Skip to main content
Participant
December 18, 2020
Answered

What functions should be verified by the sigValidate( ) function of the plugin?

  • December 18, 2020
  • 1 reply
  • 876 views

Hello.

 

I have a pdf file that is digitally signed using a certificate and timestamp.

And I want to verify this document in plugin's sigValidate( ) function and display the valid, invalid, etc.
The DocSign sample programs appear to be comparing only digest hash values in the sigValidate function.

Is it sufficient to verify the digest hash value here?
Or do I need to verify other parts (such as certificate or timestamp verification)?

 

Thanks.

This topic has been closed for replies.
Correct answer Test Screen Name

Checking digest values tells you whether the document has been modified since it was signed, but it does not check the authenticity of the signature. A full validation will check the certificate chain back to the certifying authority. openssl might be your friend here.

1 reply

Test Screen NameCorrect answer
Legend
December 18, 2020

Checking digest values tells you whether the document has been modified since it was signed, but it does not check the authenticity of the signature. A full validation will check the certificate chain back to the certifying authority. openssl might be your friend here.

ymjeongAuthor
Participant
December 21, 2020

I understand.


But, I only want to check the digest value in my plugin.
I would like to use the results of the test performed by the acrobat reader for the certificate chain and time stamp inspection.
Is this possible?

 

Thank you.

ymjeongAuthor
Participant
December 22, 2020

I mean.

Acrobat reader offers excellent implementation of certificate verification and time stamp verification.
I want to use this function that works well.
I just want to add one more validation (e.g., marked as expiring 10 days after signing) to existing document validation features.

 

Is this possible?

 

Thank you.