DaveLaw created FOP-3299:
----------------------------
Summary: PDF/A-3u with Digital Signature fails pdfForge Validator
Key: FOP-3299
URL: https://issues.apache.org/jira/browse/FOP-3299
Project: FOP
Issue Type: Bug
Components: renderer/pdf
Affects Versions: 2.11
Environment: Windows 10, Eclipse 2026-03, JDK 17
Reporter: DaveLaw
Fix For: main
I tried validating a with-fop digitally signed "PDF/A-3u" using the pdfForge
Validator.
[https://www.pdfforge.org/online/en/validate-pdfa]
It complained about the following:
*ISO 19005-3:2012 §6.1.12*
_"If DocMDP is present, then the Signature References dictionary (ISO
32000-1:2008, 12.8.1, Table 253) shall not contain the keys DigestLocation,
DigestMethod, and DigestValue."_
I made a change to org.apache.fop.pdf.PDFSignature, commenting out the
following line:
put("DigestMethod", new PDFName("SHA1"));
pdfForge, thereafter, was happy with the generated PDF.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)