[ 
https://issues.apache.org/jira/browse/PDFBOX-1848?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16218230#comment-16218230
 ] 

Alexis Suter commented on PDFBOX-1848:
--------------------------------------

Actualy the principle is similar. But I wanted to distinguish this case, 
because this Timestamping happens later, after a document has been signed. 
(Inside an increment of the document).
I just realised, that the Timestamp should be inside an invisible 
widget-annotation (wich is d) wich makes it more complicated to implement, 
since the actual implementation only works with PDSignature. It might need some 
changes in PDDocument / COSWriter. And possibly a new interface for 
Timestamping. 
Simmilar Problems might occur for OCSP (so called DSS - Document Security Store 
- dictionary), but this I have to check.
Strange enough the Widget includes a V field, wich refers to the TS-Dictionary 
(6 0). But Adobe has the same implementation itself.
{code:java}
4 0 obj
<<
/Type /Annot /Subtype /Widget
/Rect [ 0 0 0 0 ]
/F 4 /P 3 0 R
/FT /Sig /T (Sig)
/V 6 0 R
>>
endobj
{code}
So to sum it up: The signed timestamp will also be included after the document 
has been prepared (like the Signature) but is not inside a Signature-Block.

> Time Stamp Document Level Sigature
> ----------------------------------
>
>                 Key: PDFBOX-1848
>                 URL: https://issues.apache.org/jira/browse/PDFBOX-1848
>             Project: PDFBox
>          Issue Type: Improvement
>          Components: Signing
>    Affects Versions: 2.0.0
>            Reporter: vakhtang koroghlishvili
>             Fix For: 3.0.0
>
>         Attachments: CreateTSASignature.java.patch, 
> TSA-SIG-LOOKS-LIKE-THIS.png
>
>
> We need TSA Document Level signature modulo too!
> At the moment we sign document with our certificate. But... sometimes we need 
> to sign document with TSA too. This is important part of signing. Sometimes 
> this is very very very important- for instance when we will implement PAdES 4 
> profile this module will be essential. without that Document Secure Store 
> will not work :)
> I'm working on this improvement. I'will finish this soon. It's almost done. I 
> only must add some java docs, and might be I change architect design and etc..
> So, please assign this it to me :) I will upload patch as soon as possible :)



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to