svn commit: r1936552 - pdfbox/trunk/examples/src/test/java/org/apache/pdfbox/examples/pdmodel

[tilman]

Author: tilman
Date: Fri Jul 24 14:58:51 2026
New Revision: 1936552

Log:
PDFBOX-6212: add comment based on comment by user robo

Modified:
   
pdfbox/trunk/examples/src/test/java/org/apache/pdfbox/examples/pdmodel/TestCreateSignature.java

Modified: 
pdfbox/trunk/examples/src/test/java/org/apache/pdfbox/examples/pdmodel/TestCreateSignature.java
==============================================================================
--- 
pdfbox/trunk/examples/src/test/java/org/apache/pdfbox/examples/pdmodel/TestCreateSignature.java
     Fri Jul 24 12:45:05 2026        (r1936551)
+++ 
pdfbox/trunk/examples/src/test/java/org/apache/pdfbox/examples/pdmodel/TestCreateSignature.java
     Fri Jul 24 14:58:51 2026        (r1936552)
@@ -1096,6 +1096,9 @@ class TestCreateSignature
             {
                 BasicOCSPResp basicResponse = (BasicOCSPResp) 
ocspResp.getResponseObject();
                 assertEquals(OCSPResponseStatus.SUCCESSFUL, 
ocspResp.getStatus());
+                // A failure here may also be caused by a TSA whose 
BasicOCSPResponse does not include
+                // embedded responder certificates, e.g. DigiCert's TSA 
(http://timestamp.digicert.com).
+                // This is optional, see 
https://datatracker.ietf.org/doc/html/rfc6960 and search for BasicOCSPResponse.
                 assertTrue(basicResponse.getCerts().length >= 1, "OCSP should 
have at least 1 certificate");
                 BEROctetString encodedSignature = new 
BEROctetString(basicResponse.getSignature());
                 byte[] ocspSignatureHash = 
MessageDigest.getInstance("SHA-1").digest(encodedSignature.getEncoded());