robo created PDFBOX-6215:
----------------------------
Summary: LTV DSS generation creates duplicate certificate streams
Key: PDFBOX-6215
URL: https://issues.apache.org/jira/browse/PDFBOX-6215
Project: PDFBox
Issue Type: Improvement
Affects Versions: 4.0.0
Reporter: robo
Attachments: timestamped_LTV.pdf
If I run `TestCreateSignature::testCreateSignedTimeStamp` with e.g.
`http://timestamp.digicert.com` as TSA, then `AddValidationInformation` adds
the incremental update containing the `DSS` dictionary. This works, however, it
looks like the same certificates are written more than once to the PDF.
I extracted the streams like this:
{code:java}
qpdf "timestamped_LTV.pdf" --show-object=[obj] --filtered-stream-data >
"obj-[obj].bin"{code}
and compared them with
{code:java}
sha256sum *.bin | sort{code}
resutling in:
{code:java}
33846b545a49c9be4903c60e01713c1bd4e4ef31ea65cd95d69e62794f30b941 obj-43.bin
33846b545a49c9be4903c60e01713c1bd4e4ef31ea65cd95d69e62794f30b941 obj-49.bin
3e9099b5015e8f486c00bcea9d111ee721faba355a89bcf1df69561e3dc6325c obj-44.bin
3e9099b5015e8f486c00bcea9d111ee721faba355a89bcf1df69561e3dc6325c obj-50.bin
3e9099b5015e8f486c00bcea9d111ee721faba355a89bcf1df69561e3dc6325c obj-52.bin
b0765f42a321cf66788b939d350bd958d8bd0361bfb1099528ae0732bf66fae6 obj-45.bin
b0765f42a321cf66788b939d350bd958d8bd0361bfb1099528ae0732bf66fae6 obj-46.bin
ca0b1554ecd901ea19dcad8749e9f2648c8d6dfcea1add9d2c2109415bb82ccd obj-42.bin
ca0b1554ecd901ea19dcad8749e9f2648c8d6dfcea1add9d2c2109415bb82ccd
obj-48.bin{code}
Pointing to already existing objects with the same content should still be be
standard-compliant (I don't see why not, please let me know if this is not
correct). Like this, the output could be kept slightly smaller and cleaner.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
