Adobe reader downloads a CRL file when digital signing with Cacert certificate

-

it seems impossible sign pdf document cacert client certificate.

when signing or reading signed document, adobe reader downloads crl file (certificate revocation list) cacert site (http://crl.cacert.org). download has aborted because takes time.

 

how solve problem ?

the first method of authentication, ocsp, seems unsuccessful program downloads crl.

 

below log of adobe reader, shows oscp check , after crl check :

 

20161117160149z:

20161117160149z: validating cert graph 1 chains

20161117160149z: validating chain: certchain_07924a16ed09f5502cc7a8c633d4fe3_1 length = 2

   20161117160149z: ----chainbuilder----

      20161117160151z: processing certificate: dn: email=support@cacert.org, cn=ca cert signing authority, ou=http://www.cacert.org, o=root ca serial: 00

 

issued by: email=support@cacert.org, cn=ca cert signing authority, ou=http://www.cacert.org, o=root ca

      20161117160151z: verification time = 20161117143010+0100

      20161117160151z: processing certificate: dn: email=xxxxx@xxxxx.xxx, cn=cacert wot user serial: 1280f9

 

issued by: email=support@cacert.org, cn=ca cert signing authority, ou=http://www.cacert.org, o=root ca

      20161117160151z: verification time = 20161117143010+0100

   20161117160151z: finished chain validation.  troubleflags: 0

20161117160151z:

20161117160151z: checking revocation on chain: certchain_07924a16ed09f5502cc7a8c633d4fe3_1 length = 2

   20161117160151z: ----ocsprevchecker----

      20161117160151z: ocsp: processing certificate: "dn: email=xxxxx@xxxxx.xxx, cn=cacert wot user serial: 1280f9

 

issued by: email=support@cacert.org, cn=ca cert signing authority, ou=http://www.cacert.org, o=root ca" issued by: "dn: email=support@cacert.org, cn=ca cert signing authority, ou=http://www.cacert.org, o=root ca serial: 00

 

issued by: email=support@cacert.org, cn=ca cert signing authority, ou=http://www.cacert.org, o=root ca"

   20161117160151z: finished ocsp revocation checking on chain

   20161117160151z: ----crlrevchecker----

      20161117160151z: crl: processing certificate: "dn: email=xxxxx@xxxxx.xxx, cn=cacert wot user serial: 1280f9

 

issued by: email=support@cacert.org, cn=ca cert signing authority, ou=http://www.cacert.org, o=root ca" issued by: "dn: email=support@cacert.org, cn=ca cert signing authority, ou=http://www.cacert.org, o=root ca serial: 00

 

issued by: email=support@cacert.org, cn=ca cert signing authority, ou=http://www.cacert.org, o=root ca"

      20161117160151z: vrienumerator: looking matching uri in evidence: http://crl.cacert.org/revoke.crl

      20161117160151z: vrienumerator: looking matching dn in evidence

      20161117160151z: evidenceenumerator: looking matching uri in evidence: http://crl.cacert.org/revoke.crl

      20161117160151z: evidenceenumerator: looking matching dn in evidence

      20161117160151z: dssenumerator: looking matching uri in evidence: http://crl.cacert.org/revoke.crl

      20161117160151z: dssenumerator: looking matching dn in evidence

      20161117160151z: crlenumerator: looking matching uri in cache: http://crl.cacert.org/revoke.crl

      20161117160154z: crlenumerator: looking matching dn in cache.

      20161117160154z: crl: revocation status: trouble

   20161117160154z: finished crl revocation checking on chain

any update on this. need view signed pdf document not have internet download ca certs.

 

any other way manually inject certificates?



More discussions in Digital Signatures FAQ


adobe

Comments

Post a Comment

Popular posts from this blog

Reader DC

-
my adobe reader dc export subscription not ocr on large file when export word. works fine on small files, , used work wellon files of sizes.   any idea issue is? hi sherry, we sorry inconvenience caused you. can please provide following details: 1. adobe reader version using. 2. if possible, share file on trying run ocr , language of it   just mention, export pdf allows conversion of files upto 100 mb   regards, poorvi More discussions in Acrobat Reader adobe
Read more

AdobeIDの作り方

-
よろしくお願いいたします。 わたしはとある職場でadobeccの管理者をしています。 先日、職場の人に adobecc のアプリを使ってもらうことになりました。 まず最初に、わたしがこの人に成り代わり、この人のメアドでadobe idを作りました。 わたしとしては、数年前の経験から、その確認メールが本人のメアド宛に届くはずだと思っていたのですが、本人からは、adobeからの確認メールは届いていないとのこと。 不思議に思いつつ、、試しにこの人のメアドでadobeidのサイトにアクセスを試みたら、ちゃんと入ることができました。 そこで、伺いたいことがございます。   1. 今は、adobeid作成の確認メールは発信していないのでしょうか？ 2.もしかしたら、この人のadobeidは既にできあがっているのでしょうか？ アドビジャパンフォーラムをご利用いただきありがとうございます。   ご質問の回答ですが、 1につきましては通常はadobeid作成時に弊社より 「creative cloud：電子メールアドレスをご確認ください」と言うメールが送られ ご登録のメールアドレスがお客様のものか確認をさせて頂いております。 ですので、メールが届かなかったと言う事は既にadobeidが存在していた可能性もございます。 ※お客様のメールのセキュリティ等の設定によっては届いていない可能性がございます。   adobeid作成状況の詳細についての確認につきましては 弊社chatサポート迄お問い合わせをお願い致します。   アドビチャットサポート サポート総合案内 (Japan) でのその他のディスカッション adobe
Read more

Adobe InDesign CC 2017 has stopped working

-
Image
after installing indesign cc 2017 first time, when try launch application error "adobe indesign cc 2017 has stopped working" i have tried following: uninstalling , reinstalling indesign deleting files c:\users\<user>\appdata\roaming\adobe\indesign , c:\users\<user>\appdata\local\adobe\indesign i've uninstalled (i think) fonts had downloaded , installed restarted computer many times signed out of creative cloud , signed in   i able install , run on different computer i'm assuming there sort of conflict or missing component on computer.   computer details: processor intel core i7-4770k ram 16 gb os windows 10 pro ver. 1607 build: 14393.447 video card nvidia geforce gtx 970     this error windows event logs: faulting application name: indesign.exe, version: 12.0.0.81, time stamp: 0x57f545c7 faulting module name: appframework.rpln, version: 12.0.0.81, time stamp: 0x57f547eb exception code: 0xc0000005 fault offset: 0x000000000009fa88 faulting process id: 0xcac...
Read more