Pierrick Vandenbroucke created PDFBOX-3767:
----------------------------------------------
Summary: Signature content : byterange vs dictionnary
Key: PDFBOX-3767
URL: https://issues.apache.org/jira/browse/PDFBOX-3767
Project: PDFBox
Issue Type: Improvement
Reporter: Pierrick Vandenbroucke
Hello,
An user reported us [an issue|https://esig-dss.atlassian.net/browse/DSS-917] in
the validation of pdf signatures.
The source of the problem was the signature content retrieving. PDFBox (Adobe
Reader has the same problem) retrieves the signature content with the byterange
(PDSignature.getContent(byte[] pdfFile)).
On the DSS side, I will replace the behavior like this
{code:java}
COSDictionary dict = pdSignature.getCOSObject();
COSString item = (COSString) dict.getItem(COSName.CONTENTS);
byte[] cms = item.getBytes();
{code}
I'd like to know your opinion on this point. Shouldn't you fix/improve in
PDFBox too ? The byterange can easily be altered and signature(s) can be
hidden,...
Thanks in advance for your feedback.
--
This message was sent by Atlassian JIRA
(v6.3.15#6346)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
