Digitally sign submitted data

Hi,

I am just wondering is it possible to digitally sign submitted data on the client side using Orbeon forms. And if yes did anybody is there any how to? What we are looking is alternative to Adobe Forms and infopath and digital signature is crucial to us.

Best regards
Medo

Medo,

At this point, it is not. But you might find the page linked below
interesting; we have a number of idea on how to implement digital /
electronic signature, and just didn't get a chance to get to it yet.

http://wiki.orbeon.com/forms/projects/electronic-digital-signature

Alex

On Tue, Oct 26, 2010 at 8:31 AM, medo_Klc <[hidden email]> wrote:

--
Orbeon Forms - Web forms, open-source, for the Enterprise -
http://www.orbeon.com/
My Twitter: http://twitter.com/avernet


--
You receive this message as a subscriber of the [hidden email] mailing list.
To unsubscribe: mailto:[hidden email]
For general help: mailto:[hidden email]?subject=help
OW2 mailing lists service home page: http://www.ow2.org/wws

Alex,

Thank you for your prompt reply.
Following is our situation. Following is our situation.
Client is currently using Adobe Forms, and want us to implement alternative. He wants us to develop few templates and then he would like to create his own forms as he wish based on those templates. As it is major financial institution in Croatia digital signature is crucial for their business.

We are using Infopath and Altova to develop forms. Infopath has its own limitations and client wants to get something different, and Altova is not that user friendly as Orbeon.

So I am wondering is it possible to develop something like form template, embed digital signature into it (OpenSign applet does the work) and then customize the same.

And do you know anybody or have any case with implementation of Digital signature.

Best regards
Medo

Medo,

The first question is whether your client needs cryptographic
signatures (digital signature / PKI) versus just electronic
signatures. If they do need PKI and if your client wants to move away
from PDF, your options are the one on line 1 and 3 of the table in the
page I was linking to. If you are indeed going to use PKI, do you know
already where users' private keys going to be stored?

Alex

On Wed, Oct 27, 2010 at 1:11 AM, medo_Klc <[hidden email]> wrote:

--
Orbeon Forms - Web forms, open-source, for the Enterprise -
http://www.orbeon.com/
My Twitter: http://twitter.com/avernet


--
You receive this message as a subscriber of the [hidden email] mailing list.
To unsubscribe: mailto:[hidden email]
For general help: mailto:[hidden email]?subject=help
OW2 mailing lists service home page: http://www.ow2.org/wws

thanks for your reply.

Yesterday we had meeting where they clarify more points regarding digital signatures put up some other requests.
Regarding the digital signature, they want to use advance digital signature and has to be signed manually using devices like USB key or smart card and not through application (that answers your question where key will be stored.
Secondly and second most important is that they want form to be edited offline. For example download form the internet or get it by mail and then fill it up offline and then fill up the same using free client something like adobe reader and then submit it. Can that be done ?!? For example generate form in ODT format and then fill it up offline, digitally sign, and then submit it or send it as attachment to server which will then process submitted form.

I hope that I am not questions that are out of the topic.

BTW, I have been playing with Orbeon Forms, and all I can say - well done, congratulations.

Best Regards
Medo

Hi all,

I am building my xform integrated with jsp. When I submit the form I wish to redirect the browser to another jsp page. Also I want to process the data submitted from the initial xform on this new jsp page.

How can this be done? Kindly help.

Thanks and Regards,
Somya

**************** CAUTION - Disclaimer *****************
This e-mail contains PRIVILEGED AND CONFIDENTIAL INFORMATION intended solely
for the use of the addressee(s). If you are not the intended recipient, please
notify the sender by e-mail and delete the original message. Further, you are not
to copy, disclose, or distribute this e-mail or its contents to any other person and
any such actions are unlawful. This e-mail may contain viruses. Infosys has taken
every reasonable precaution to minimize this risk, but is not liable for any damage
you may sustain as a result of any virus in this e-mail. You should carry out your
own virus checks before opening the e-mail or attachment. Infosys reserves the
right to monitor and review the content of all messages sent to or from this e-mail
address. Messages sent to or from this e-mail address may be stored on the
Infosys e-mail system.
***INFOSYS******** End of Disclaimer ********INFOSYS***


--
You receive this message as a subscriber of the [hidden email] mailing list.
To unsubscribe: mailto:[hidden email]
For general help: mailto:[hidden email]?subject=help
OW2 mailing lists service home page: http://www.ow2.org/wws

On 18.11.2010 12:27, Somya Rajesh Agarwal wrote:
> Hi all,
>
> I am building my xform integrated with jsp. When I submit the form I wish to redirect the browser to another jsp page. Also I want to process the data submitted from the initial xform on this new jsp page.
>
> How can this be done? Kindly help.

You should use <xforms:submission> with replace="all" attribute. Like this:

<xforms:submission action="another.jsp" method="post" replace="all"/>

(actually, replace="all" is default, so you can omit it)

To process the data you should read the XML from input and parse it with
XML parser. You can get the input data with:

servletRequest.getInputStream();

Regards,
Tambet


--
You receive this message as a subscriber of the [hidden email] mailing list.
To unsubscribe: mailto:[hidden email]
For general help: mailto:[hidden email]?subject=help
OW2 mailing lists service home page: http://www.ow2.org/wws

Hi,
I manage to implement a simple Digital PKI signature sample for Orbeon Forms using CryptoApplet.

http://projectestic.uji.es/pr/cryptoapplet/

I would recommend CryptoApplet rather than OpenSign.
OpenSign project is not being actively maintain anymore.

After I clean up my code, I will share the sample and procedures with the List.
Hope to do this by next week.

Hoi Chong

Hi,
I manage to implement a simple Digital PKI signature sample for Orbeon Forms using CryptoApplet.

http://projectestic.uji.es/pr/cryptoapplet/

I would recommend CryptoApplet rather than OpenSign.
OpenSign project is not being actively maintain anymore.

After I clean up my code, I will share the sample and procedures with the List.
Hope to do this by next week.

Hoi Chong

---

If you reply to this email, your message will be added to the discussion below:

http://orbeon-forms-ops-users.24843.n4.nabble.com/Digitally-sign-submitted-data-tp3013795p3245017.html

To unsubscribe from Digitally sign submitted data, click here.

Hi Hoi,

This is indeed very interesting. I have done some experiments with
OpenSign, but never used CryptoApplet, which looks promising. How did
CryptoApplet work for you? What does your use case look like? (What
type of users are going to digitally sign data, and how did they get a
private key installed on their system?) And of course, it would be
great if you could share sample code with us.

Alex

On Fri, Jan 28, 2011 at 9:30 AM, Hoi Chong <[hidden email]> wrote:

--
Orbeon Forms - Web forms, open-source, for the Enterprise -
http://www.orbeon.com/
My Twitter: http://twitter.com/avernet


--
You receive this message as a subscriber of the [hidden email] mailing list.
To unsubscribe: mailto:[hidden email]
For general help: mailto:[hidden email]?subject=help
OW2 mailing lists service home page: http://www.ow2.org/wws