Why don't Digital Signatures hold up is a browser based PDF workflow

Hello,
I am trying to set up with my company the possibility of routing a PDF file via the upload Browser option. The comments seem to upload and show the changes, but when someone signs the document, it says its going to make a copy and if I just close it, the signatures are not saved? I want as group of people to be able to sign off on one PDF file. Can anyone advise? Is there a better way to have a group be able to sign off on one PDF. We really don't need the comments, just the sign offs.
thanks
barbara

Signing and commenting are pretty different. Both make a mark on the document but the similarity ends there. Upload comments won't upload a "signature" because the signature has a tight relationship to the entire file.
Most documents can be signed without first adding signature fields but there are things about a document that may prevent adding "on the fly" signatures such as certification or content protection. In these cases, the field must be placed on the document first.
If your application requires serious signatures, you would need to route the document to each signatory for signing via a server, email, or some other means. When the last person has signed, you have a file with all of their signatures on it.
If what you need is much simpler, you could have people use a stamp that says "Approved" or "I'm done" or something like that. These would be the same as other commenting markup and would work with comment upload. This may or may not meet you needs.

Similar Messages

Acrobat Standard 8 - why is the digital signature not responding?

Using Acrobat version 8 and it is fully updated.
When I try to insert a digital signature, it freezes and when I eventually close the digital signature window, it says it is not responding and the program shuts down.
This is using a document that I use frequently and only recently started having problems with the digital signature.
Why is this happening and how can I fix it?
Thank you!

Hi,
I'd like to clarify some points. You use a digital ID to create a digital signature, not unlike how you use a pen to create (what we refer to as) a wet ink signature. When it comes to applying a digital signature to a document, you can sign just about any blob of electronic data. You can sign your e-mail or a MS Word document as well as a PDF file. The signature itself lives either in the document (that's how Acrobat does it when signing a PDF file), or it can be an external attachment (that's what the smime.p7s file is you might see attached to some e-mail messages).
Here is where I'm a bit confused. How many digital IDs do you have access to? If you only have one, does it cause Acrobat to lock up when signing a specific PDF file or when you try to sign any PDF file? Same question if you have more than one digital ID available to sign with, they all cause Acrobat to lock you when signing just one specifc file or any file? When you try to sign, are you signing an existing signature field, or are you creating a signature on the fly, be it either visible or invisible? If it is just one file that is causing the problems then that file is probably corrupt. If it's any file then it is a more systemic problem and I don't have an off the shelf answer for you.
Steve

Why does a digital signature with a CA certificate not validate in adobe reader

My client has adobe reader and can not validate a digitally signed document which has a CA certificate which normally appears in the adobe root store. it comes up that one of the signatures have problems when he signs. when i email him a document that i sign it validates the signature. his signature validates on my side.

Did you find any solution for this problem?
i'm trying to implement something similar but i don't know how.
thanks in advance!

DW 6.1 widget browser? if spry is gone, why don't i have a jquery UI widget browser?

DW 6.1 (eLearning suite) on Windows7. My insert menu has a spry widget browser but I cannot add widgets to it. I also cannot see where I can add the jQuery widget browser that I see discussed elsewhere. Please help ... I need a pagination widget (backward, forward) and a couple of others ... that is DW-compatible and works with IE8. Thanks!

You're absolutely correct, Nancy O. about the version. I have happily found the Spry insert stuff and have implemented it in a tabbed menu and vertical navigation. Thanks, also for clarifying "plug-ins" as opposed to "widgets".
I was hoping for Adobe-blessed "thingiemabobs" and "doohickies" to show pagination, forward/backward, and so on to minimize integration pain with DreamWeaver's CourseBuilder extension, which is a non-negotiable part of the eLearning Demo I must create.
What I was hoping to find was the answer to "how do I get jQuery UI onto my insert menu?" I see demos where it appears just below the Spry entry, but it seems as though it's only for "CC."
Thanks for your reply. If you have guidance about getting the jQuery UI on the insert, I'd be grateful.
Regards,
ETS

Why don't png pictures display in my safari browser

Hmm. when I view some of the posts here and a .png picture is included I only see a small box with a question mark in it.

TTabby
This a test - only a test.... if this were a real.... well you gettit
PNG file just now
CCC

Verifying digital signatures in PDF documents

I'm working on verifying PDFs digital signatures.
I know that when a PDF is signed, a byterange is defined, the certificates get embedded, and from what i've read, the signed message digest and the timestamp are also stored in the PDF.
I already can extract the certificates and validate them. Now I'm trying to validate the pdf's integrity and my problem is I don't know where the signed message digest is located.
In this sample signed pdf (http://blogs.adobe.com/security/SampleSignedPDFDocument.pdf), I can clearly identify the digest since it is down below the embedded certificates: /DigestMethod/MD5/DigestValue/ (line 1520).
But that PDF sample seems to be from 2009, and I suspect the message digest is stored in a different way now, because I signed a PDF with Adobe Reader and I can't find any message digest field like the previous one. Can someone tell if the digests are now stored in a different way? Where are they located?
Anyway, for now I'm using that sample document, and trying to verify its integrity. I'm getting the document's bytes to be signed acording to the specified byterange, and digesting them with MD5 algorithm, but the digest value I get doesn't match with the one from the message digest field... Am I doing something wrong? Is the digest also signed with the signer's private key?
I appreciate any help.

You cannot rely on the digest to be in a certain place in PDF. If you want to manually verify the digest in a PDF signature here's what you need to do.
1. Open PDF in a Text Editor.
2. Find Signature Dictionary for your signature.
3. Get the Hex String which is the value of the /Contents entry in the Signature Dictionary.
4. Convert Hex String to binary string and discard trailing zeros. Remember that in a Hex string each byte is represented with two characters and the last one might be a zero. So, when you discard zeros make sure that what you get left has even number of bytes.
5. Use one of the commercially available BER Viewers (you can find free BER Viewers on the Web) to convert the binary string to ANSI.1 representation.
6. Analyze the BER-decoded PKCS#7 signature object (RFC 2315 describes it) and find the digest that you are looking for in it. It is an OCTET STRING.
If you want to programmatically validate a signature, you need to write code that does all that. Signature validation includes much more than checking the digest. You need to build chain, validate each certificate in the chain, check revocation for each certificate in the chain, etc. RFC 5280 is the guide what to do.
Good luck!

Securing Digital Signatures and none of that other stuff

Hello. I am new to getting help from highly knowledgeable people in this type of forum. This will be my second question asked. The first time response was quick, correct, and succinct. I am grateful for your help and I thank you. I will need to find out how to close out the thread I initiated wit the first question. Now my second question will allow me to cut to the chase, (provided I learned correctly what my mentors told me when responding to my first question). Here it is: I want to lock my digital signature to a PDF document without the use of a third party CA or without becoming a do it yourself CA. From my perspective it would seem that these programs or services are far more that I need. I simply need to secure, lock don my digital signature of PDF document that I send out to government agencies. It’s a one way trip. Copies of the documents are provided to members of my association, again a one way trip. I need to have my digital signature integrated into the text of the document and secure as well as the PDF document itself. That is all I want to do; no tracking, no secured return digital signatures, etc. I prefer to by a add in or an easy to use software program, but if I absolutely have to, I can work with the “cloud”. Can anybody point me in the right direction? Eally need help.
Thanks for your consideration and past assistance.
HALO

There are many different types of digital signatures. I use digital signatures that are self-signed. They cannot be verified by the people that receive them, but guarentee the documents haven't been changed since signed.
This article might help: http://help.adobe.com/en_US/acrobat/X/standard/using/WS11dd809af63f0e1e-43e0464b12b4384d3b 6-8000.html
As to your previous thread. We do not close threads usually as other people with similar issues may want to post or read the thread. You can go and mark the thread as solved.

Adding digital signature field with LC Designer vs. LC Digital Signatures

Hi All,
When digital signature field named "SignatureField1" is added to PDF document using LC Designer it appears as "form1[0].#subform[0].SignatureField1[0]" in Adobe Reader signatures tree.
Same field added by LC Digital Signatures service appears as "SignatureField1" in the same tree.
Why? What is the difference between those objects?
LC Digital signatures ES2
Adobe Reader 9.3.0
Thanks, Yan

Yan
First off, there is no difference between the two signature field objects.
I'll do my best to explain why there is a difference in how the signature objects are named in the Signature pane of Reader\Acrobat. When you add the signature field using LC Designer, the object is defined in the underlying XML (XFA) that defines the form. The (SOM expression) you see in Reader (via the signature pane) matches the structure of the form.
When you add a signature field to a form using LiveCycle Digital Signatures ES2, you are appending a signature field "on top" of a PDF form (the underlying XML has been rendered into PDF). The signature field is not defined in the XML, therefore Reader\Acrobat do not display the same naming syntax.
Does this help?
Thanks
Steve

How to move a Preview digital signature?

I made a digital signature in Preview to use to sign pdfs. I did this on my Air because that has a camera (you have to take a picture of your signature). I want to move this digital signature I made on the Air to Preview on my Mac mini (where I don't have a camera) so I can use it there, too. I don't see an obvious way to do it. I tried copying pref files over and that didn't work. Any ideas about how I can do it?

Thanks Linc, that worked perfectly. It's pretty tortuous for a non-techie like me, but follow it carefully and it does work - though I'd recommend looking at the comments underneath, because there's a bit of trickery to get the Preview Signature Privacy to show up (or at least there was for me). I am now busily digitally-signing every pdf I can find. No doubt the novelty will wear off eventually.

Auto-insert digital signature

Using LCD 8.1
Is it possible to generate a non-interactive form with a digital
signature already in-place?
We're generating invoices out of SAP and need to have a digital
signature in place when we email the PDF to our vendor.
The digital signature will always be the same and
it should be fine to embed it in the form so it can be generated in a
background process where we don't have access to a network drive.
Could someone give some direction in how to do this?
I'm familiar with putting the field on the screen & locking down
values after the user clicks on it, but can't seem to figure out how
to automatically insert it on form generation.
Thanks a lot,
Robert.

The LiveCycle Digital Signatures ES module has the ability to add signature fields (add signature fields operation) to static PDF documents.
Regards
Steve

Digital Signature automatically inserted for batch processing

hey guys... hope you can shed some light...
Is it possible to generate a non-interactive form with a digital signature already in-place?
We're generating invoices in batch processing and need to have a digital signature in place when we email the PDF to our vendor. The digital signature will always be the same.
I did see this in the LCD help:
"You can use Adobe document services to sign a document, validate a
signature, select the collection of objects to lock, or certify a PDF
document programmatically. This workflow is ideal when a large number
of documents require a signature because they can be signed in a batch
process.
To sign PDF documents in Adobe document services, configure the web
service for secure access using the secure sockets layer (SSL). For
details about this configuration, see the Adobe document services
Configuration documentation."
I have a link to the older ADS config document [-Here-|http://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/30a9630b-4f89-2a10-6fab-e311b3ffd9a6] and am in the process of looking through it.
However, has anyone done something like this already?

Otto,
thanks!
I hadn't checked out the demo - i didn't even know there was a demo program provided . BTW, it's FP_TEST_07.
I do believe you're correct that it needs to be an interactive form - that wont be an issue for us.
There is some documentation floating around that we're trying to piece together - we have our Basis team configuring the ADS for SSL connections.
From what I've seen, I think we have to store our signature in the ADS and attach it at run time.
Too many moving parts - I don't like it when I have to get more than 1 group involved to complete a develoment item.
I'll keep this thread updated as we progress.

Looking for "PDF Public-Key Digital Signature and Encryption Specification"

Hi,
i am looking for the following ("old") document:
PDF Public-Key Digital Signature and Encryption Specification
Originally i could be found here:
http://partners.adobe.com/asn/developer/acrosdk/DOCS/ppk_pdfspec.pdf
But not anymore. Does somebody of you still have it? Adobe today just offers the latest documents but i specifically need that older version.
Or is there an archive i don't know of?
Thanks for your help,
ToM

You can read the PDF 1.5 specification OR even ISO 32000-1 itself for that information. Each feature is "tagged" with the specific version in which it was introduced.
Digital Signatures were first introduced in Acrobat 4 (PDF 1.3) and have seen various improvements which each version since.

Digital Signatures - preserving throughout the process

I have a form with 4 parts, each part requiring a digital signature.
I just read the article on preserving digital signatures (http://www.adobe.com/devnet/livecycle/workflow/articles/lc_wf_preserve_digisig_tip.pdf), but I am still a little confused. Does this only work if I am sending the form as an email attachment (is that what the routes and attachments mean)?
We want to do everything on-line (using pdf's)? We want part 1 user to fill out the form on-line, digital sign it, then it submit the form where it gets routed to part 2 user. So, is it possible for user 1 to type in the last name to look up user 2 and then selects user 2 - user gets an email with a URL to fill put part 2 on-line, but the digital signature from user 1 needs to be preserved. Then user 2 will digital sign the form and route to user 3.
So, the basic question was, can we do all this on-line (using PDFs) or do we have to involve email attachments? I wouldn't think so, but I wanted to clarify.
Thank you,
Jennifer

<[email protected]> ha scritto nel messaggio news:[email protected].. >I have a form with 4 parts, each part requiring a digital signature. > > I just read the article on preserving digital signatures > (http://www.adobe.com/devnet/livecycle/workflow/articles/lc_wf_preserve_digisig_tip.pdf), > but I am still a little confused. Does this only work if I am sending the > form as an email attachment (is that what the routes and attachments > mean)? > > We want to do everything on-line (using pdf's)? We want part 1 user to > fill out the form on-line, digital sign it, then it submit the form where > it gets routed to part 2 user. So, is it possible for user 1 to type in > the last name to look up user 2 and then selects user 2 - user gets an > email with a URL to fill put part 2 on-line, but the digital signature > from user 1 needs to be preserved. Then user 2 will digital sign the form > and route to user 3. > > So, the basic question was, can we do all this on-line (using PDFs) or do > we have to involve email attachments? I wouldn't think so, but I wanted to > clarify. > I think that in your specific case, also the process via email would not preserse digital signatures, because every step that required a new digsign would change the hash value. Bye, Alessio

How to get digital signature for Google Map geocoding V3 in PL/SQL?

Hi, Gurus:
 Could anyone provide me an example about how to generate digital signature for Google Maps service v3 in PL/SQL? We tried to upgrade our program using Google maps service from v2 to v3. We are using PL/SQl on background to send request to Google for geocoding. We found some sample code to register with digital signature, but none of them is based on PL/SQl. Notice I used Google business client ID "gme-XXX" and wallet.
https://developers.google.com/maps/documentation/business/webservices/auth#digital_signatures
Google Maps API - more URL signing samples
Here is my code for V2. I notice in order to get signature, I need to use HMAC-SHA1 algorithm.
procedure Get_Geocoding(P_s_Address in varchar2, P_s_Geocoding out varchar2, P_n_accuracy out number, P_b_success out boolean) is
l_address varchar2(4000);
l_url varchar2(32000);
l_response varchar2(3200);
n_first_comma number;
n_second_comma number;
n_level_length number;
BEGIN
/* TODO implementation required */
l_address:=APEX_UTIL.URL_ENCODE(P_s_Address);
l_address := replace(l_address,' ','+');
l_url := 'http://maps.google.com/maps/geo?q='||l_address||'&'||'output=csv'||'&'||'client=gme-XXX';
l_response := utl_http.request(l_url, APEX_APPLICATION.G_PROXY_SERVER, '/u02/app/oracle/admin/apexsb/wallet', 'XXXXXXXX');
n_level_length:=0;
n_first_comma:=instr(l_response,',',1,1);
n_second_comma:=instr(l_response,',',1,2);
n_level_length:=n_second_comma-n_first_comma-1;
P_n_accuracy:=0;
if n_level_length>0 then
P_n_accuracy:=to_number(substr(l_response,n_first_comma+1, n_level_length));
end if;
l_response:=substr(l_response,instr(l_response,',',1,2)+1);
--dbms_output.put_line('In function: l_response ='||l_response);
P_s_Geocoding:=l_response;
if (P_s_Geocoding<>'0,0') then
P_b_success:=true;
--dbms_output.put_line('true');
else
P_b_success:=false;
--dbms_output.put_line('false');
end if;
END;
Thanks!

Hi, guys:
 I tried to generate digital signature for Google map service
 Maps for Business: Generating Valid Signatures - YouTube
 Generating an HMAC-SHA-1 Signature Using Only PL/SQL
 OAuth and the PL/SQL | Data Warehouse in the Cloud
 but I got error message from Google:
Unable to authenticate the request. Provided 'signature' is not valid for the provided client ID. Learn more: https://developers.google.com/maps/documentation/business/webservices/auth
 I think there is something wrong with my code to generate signature, as if I remove the part regarding client and signature, it will work, can anyone help me on this problem?
/*Procedure Get_Geocoding is used to get geocoding with accuracy level for V3 business account, you can find Google map digital signature descrirption from
https://developers.google.com/maps/documentation/business/webservices/auth#digital_signatures
if geocoding is 0,0, procedure returns false to indicate failure of get geocoding*/
procedure Get_Geocoding2(P_s_Address in varchar2, P_s_Geocoding out varchar2, P_n_accuracy out number, P_b_success out boolean) is
--private key for Google business account, this is provided by Google with client name.
l_private_key_src varchar2(200):='xxxxxxxxxxxxxxxxxxx';
l_private_key_b64_alter varchar2(200):= translate(l_private_key_src,'-_','+/');
l_private_key_bin raw(2000);
l_client_name varchar2(100):='gme-xxx';
l_signature_mac raw(2000);
l_signature_b64 varchar2(200);
l_signature_b64_alter_back varchar2(200);
l_Google_service_domain varchar2(200):='http://maps.googleapis.com';
l_address varchar2(4000);
l_url varchar2(32000);
l_path varchar2(32000);
l_response varchar2(32000);
l_page UTL_HTTP.HTML_PIECES;
n_actual_length number;
json_obj json;
json_tempobj json;
jl_listOfValues json_list;
json_geom_obj json;
json_loc json;
l_lat VARCHAR2(40);
l_lng VARCHAR2(40);
l_status VARCHAR2(255);
json_accuracy json;
--temp_string varchar2(10000);
n_first_comma number;
n_second_comma number;
n_level_length number;
BEGIN
/* TODO implementation required */
l_private_key_bin := utl_encode.base64_decode(UTL_I18N.string_to_raw(l_private_key_b64_alter, 'AL32UTF8'));
l_address:=APEX_UTIL.URL_ENCODE(P_s_Address);
--dbms_output.put_line(l_address);
l_address := replace(l_address,' ','+');
l_path := '/maps/api/geocode/json?address='||l_address||'&'||'sensor=true';
dbms_output.put_line(l_path);
l_signature_mac :=DBMS_CRYPTO.mac(UTL_I18N.string_to_raw(l_path, 'AL32UTF8'), DBMS_CRYPTO.hmac_sh1,l_private_key_bin);
l_signature_b64:= UTL_RAW.cast_to_varchar2(UTL_ENCODE.base64_encode(l_signature_mac));
l_signature_b64_alter_back:=translate(l_signature_b64,'+/','-_');
dbms_output.put_line(l_signature_b64_alter_back);
--get response from Google map service
l_url:=l_Google_service_domain||l_path||'&client='||l_client_name||'&signature='||l_signature_b64_alter_back;
--l_url:=l_Google_service_domain||l_path;
dbms_output.put_line(l_url);
l_page:=utl_http.request_pieces( l_url, 99999);
for i in 1..l_page.count loop
l_response:=l_response||l_page(i);
end loop;
n_actual_length:=length(l_response);
dbms_output.put_line(n_actual_length);
dbms_output.put_line(l_response);
--parse JSON result
json_obj:=new json(l_response);
l_status := json_ext.get_string(json_obj, 'status');
IF l_status = 'OK' then
jl_listOfValues := json_list(json_obj.get('results'));
json_tempobj := json(jl_listOfValues.get(1));
json_geom_obj := json(json_tempobj.get(3));
json_loc := json_ext.get_json(json_geom_obj, 'location');
l_lat := to_char(json_ext.get_number(json_loc, 'lat'));
l_lng := to_char(json_ext.get_number(json_loc, 'lng'));
P_s_Geocoding:=l_lat||','||l_lng;
dbms_output.put_line('##########'||P_s_Geocoding);
case json_ext.get_string(json_geom_obj, 'location_type')
when 'ROOFTOP' then P_n_accuracy:=9;
when 'RANGE_INTERPOLATED' then P_n_accuracy:=7;
when 'GEOMETRIC_CENTER' then P_n_accuracy:=5;
else P_n_accuracy:=3;
end case;
P_b_success:=true;
else
P_b_success:=false;
P_n_accuracy:=0;
P_s_Geocoding:='0,0';
end if;
END;

Digital Signatures on TechNet Gallery - thoughts?

I've recently obtained a code-signing certificate from DigiCert (who are awesome, and offer these certs for free to MVPs for personal use), and was thinking of going back and signing the various bits of script that I've posted to the TechNet Gallery. However,
most of these posts are code fragments (individual functions, etc). The intention isn't that the user will run them as-is, but just copy and paste the code into their own modules, profiles, scripts, or whatever.
This means that my signature would be thrown out anyway before the code is executed, but there may still be some benefit in verifying, at the time of download that the code hasn't been modified in any way since I originally uploaded it (say, for instance,
if someone manages to gain unauthorized access to my Microsoft account or the TechNet Gallery in some way.)
The only one I've signed so far is the Enhanced Script Logging Module, because that is uploaded as a zip file that contains, among other things, a compiled DLL. Not only is that one intended to be run as-is, but it's also harder for people to
verify that the DLL file is safe to run.
What do you think? Worth the time to go back and sign / re-post everything else?

Hey Len
there is an internal mailing list for Oracle folks - drop me a mail for it.
that said, the standalone release of Publisher supports a site wide(no support for user digital signatures) digital signature that will be added to all PDF documents that BIP generates.
Please check the documentation for more info - http://download.oracle.com/docs/cd/E10415_01/doc/bi.1013/e12188/T421739T475591.htm#5013688
regards
Tim

Why don't Digital Signatures hold up is a browser based PDF workflow

Similar Messages

Maybe you are looking for