(In reply to comment #26) > What's missing in gnutls is a way to parse all the relevant components of the > PKCS#7 object as present in a PDF signature. > > It seems that in gnutls they assume those objects can only contain > certificates > and CRLs as you can confirm if you go through the functions that take > gnutls_pkcs7_t as argument. > > With openssl you can get the certificates, signature, and the digest of the > signed content (these are the essential parts for detached signatures as used > in PDF) as well as any optional timestamps or CRLs.
Would it be a lot of work to add support for that to gnutls? -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to poppler in Ubuntu. https://bugs.launchpad.net/bugs/740506 Title: verify digital signatures Status in Poppler: Confirmed Status in “poppler” package in Ubuntu: Triaged Bug description: Binary package hint: evince This is a feature request to verify digital signatures. I'm receiving more and more digitally signed PDF's and evince already acknowledges them with: Signature Not Verified Digitally signed by <signer> Date: <time stamp> Reason: <reason> Location: <location> but it would be great if Evince would be integrated into the distro's ca-certificate infrastructure to verify these signatures. To manage notifications about this bug go to: https://bugs.launchpad.net/poppler/+bug/740506/+subscriptions -- Mailing list: https://launchpad.net/~desktop-packages Post to : [email protected] Unsubscribe : https://launchpad.net/~desktop-packages More help : https://help.launchpad.net/ListHelp
