验证数字签名PDF的iText的java

Question

我是想验证我加入到与iText的PDF文件与我的令牌签名，但我得到了一些错误：

java.security.InvalidKeyException: No installed provider supports this key: (null)

这是我的代码：

//verifying pdf signatures
public PdfPKCS7 verifySignature(AcroFields fields, String name) throws GeneralSecurityException, IOException {
    System.out.println("Signature covers whole document: " + fields.signatureCoversWholeDocument(name));
    System.out.println("Document revision: " + fields.getRevision(name) + " of " + fields.getTotalRevisions());
    PdfPKCS7 pkcs7 = fields.verifySignature(name);
    System.out.println("Integrity check OK? " + pkcs7.verify());
    return pkcs7;
}

public void verifySignatures(String path) throws IOException, GeneralSecurityException {
    System.out.println(path);
    PdfReader reader = new PdfReader(path);
    AcroFields fields = reader.getAcroFields();
    ArrayList<String> names = fields.getSignatureNames();
    for (String name : names) {
        System.out.println("===== " + name + " =====");
        verifySignature(fields, name);
    }
    System.out.println();
}

这是整个日志：

===== sig_2 =====
Signature covers whole document: true
Document revision: 1 of 1
Exception in thread "main" ExceptionConverter: 
java.security.InvalidKeyException: No installed provider supports this key: (null)
at java.security.Signature$Delegate.chooseProvider(Unknown Source)
at java.security.Signature$Delegate.engineInitVerify(Unknown Source)
at java.security.Signature.initVerify(Unknown Source)
at com.itextpdf.text.pdf.security.PdfPKCS7.<init>(PdfPKCS7.java:452)
at com.itextpdf.text.pdf.AcroFields.verifySignature(AcroFields.java:2317)
at com.itextpdf.text.pdf.AcroFields.verifySignature(AcroFields.java:2270)
at com.pdf.sign.Main.verifySignature(Main.java:91)
at com.pdf.sign.Main.verifySignatures(Main.java:103)
at com.pdf.sign.Main.main(Main.java:147)

Answer 1

你的密钥库似乎并没有得到初始化，所以你的密钥为空。

对于使用的例子，我发现这一点：http://grepcode.com/file/repo1.maven.org/maven2/com.itextpdf/itextpdf/5.0.6/com/itextpdf/text/pdf/AcroFields.java#AcroFields.verifySignature%28java.lang.String%2Cjava.lang.String%29

在那里，你还可以看到源代码，并找到在哪里，为什么会抛出异常。

Answer 2

它与充气城堡（见https://github.com/bcgit/bc-java/issues/144）的问题。您需要检查PDF签名之前添加以下行

Security.addProvider(new BouncyCastleProvider());