Hello list,

I'm using apache-FOP to generate PDF-reports from XML data. These reports contain enumerations of network information of many host. To supply a fast and orderly navigation mechanism we use bookmarks. Furthermore, we use URL's within the PDF-report that point to external recourses. So far so good...

Because the content of the reports is confidential I use the buildin 40bit RC4 PDF encryption mechanism with a user and owner password. Everything works great, except the bookmarks and URLs won't work anymore after decryption within Acrobat.

When I look in the Bug report of FOP (2004/05/30) is see one entry that might describe this problem:
"20480|Ass|Nor|2003-06-04|PDF outline texts are garbled when PDF encryption".


Does anyone know if this is the bug report for this exact problem? Or is this problem already solved in a recent snapshot release?

Because I'm highly dependent on PDF-encryption and PDF-bookmarks within the reports, I am willing to contribute, if possible, into solving this problem. I've mailed Patrick C. Lankswert
([EMAIL PROTECTED]) who implemented the encryption mechanism with the question if he can provide me with more details on how to realize this. Haven't heard anything from Patrick so far. Maybe I've used an outdated e-mail address?


Hopefully someone on the list can provide me with more details on how to get involved, what the exact problem is, or maybe a workaround for encrypting without loosing the bookmarks etc?

Thanks for your time,

Kind regards,
--
-------------------------------------------------------------------
Ing. David Vaartjes
Security Engineer

<mailto:[EMAIL PROTECTED]>

-------------------------------------------------------------------
ITsec Security Services, Postbus 5120, 2000 GC HAARLEM
Tel.+31-(0)235420578, Fax.+31-(0)235345477
http://www.itsec-ss.nl

-------------------------------------------------------------------
Exploit & vulnerability Alerting Service
http://www.evas.nl

ITsec Security Services B.V. may not be held liable for the effects or
damages caused by the direct or indirect use of the information or
functionality provided by this posting, nor the content contained within.
Use them at your own risk. ITsec Security Services B.V. bears no
responsibility for misuse of this posting or any derivatives thereof.
-------------------------------------------------------------------



--------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]



Reply via email to