Tilman Hausherr created PDFBOX-4381:
---------------------------------------
Summary: Revocation CRL check should be done at signing time in
AddValidation example
Key: PDFBOX-4381
URL: https://issues.apache.org/jira/browse/PDFBOX-4381
Project: PDFBox
Issue Type: Bug
Components: Signing
Affects Versions: 2.0.12
Reporter: Tilman Hausherr
Assignee: Tilman Hausherr
Fix For: 2.0.13, 3.0.0 PDFBox
{{crl.isRevoked(cert)}} in CRLHelper.java is not correct, a certificate could
have been valid at signing time and be invalidated later, e.g. when an employee
signs, but loses his card at the after-signing-party. The correct way to do it
is in {{CRLVerifier.verifyCertificateCRLs()}}.
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
