使用MSCAPI和ITEXT从USB令牌签名PDF

Question

can anyone give me a simle example of pdf signing from usb token using MSCAPI and ITEXT. I do not want to use a fixed ocsp string.

I tried to follow this Digital Signature book but it did not work. My code was:

        LoggerFactory.getInstance().setLogger(new SysoLogger());
        BouncyCastleProvider providerBC = new BouncyCastleProvider();
        Security.addProvider(providerBC);
        SunMSCAPI provdierMSCAP = new SunMSCAPI();
        Security.addProvider(provdierMSCAP);
        KeyStore ks = KeyStore.getInstance("Windows-MY");
        ks.load(null, null);

        String alias = (String)ks.aliases().nextElement();
        PrivateKey pk = (PrivateKey)ks.getKey(alias, null);
        Certificate[] chain = ks.getCertificateChain(alias);


        PdfReader pdfreader = new PdfReader("HelloWorld.pdf");
        FileOutputStream outputFile = new FileOutputStream("Signed.pdf");
        PdfStamper pdfstamper;

        pdfstamper =  PdfStamper.createSignature(pdfreader, outputFile, '\0', null, true);

        PdfSignatureAppearance sap = pdfstamper.getSignatureAppearance();
        sap.setCrypto(pk, chain, null, PdfSignatureAppearance.SELF_SIGNED);
        sap.setReason("Test");
        sap.setLocation("Dhaka");

        sap.setVisibleSignature(new Rectangle(10, 10, 50, 30), 1, "Test");
        pdfstamper.close();

        JOptionPane.showMessageDialog(null, "Successfully Signed");

And it is giving me following error:

        java.lang.NullPointerException

I tried use itext 5.2.1/itextpdf-5.3.5 and bcmail-jdk16-1.46, bcprov-jdk16-1.46.jar, bctsp-jdk16-1.46.jar.

Can anyone help ? please ................

Answer 1

您正在将null值传递给load（），请尝试执行此操作

ks.load(new FileInputStream("certificate_path"), keystore_password.toCharArray());

Answer 2

remove sap.setCrypto line. you don't need it.

Answer 3

In the latest version, the setCrypo is replaced by the following lines:

ExternalDigest digest = new BouncyCastleDigest();
BouncyCastleProvider provider = new BouncyCastleProvider();
ExternalSignature signature = new PrivateKeySignature(key, DigestAlgorithms.SHA256, provider.getName());
MakeSignature.signDetached(sap, digest, signature, chain,   null, null, null, 0, CryptoStandard.CMS);

You have to put bcprov-jdk15on-1.60.jar and bcpkix-jdk15on-1.60.jar in your classpath.