[okular] [Bug 461371] PDFs digitally signed with Okular become locked in Adobe Acrobat so no one else can sign it
https://bugs.kde.org/show_bug.cgi?id=461371 Nate Graham changed: What|Removed |Added Resolution|FIXED |UPSTREAM Version Fixed In||Poppler 23.05.0 Latest Commit||https://gitlab.freedesktop. ||org/poppler/poppler/-/commi ||t/c5bc25a0094b3fd10e8eea529 ||6a006a4f530a771 -- You are receiving this mail because: You are watching all bug changes.
[okular] [Bug 461371] PDFs digitally signed with Okular become locked in Adobe Acrobat so no one else can sign it
https://bugs.kde.org/show_bug.cgi?id=461371 Albert Astals Cid changed: What|Removed |Added Status|CONFIRMED |RESOLVED Resolution|--- |FIXED CC||aa...@kde.org -- You are receiving this mail because: You are watching all bug changes.
[okular] [Bug 461371] PDFs digitally signed with Okular become locked in Adobe Acrobat so no one else can sign it
https://bugs.kde.org/show_bug.cgi?id=461371 --- Comment #5 from Oliver Sander --- I asked the colleague I mentioned above to test this, and it seems that the issue is indeed fixed for us as well. Thank you! -- You are receiving this mail because: You are watching all bug changes.
[okular] [Bug 461371] PDFs digitally signed with Okular become locked in Adobe Acrobat so no one else can sign it
https://bugs.kde.org/show_bug.cgi?id=461371 --- Comment #4 from Nicolas Fella --- https://gitlab.freedesktop.org/poppler/poppler/-/merge_requests/1372 fixes the issue for me -- You are receiving this mail because: You are watching all bug changes.
[okular] [Bug 461371] PDFs digitally signed with Okular become locked in Adobe Acrobat so no one else can sign it
https://bugs.kde.org/show_bug.cgi?id=461371 --- Comment #3 from Nicolas Fella --- It looks like this does not explain the problem. Signing https://invent.kde.org/graphics/okular/-/blob/master/autotests/data/hello_with_dummy_signature.pdf with Acrobat doesn't add a DocMDP entry either. The relevant part of the document signed by Okular: %% Original object ID: 32 0 29 0 obj << /ByteRange [ 0 490918 499126 378 ] /Contents /Filter /Adobe.PPKLite /M (D:20230428140625+02'00') /Name (Nicolas Fella) /SubFilter /adbe.pkcs7.detached /Type /Sig >> endobj And by Acrobat: %% Original object ID: 18 0 23 0 obj << /ByteRange [ 0 3871 8413 9388 ] /Contents /Filter /Adobe.PPKLite /M (D:20230428140204+02'00') /Name (Nicolas Fella) /Prop_Build << /App << /Name /Adobe#20Acrobat#20Reader#20#2864-bit#29 /OS [ /Win ] /R 1507584 /REx (2023.001.20143) /TrustedMode true >> /Filter << /Date (Apr 4 2023 18:35:16) /Name /Adobe.PPKLite /R 131104 /V 2 >> /PubSec << /Date (Apr 4 2023 18:35:16) /R 131105 >> >> /SubFilter /adbe.pkcs7.detached /Type /Sig >> endobj The difference is the /Prop_Build entry, but not sure this explains the issue -- You are receiving this mail because: You are watching all bug changes.
[okular] [Bug 461371] PDFs digitally signed with Okular become locked in Adobe Acrobat so no one else can sign it
https://bugs.kde.org/show_bug.cgi?id=461371 Nicolas Fella changed: What|Removed |Added CC||nicolas.fe...@gmx.de --- Comment #2 from Nicolas Fella --- PDF allows for some fine-grained control about what you can do with a signed document and what not Looking at https://www.verypdf.com/document/pdf-format-reference/pg_0733.htm I see this: The access permissions granted for this document. Valid values are: 1 No changes to the document are permitted; any change to the document invalidates the signature 2 Permitted changes are filling in forms, instantiating page templates, and signing; other changes invalidate the signature. 3 Permitted changes are the same as for 2, as well as annotation creation, deletion, and modification; other changes invalidate the signature Default value: 2 Okular/Poppler doesn't set this, so the default (2) applies. That should explain why you cannot add a new signature (which is technically similar to adding an annotation). You should be able to do the things described in 2, like filling in forms. Note that this is my understanding based on reading the linked site and the poppler source, I haven't reproduced the issue to confirm yet -- You are receiving this mail because: You are watching all bug changes.
[okular] [Bug 461371] PDFs digitally signed with Okular become locked in Adobe Acrobat so no one else can sign it
https://bugs.kde.org/show_bug.cgi?id=461371 Nate Graham changed: What|Removed |Added CC||n...@kde.org -- You are receiving this mail because: You are watching all bug changes.
[okular] [Bug 461371] PDFs digitally signed with Okular become locked in Adobe Acrobat so no one else can sign it
https://bugs.kde.org/show_bug.cgi?id=461371 Oliver Sander changed: What|Removed |Added CC||oliver.san...@tu-dresden.de Status|REPORTED|CONFIRMED Ever confirmed|0 |1 --- Comment #1 from Oliver Sander --- A colleague of mine just confirmed this. -- You are receiving this mail because: You are watching all bug changes.
