在哪里获得PDF数字签名证书？ [英] Where to get Certificate for digitally signing PDFs?

问题描述

我正在开发一个Java应用程序，它使用iText对可在线提供的PDF进行数字签名。我已经能够使用从GlobalSign获得的测试证书签署这些文件并且效果很好。测试证书是GlobalSign的DocumentSign for Adob​​e PDF的一部分。我必须使用此证书的原因是我的证书链回到Adobe Root CA，据我所知（我可能是错的）是Adobe Reader开箱即用的唯一CA。我尝试了VeriSign和Entrust的常规SSL证书，但是由于它们不受信任而无法正常工作。

I'm working on a Java application that uses iText to digitally sign PDFs that will be made available online. I have been able to sign the documents with a test cert I obtained from GlobalSign and it works great. The test cert is part of GlobalSign's "DocumentSign for Adobe PDF". The reason I had to use this cert is so that my cert chains back to the Adobe Root CA, which to my knowledge (and I could be wrong) is the only CA that is trusted by Adobe Reader out of the box. I tried regular SSL certs from VeriSign and Entrust but they didn't work as they were not trusted.

现在我需要获得永久证书但GlobalSign（以及VeriSign和其他人）希望向我推销一项服务，该服务需要额外的硬件才能实现我不想要的双因素身份验证。似乎没有办法获得证书。我的问题是，还有其他人经历过这个吗？是否有其他方法可以获得Adobe Reader将信任的证书（除了让最终用户手动将证书输入可信证书列表中）？我错过了什么吗？

Now I need to get a permanent cert but GlobalSign (as well as VeriSign and others) want to sell me a service that requires extra hardware for the 2 factor authentication which I do not want. There doesn't seem to be a way to get the cert only. My question is, has anyone else gone through this? Is there another way to get a cert that Adobe Reader will trust (other than having the end user manually enter the cert into the list of trusted certs)? Have I missed something?

感谢您提供的任何帮助。

Thanks for any help you can provide.

推荐答案

有三种方法可以解决这个问题。这些都不是理想的。

There are three ways you can approach this. None of which are ideal.

1. Adob​​e CDS ：这适用于Acrobat 6+，但据我所知，需要两个因素身份验证和大量许可费用。


2. AATL ：他们不再链接回Adobe的根CA，而是信任某个提供商列表。据我所知，他们仍然需要硬件设备。此外，这仅适用于Acrobat 9 +


3. Windows证书：Acrobat包含与Windows证书存储区集成的首选项。这意味着Adobe将信任Windows商店中受信任的任何根CA.他们真的应该默认启用它。

1. Adobe CDS: This works in Acrobat 6+ but as far as I can tell requires two factor authentication and heavy licensing costs.
2. AATL: Instead of linking back to Adobe's root CA they trust a certain list of providers. As far as I can tell they still require a hardware device. Also, this only works in Acrobat 9+
3. Windows Certificate: Acrobat includes a preference to integrate with the windows certificate store. This means that any root CA trusted in your windows store will be trusted by Adobe. They really should have just enabled this by default.

这篇关于在哪里获得PDF数字签名证书？的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！