将自签名密钥库包含到可信证书列表中

-1

密钥工具-keystore org726.store -genkey -alias org726

我用于上述步骤的口令是 “口令”。它在ks.load（）下面的代码中被硬编码。

我生成的密钥存储和使用Java程序进行数字签名的PDF

public void signPdfFirstTime(String src, String dest) 
{ 
    try{ 
    BouncyCastleProvider provider = new BouncyCastleProvider(); 
Security.addProvider(provider); 
//KeyStore ks = KeyStore.getInstance(KeyStore.getDefaultType()); 
KeyStore ks = KeyStore.getInstance(KeyStore.getDefaultType()); 
String path = properties.getProperty("PRIVATE"); 
String keystore_password = properties.getProperty("PASSWORD"); 
String PASSWORD = "password"; 
ks.load(new FileInputStream(KEYSTORE1), PASSWORD.toCharArray()); 
//ks.load(new FileInputStream(path), keystore_password.toCharArray()); 
String alias = (String)ks.aliases().nextElement(); 
PrivateKey pk = (PrivateKey) ks.getKey(alias, "password".toCharArray()); 
Certificate[] chain = ks.getCertificateChain(alias); 
PdfReader reader = new PdfReader(src); 
     FileOutputStream os = new FileOutputStream(dest); 
     PdfStamper stamper = PdfStamper.createSignature(reader, os, '\0'); 
     // appearance 
     PdfSignatureAppearance appearance = stamper .getSignatureAppearance(); 
     appearance.setImage(Image.getInstance("D:\\logo.jpg")); 
     appearance.setReason("I've written this."); 
     appearance.setLocation("Chennai"); 
     appearance.setVisibleSignature(new Rectangle(72, 732, 144, 780), 1, "first"); 
     // digital signature 
    System.out.println(PageSize.A4.getHeight()); 
    System.out.println(PageSize.A4.getWidth()); 
     ExternalSignature es = new PrivateKeySignature(pk, DigestAlgorithms.SHA1, provider.getName()); 
     ExternalDigest digest = new BouncyCastleDigest(); 
     MakeSignature.signDetached(appearance, digest, es, chain, null, null, null, 0, CryptoStandard.CADES); 

    }catch(Exception e) 
    { 
     e.printStackTrace(); 
    } 
}

但在最终的PDF我得到：因为它没有被列入名单签名者的身份不明您的可信证书。它是一个.store文件。在Eclipse中调试它的x509证书后进行检查。

我如何将其包含在受信任的证书列表？

来源

2015-01-01 Devanshu Kashyap

的Signer's identity is unknown because it has not been included in the list of your trusted certificates消息是来自Adobe Acrobat或从读取器。要解决此问题，您必须将证书的发行人CA包含到acrobat配置中。从Acrobat

验证签名，然后当土坯说是签名属性无效访问：

你可以做下面的后续步骤。在新的窗口中选择signer选项卡并单击显示证书按钮，然后就看到证书验证路径。现在，你必须选择发行人CA证书，并在的trust选项卡中单击添加到可信任身份......按钮，然后就可以再次验证签名，这个时候必须是有效的。

如果仅仅为了测试你与自签名证书签名直接将证书添加到可信任身份，而不是CA。

希望这有助于

来源

2015-01-16 22:29:49 albciff

将自签名密钥库包含到可信证书列表中

回答

相关问题