of a digital signature is to provide proof of document integrity. With that in mind, although in Acrobat 8 and earlier you were allowed to make changes to the document, and thus invalidate the digital signature, beginning with version 9 we have disabled that functionality. If you need to edit the core PDF don't sign it. The signature should be applied after all of the document layout has been completed. You can fill in form fields and add comments and annotations post signing, but it makes no sense to modify the document structure when all it will do is invalidate the signature.
Steve

Create XML with digital sign and SOAP header...

Hi.
With ABAP, I need create an XML file iwith SOAP envelope. The message has to be signed and the sign data saved in the ws-security part in the SOAP header. I have to sign the file with a X509v3 certificate in base64.
Somebody can tell me how can create the SOAP header and sign it with ABAP for the XML.
Thanks.

Please refrain from implementing WS-Security yourself.
NWAS ABAP 7.x provides support for WS-Security - in both roles, as Consumer and Provider.
The right approach is to generate a proxy based on a given WSDL.
What kind of (message-based) authentication is demanded by the WS Provider?
Other info source: see https://wiki.sdn.sap.com/wiki/display/Security/SingleSignonforWeb+Services
Edited by: Wolfgang Janzen on Jul 8, 2009 12:11 AM

Error 2148073513 When Attempting To Digitally Sign In Acrobat 11 Standard

I'm attempting to use Acrobat 11 Standard to digitally sign a PDF document with a 2048 bit certificate from our internal certificate authority, and I'm receiving the following error:
Error encountered while signing:
The Windows Cryptographic Service Provider reported an error:
The requested operation is not supported.
Error Code: 2148073513
The operating system is Windows 7 Enterprise x64. When I remove Acrobat 11 Standard and install Acrobat 9 Standard on the same Windows 7 system, I am able to successfully sign the document using the same certificate that was giving the error with 11. Also we have been using Acrobat 9 on Windows XP with these same certificates for a long time and never encountered issues with digitally signing.
Any ideas of what might be causing this issue?
Thanks in advance
Josh

Hi Josh,
The error message comes from Windows (not Acrobat), but Acrobat 11 is probably asking Windows to do something that it can't. What it is I don't know because the error message is too vague. One thing we can do is to take Windows out of the picture and see if you can sign when Acrobat accesses the digital ID itself as opposed to asking Windows to do the work. This is a two step process, first, export the digital ID from Windows into a file, and then import the file into Acrobat (it's not really an import, but I'll leave it at that for now).
Step 1 - Export the Digital ID
Launch Acrobat
Select the Edit > Preferences menu item
Select Internet from the Categories list box
Click the Internet Settings button
Select the Content tab on the Internet Properties dialog
Click the Certificates button
Highlight your digital ID and then click the Export button
Click the Next button on the Welcome panel of the Certificate Export Wizard
Select the Yes, export the private key radio button, and then click the Next button. If this radio button is disabled you can stop here and let me know that the private key is not exportable
Select the Include all certificates in the certification path if possible checkbox & the Export all extended properties checkbox and then click the Next button. Only select the top and bottom checkboxes, DO NOT delete the private key!
Create passwords for the file and then click the Next button. You will need this password to sign with so make sure it is something you can remember.
Pick a file name and location. Browse for a location you can remember as you will need to know where you put the file in order to use it to sign with. Click the Next button.
Click the Finish button
Click the OK button on the confirmation dialog
Click the Close button on the Certificates dialog
Click the OK button on the Internet Properties dialog
Step 2 - Add the file to Acrobat
Select Signatures from the Categories list box
Click the More button in the Identities & Trusted Certificates group box
Click the Add ID toolbar button
Click the Next button
Click the Browse button
Navigate to and select the file you exported above and then click the Open button
Enter the password you used above and then click the Next button
Click the Finish button
You will see two items in the list box with the same name. Highlight the one whose Storage Mechanism is "Digital ID File"
Click the Usage Options toolbar button and then select Use for Signing
Close the Digital ID and Trusted Certificate Settings
Click the OK button on the Preferences dialog
The next test is to see if you can sign a file. Please let me know if it works or not.
Thanks,
Steve

Digitally signed documents causing Acrobat 9.3.1 to crash

Multiple users at my office are experiencing problems with digitally-signed PDFs. As soon as anyone tries to open the PDFs that have been signed, Acrobat crashes. We're using Acrobat 9.3.1 (32-bit) on 64-bit Windows 7. Reinstalling Acrobat has not helped. Adobe Reader 10 can open the documents successfully. I can duplicate the problem on any machine.

Reader 10 was not installed on the same machine, no. Upgrading to 9.5.1 is not currently an option, nor will it become one for several months. We are in a corporate environment that is currently standardized on 9.3.1, and we have a number of applications that are dependent on that specific version. What other options can you offer that allow us to stick with Acrobat 9.3.1?

Help with java digital signing code

hello people.
can anybody help me?
i have find a java code to resolve my problem with sending pay in soap envelope with digital signature and attached certificate. i compiled it with jdk jdk1.6.0_37. and it works.
i need it to work in built-in jvm in oracle 9i. in oracle 9i jvm release is 1.3.1. Java code does not work there. there is an error
class import com.sun.org.apache.xerces.internal.impl.dv.util.Base64 not found in import.
i did not find this class in network.
can anybody help with rewriting it for jvm 1.3.1?
thanks in advance.
code below:
import com.sun.org.apache.xerces.internal.impl.dv.util.Base64;
import java.io.*;
import java.security.Key;
import java.security.KeyStore;
import java.security.PrivateKey;
import java.security.Signature;
import java.security.cert.Certificate;
public class Sign {
public static void main(String[] args) throws Exception {
// TODO code application logic here
BufferedReader reader = new BufferedReader(new FileReader("c:\\cert.p12"));
StringBuilder fullText = new StringBuilder();
String line = reader.readLine();
while (line != null) {
fullText.append(line);
line = reader.readLine();
KeyStore p12 = KeyStore.getInstance("pkcs12");
p12.load(new FileInputStream("c:\\cert.p12"), "Hfrtnf$5".toCharArray());
//????????? ????????? ????, ??? ????? ????? ???????????? alias ? ??????
//Key key = p12.getKey("my kkb key", "ryba-mech".toCharArray());
Key key = (Key) p12.getKey("my kkb key", "Hfrtnf$5".toCharArray());
Certificate userCert = (Certificate) p12.getCertificate("my kkb key");
String base64Cert = new String(Base64.encode(userCert.getEncoded()));
//signing
Signature signer = Signature.getInstance("SHA1withRSA");
signer.initSign((PrivateKey) key);
signer.update(fullText.toString().getBytes());
byte[] digitalSignature = signer.sign();
String base64sign = new String(Base64.encode(digitalSignature));
String base64Xml = new String(Base64.encode(fullText.toString().getBytes()));
System.out.println("<certificate>" + base64Cert+"</certificate>");
System.out.println("<xmlBody>" + base64Xml+"</xmlBody>");
System.out.println("<signature>" + base64sign+"</signature>");
Edited by: user13622283 on 22.01.2013 22:08

My first search is to see if there is an Apache commons project that provides it. Lo and behold:
http://commons.apache.org/codec/apidocs/org/apache/commons/codec/binary/Base64.html
commons-codec.

Digitally Signing specific SOAP elements using Java Mapping

Hello SDNers,
Iu2019m having trouble creating java mappings to sign and verify digital signatures. Iu2019m new to Java so this is proving difficult. I understand the basic concepts of OO programming and utilizing classes/objects to build the program, but Iu2019m having trouble with the conceptual understanding of how I would like to get this done.
I have outbound and inbound messages. The outbound messages are originating from an ECC backend. The messages are processed through PI with a basic Message Mapping, then it is wrapped in a SOAP envelope with specific information using a XSL mapping and then I would like to use a Java Mapping to Digitally Sign specific portions of the entire message; specifically around an element in the SOAP header and sign the SOAP body. I also need to verify these sections for all inbound messages.
The simple pseudo code I have for the outbound messages is as follows:
<ol>
<li>1. read in xml (file input stream)</li>
<li>2. find the (specific information)</li>
<ol>
<li>a. assign that string to a variable</li>
<li>b. sign this variable with the security profile (keystore, private key)</li>
<li>c. e-write the variable into the main xml file</li>
</ol>
<li>3. find the soap body</li>
<ol>
<li>a. assign that string to a variable</li>
<li>b. sign this variable with the security profile (keystore, private key)</li>
<li>c. re-write the variable into the main xml file</li>
</ol>
<li>4. write the output file with both variables written (file output stream)</li>
</ol>
Currently Iu2019m using PI 7.1 so there is no more Visual Administrator tool.
Iu2019ve seen the examples from the last link, but I canu2019t seem to put it together when mixed with basic java mapping example. I have been searching the SDN forums for a while now, but hereu2019s my specific question: how do you create a java mapping to sign and verify specific elements of a SOAP message?
Thanks in advance,
Jason

Hi Jason, did you ever architect a solution for this?

Configuring JCo3 Connection Pool with single sign on on non SAP Java server

Hi Everyone,
i have configured a connection pool on JBoss as per JCo3 Documentation and is working great.
Now I need help to configure this connection pool with single sign on so that RFc on SAP ECC systems are executed using end users credential rather than using single user name password used to configure JCo connection pool.
On SAP Java stack I am sure its possible within Java WebDynpro and i assume using JCA resource adapter. But what if we don't want to use SAP Java App server.
Any help will be appreciated.
Thanks,
Divyakumar Jain

Eason, 你好！
I have exactly the same problem. Did you find a solution to this problem? If so, please let me know!

After upgrading to iOS 5, my iPhone 4 takes a very long time to open digitally signed emails. I've tried with the SMIME settings enabled, but that doesn't help either. Any ideas on how to resolve this? Thanks in advance.

After upgrading to iOS 5, my iPhone 4 takes a very long time to open digitally signed emails. I've tried with the SMIME settings enabled, but that doesn't help either. Any ideas on how to resolve this? Thanks in advance.

I suspect you may have a corrupt photo or image that is causing the sync to fail or quit. You might want to try removing all of your photos by deselecting them in iTunes then sync - and try adding them by each sub-folders until you are able to nail down which sub-folder of photos, that causes the sync to stop or gives you errors.

Can no longer digitally sign PDF's with Adobe Reader 9

On our government network some of us have been upgraded to Adobe Reader 9 but now we can no longer digitally sign some PDF files.
People with Adobe Reader or Pro 8 can. Here is a link to one of the documents:
www.unl.edu/nrotc/Nc3065.pdf
I'm also attaching the document.
The document security shows as "Digital signing allowed" in Adobe Reader 8 but "Not allowed" in Adobe Reader 9.
Is there something wrong with Adobe Reader 9 or something we need to change?
Any constructive advice would be appreciated.

I cannot say for sure, but some of the technology the government uses (like the IRS) uses older technology that is no longer support in version 9. For example the IRS tax forms cannot be fillied in and saved using Reader 9. My bet your seeing a similar problem. There is no workaround. You will need to go back to Reader 8 or get Acrobat 9 Pro or Standard.

Cannot open digitally signed PDF's with Acrobat but can with Reader.

My users have PDF files that have been digitally signed by other users.
When opening these files with Adobe Acrobat Pro, it crashes the application.- a generic referenced memory error on some systems, a DDE server error on others, or a font capture error on others - not sure why the discrepancy there.
The files can be opened with Adobe Reader with no error.
We are at Acrobat 9.4.5 and Reader 9.4.5
I have uninstalled and reinstalled Acrobat Pro 9 and verified the same result with Pro 9.0 so it isn't the version or an update.
I have verified this on multiple machines. - I have even installed both pro and reader on one machine and verified that I could open the PDF file with Reader but not Acrobat Pro.
We can open other PDF files with no problem.
I have tried disabling as much of the security options as possible but still get the same result.
If I clear the PDF file fields (including the signatures) in Adobe Reader then it can be opened in Adobe Acrobat Pro.
Does Acrobat Pro authenticate the digital signatures differently than Adobe Reader?
Thank you in advance for your time.

Hi J.O.S.,
Regarding your question "Does Acrobat Pro authenticate the digital signatures differently than Adobe Reader" the short answer is no.
However, there are other things that Acrobat can do with a file that Reader cannot, so there could be an operation that Acrobat is trying to execute (other than signature validation) which is causing the crash. You don't see it in Reader because Reader doesn't know how to do whatever the offending operation is.
That said, can you send me the file that is crashing Acrobat to [email protected] and I'll see if I can figure out what is amiss.
Thanks,
Steve

Java API for working with digital signature.

Hi,
     I have to check whether a pdf form is modified since it is digitally signed, using a java program.
     Are there any java APIs(provided by SAP) available for that?
     Can I use IWDPDFDocument API in java program? I tried it but I am getting 'classnotfoundexception'.
Thanks,
Prabhakar.

may i know what service pack of SAP NetWeaver Developer Studio version are you using?
as the "IWDPDFDocument" is only available on SAP NetWeaver 2004S SPS 10 and above
and you just need to import either this two class
com.sap.tc.webdynpro.clientserver.adobe.api
com.sap.tc.webdynpro.clientserver.adobe.pdfdocument.api
hope this information could help you
Regards
Jia Jun

Random timeout with digital sign, DocumentManagerClient.java:329

Similar Messages

Maybe you are looking for