OCSP response signature is invalid--ALC-DSS-111-005

[Former Community Member]

Hi All,

I am using "verify pdf signature" process for signature verification for pdf having signed signature field.

I am getting an error in status message of pdfSignatureVerificationResult as "ALC-DSS-111-005--OCSP response signature is invalid".

Kindly provide any information to resolve this issue.

Regards

Abhishek

[Former Community Member]

Abhishek

Chances are that the digital signature applied to the OCSP response itself is actually invalid.  Can you post the signed PDF for testing?

Thanks

Steve

[Former Community Member]

Hi Steve,

Thanks for your quick reply.

I am not getting a insert file option for replying to your post.

you may reply me on my mail id abhishek.bhandari@citi.com

Kindly provide your email id so that i can provide you signed pdf

Regards

Abhishek

[Former Community Member]

The OCSP protocol has an option for accepting only signed requests, where the signer of the OCSP request has to be trusted by the OCSP Responder.

LiveCycle Digital Signatures ES2 and or Acrobat can be configured to sign OCSP requests.

In LiveCycle, it is part of the Digital Signatures service configuration, see attached screen shots.  Acrobat\Reader supports it through a registry entry...  I have attached the relevant page from the Digital Signatures and Document Security administration guide.

Regards

Steve

[Former Community Member]

Many thanks Steve to resolve this issue.