Hi All,
I am using pdf signature verification process for validating the signature in PDF.
The output for signature verification is giving signer status - unknown
Please find PDF verification Result which will illustrate the issue for you.
<com.adobe.livecycle.signatures.client.types.PDFSignatureVerificationResult>
<signerName>Abhishek Bhandari</signerName>
<signatureStatus>VALIDANDUNMODIFIED</signatureStatus>
<signerStatus>UNKNOWN</signerStatus>
<certPaths>
<com.adobe.livecycle.signatures.client.types.SignerCertificatePath>
<certificateDER>
<byte-array>MIIEZzCCA0+gAwIBAgIQCuAoSgAAASisyEfvAAA4uTANBgkqhkiG9w0BAQUFADBIMRIwEAYDVQQdDH9dRA</byte-array>
<byte-array>ChIhW6rg==</byte-array>
</certificateDER>
<status reference="../../../signerStatus"/>
<failureReason>NO_FAILURE</failureReason>
<certificateInformation>
<com.adobe.livecycle.signatures.client.types.CertificateInformation>
<certificate reference="../../../certificateDER/byte-array"/>
<isTrusted>false</isTrusted>
<revocationInformation>
<status>Trouble</status>
<statusMessage>ALC-DSS-111-008: OCSP response parsing error: PKI Generic Exception: could not decode ocsp response (in the operation : decode)
Caused By: OCSP_STATUS_UNAUTHORIZED(OCSPResponse.java446)</statusMessage>
</revocationInformation>
</com.adobe.livecycle.signatures.client.types.CertificateInformation>
<com.adobe.livecycle.signatures.client.types.CertificateInformation>
<certificate reference="../../../certificateDER/byte-array[2]"/>
<isTrusted>false</isTrusted>
<revocationInformation>
<status>Trouble</status>
<statusMessage>ALC-DSS-111-008: OCSP response parsing error: PKI Generic Exception: could not decode ocsp response (in the operation : decode)
Caused By: OCSP_STATUS_UNAUTHORIZED(OCSPResponse.java446)</statusMessage>
</revocationInformation>
</com.adobe.livecycle.signatures.client.types.CertificateInformation>
<com.adobe.livecycle.signatures.client.types.CertificateInformation>
<certificate reference="../../../certificateDER/byte-array[3]"/>
<isTrusted>true</isTrusted>
</com.adobe.livecycle.signatures.client.types.CertificateInformation>
</certificateInformation>
</com.adobe.livecycle.signatures.client.types.SignerCertificatePath>
</certPaths>
<revision>1</revision>
<numRevisions>1</numRevisions>
<permissions>ALL</permissions>
<policyQualifierList/>
<dateSigned>2010-05-25 09:55:40.0 EDT</dateSigned>
<isSigningDateTimestamped>false</isSigningDateTimestamped>
<tsaStatus reference="../signerStatus"/>
</com.adobe.livecycle.signatures.client.types.PDFSignatureVerificationResult>
Please friends do reply for this issue.
Views
Replies
Total Likes
Can you post the signed PDF that you are using for testing purposes?
Thanks
Steve
Views
Replies
Total Likes
This can happen if the OCSP server requires the OCSP request to be signed. If this is the case, you can set the request signer's credential in the Signature Service AAC.
Views
Replies
Total Likes
Actually certificate validity has expired.
Thanks to all of you to support me to resolve this issue out.
Views
Replies
Total Likes