[
https://issues.apache.org/jira/browse/PDFBOX-2776?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Petras updated PDFBOX-2776:
---------------------------
Comment: was deleted
(was: To my opinion this feature with all its abilities in original post
currently could be considered as "nice-to-have". As PDFBox COSModel provides
everything to deal with PDF internals, invoking external services and dealing
with all peculiarities of PKI infrastructure, to my opinion, is out of scope
for PDFBox. Obtaining validation data requires validation of this data itself.
Depending on the context, data acceptance policy may considerably differ. To my
opinion PDFBox can only enhance PDModel API with ability to set and get LTV
related data. We implemented LTV related features in our tool and probably I
could contribute something here by providing suggested approach for PDModel
API.)
> support "Long Term Validation" signature extensions (LTV)
> ---------------------------------------------------------
>
> Key: PDFBOX-2776
> URL: https://issues.apache.org/jira/browse/PDFBOX-2776
> Project: PDFBox
> Issue Type: Improvement
> Components: Signing
> Affects Versions: 2.0.0
> Reporter: Ralf Hauser
> Fix For: 2.1.0
>
>
> in recent acrobat readers, every signature is commented w.r.t. "LTV"
> ETSI TS 102 778-4 V1.1.2 (2009-12) Technical Specification
> referenced as part 4 in
> http://en.wikipedia.org/wiki/PAdES
> It would be great if pdf signatures created with PDFBox would assist in
> creatign those.
> Target test setup:
> 1) input of an unsigned PDF-1.5 document
> 2) signature with
> a) local key pair
> b) hsm
> c) remote signature service (e.g. via soap)
> 3) add ocsp response for LTV (crls typically are larger)
> ==> Result: signed pdf where acrobat reader claims it to be "LTV enabled"
> see also PDFBOX-1848
> more in
> http://stackoverflow.com/questions/26090558/ltv-enabled-signature-in-pdf
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
