安全验证数字签名pdf java IText

Question

我试图用我的令牌验证我用IText添加到pdf文件中的签名，但我遇到了一些错误：

java.security.InvalidKeyException: No installed provider supports this key: (null)

这是我的代码：

//verifying pdf signatures
public PdfPKCS7 verifySignature(AcroFields fields, String name) throws GeneralSecurityException, IOException {
    System.out.println("Signature covers whole document: " + fields.signatureCoversWholeDocument(name));
    System.out.println("Document revision: " + fields.getRevision(name) + " of " + fields.getTotalRevisions());
    PdfPKCS7 pkcs7 = fields.verifySignature(name);
    System.out.println("Integrity check OK? " + pkcs7.verify());
    return pkcs7;
}

public void verifySignatures(String path) throws IOException, GeneralSecurityException {
    System.out.println(path);
    PdfReader reader = new PdfReader(path);
    AcroFields fields = reader.getAcroFields();
    ArrayList<String> names = fields.getSignatureNames();
    for (String name : names) {
        System.out.println("===== " + name + " =====");
        verifySignature(fields, name);
    }
    System.out.println();
}

这是整个日志：

===== sig_2 =====
Signature covers whole document: true
Document revision: 1 of 1
Exception in thread "main" ExceptionConverter: 
java.security.InvalidKeyException: No installed provider supports this key: (null)
at java.security.Signature$Delegate.chooseProvider(Unknown Source)
at java.security.Signature$Delegate.engineInitVerify(Unknown Source)
at java.security.Signature.initVerify(Unknown Source)
at com.itextpdf.text.pdf.security.PdfPKCS7.<init>(PdfPKCS7.java:452)
at com.itextpdf.text.pdf.AcroFields.verifySignature(AcroFields.java:2317)
at com.itextpdf.text.pdf.AcroFields.verifySignature(AcroFields.java:2270)
at com.pdf.sign.Main.verifySignature(Main.java:91)
at com.pdf.sign.Main.verifySignatures(Main.java:103)
at com.pdf.sign.Main.main(Main.java:147)

Answer 1

密钥库似乎没有初始化，因此密钥为空

例如，我发现：http://grepcode.com/file/repo1.maven.org/maven2/com.itextpdf/itextpdf/5.0.6/com/itextpdf/text/pdf/AcroFields.java#AcroFields.verifySignature%28java.lang.String%2Cjava.lang.String%29

在那里，您还可以看到源代码，并找到引发异常的位置和原因

Answer 2

这是Bouncy Castle的一个问题（见https://github.com/bcgit/bc-java/issues/144）。在检查PDF签名之前，需要添加以下行

Security.addProvider(new BouncyCastleProvider());