[ 
https://issues.apache.org/jira/browse/PDFBOX-3888?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17071709#comment-17071709
 ] 

Andreas Lehmkühler commented on PDFBOX-3888:
--------------------------------------------

[~tilman] I've tried to reproduce the ShowSignature issue but I alwaays get the 
following exception
{code}
...
Mär 31, 2020 1:43:17 PM org.apache.pdfbox.examples.signature.cert.OcspHelper 
verifyRespStatus
SCHWERWIEGEND: The server could not authenticate you!
Exception in thread "main" 
org.apache.pdfbox.examples.signature.cert.CertificateVerificationException: 
Error verifying the certificate: [email protected], 
CN=Stephen R. Davidson, O=QuoVadis Limited, ST=Hamilton, C=BM
        at 
org.apache.pdfbox.examples.signature.cert.CertificateVerifier.verifyCertificate(CertificateVerifier.java:168)
        at 
org.apache.pdfbox.examples.signature.ShowSignature.verifyCertificateChain(ShowSignature.java:562)
        at 
org.apache.pdfbox.examples.signature.ShowSignature.verifyPKCS7(ShowSignature.java:534)
        at 
org.apache.pdfbox.examples.signature.ShowSignature.showSignature(ShowSignature.java:175)
        at 
org.apache.pdfbox.examples.signature.ShowSignature.main(ShowSignature.java:121)
Caused by: org.bouncycastle.cert.ocsp.OCSPException: OCSP response 
unsuccessful, status: UNAUTHORIZED
        at 
org.apache.pdfbox.examples.signature.cert.OcspHelper.verifyRespStatus(OcspHelper.java:529)
        at 
org.apache.pdfbox.examples.signature.cert.OcspHelper.verifyOcspResponse(OcspHelper.java:159)
        at 
org.apache.pdfbox.examples.signature.cert.OcspHelper.getResponseOcsp(OcspHelper.java:133)
        at 
org.apache.pdfbox.examples.signature.cert.CertificateVerifier.verifyOCSP(CertificateVerifier.java:420)
        at 
org.apache.pdfbox.examples.signature.cert.CertificateVerifier.checkRevocations(CertificateVerifier.java:202)
        at 
org.apache.pdfbox.examples.signature.cert.CertificateVerifier.verifyCertificate(CertificateVerifier.java:150)
        ... 4 more
{code}

I'm running ShowSignature on Linux using oracle JDK 1.8.0_202. Any idea what 
I'm doing wrong? 

> Refactor COSParser
> ------------------
>
>                 Key: PDFBOX-3888
>                 URL: https://issues.apache.org/jira/browse/PDFBOX-3888
>             Project: PDFBox
>          Issue Type: Improvement
>          Components: Parsing
>    Affects Versions: 3.0.0 PDFBox
>            Reporter: Andreas Lehmkühler
>            Assignee: Andreas Lehmkühler
>            Priority: Major
>              Labels: parsing
>             Fix For: 3.0.0 PDFBox
>
>         Attachments: QV_RCA1_RCA3_CPCPS_V4_11.pdf
>
>
> The COSParser contains a lot of stuff which is more or less hard to 
> understand/maintain. I'm going to refactor some of the code as follows
> - separate the bruteforce stuff maybe in its own class
> - separate the parsing of the xref data maybe in its own class
> - lay the foundation for the on demand parser



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to