[
https://issues.apache.org/jira/browse/FOP-3299?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18067800#comment-18067800
]
Joao Goncalves commented on FOP-3299:
-------------------------------------
can you share an fo file to replicate the issue?
> PDF/A-3u with Digital Signature fails pdfForge Validator
> --------------------------------------------------------
>
> Key: FOP-3299
> URL: https://issues.apache.org/jira/browse/FOP-3299
> Project: FOP
> Issue Type: Bug
> Components: renderer/pdf
> Affects Versions: 2.11
> Environment: Windows 10, Eclipse 2026-03, JDK 17
> Reporter: DaveLaw
> Priority: Major
> Fix For: main
>
>
> I tried validating a with-fop digitally signed "PDF/A-3u" using the pdfForge
> Validator.
> [https://www.pdfforge.org/online/en/validate-pdfa]
> It complained about the following:
> *ISO 19005-3:2012 §6.1.12*
> _"If DocMDP is present, then the Signature References dictionary (ISO
> 32000-1:2008, 12.8.1, Table 253) shall not contain the keys DigestLocation,
> DigestMethod, and DigestValue."_
> I made a change to org.apache.fop.pdf.PDFSignature, commenting out the
> following line:
> put("DigestMethod", new PDFName("SHA1"));
> pdfForge, thereafter, was happy with the generated PDF.
>
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
