OK now I get it. I suspect we don't, because the DSS project does this
(on top of PDFBox) and is rather big.
https://stackoverflow.com/questions/34546694/cannot-sign-a-pdf-with-cades-method-although-signing-it-with-pades-succeeds
Tilman
Am 26.11.2019 um 22:29 schrieb Predrag Stojković:
Hello,
Perhaps I didn't explain properly what is my concern in this case.
The file I've provided as an example isn't really important.
I've just wanted to point out that, for that file, which is signed by some
(presumably commercial) service, Adobe Reader in Signature Advanced Properties
shows a label saying:
PAdES Signature Level: B-T
For any of my documents, signed by PDFBox, Adobe Reader doesn't show that label.
I wanted to ask for your opinion, does PDFBox provide sufficient funtionality
needed to enable Adobe Reader to show PAdES Signature Level label in Advanced
Properties for signed documents?
I hope I now explained a little better. :-)
Best regards,
Predrag
Sent from my ZX Spectrum 48K.
-------- Original message --------
From: Tilman Hausherr <thaush...@t-online.de>
Date: 26/11/2019 21:42 (GMT+01:00)
To: users@pdfbox.apache.org
Subject: Re: After adding validation information, Adobe Reader says Signature
is not LTV enabled
Hi,
I can't create an LTV file, because this host doesn't exist:
http://cloudid.netset.rs/aia/pksROOT.crt
Tilman
Am 26.11.2019 um 12:07 schrieb Predrag Stojković:
Hello,
Thanks for all the changes related to FreeTSA, you've been extremely helpful.
It's not directly related to the earlier LTV issues, but could you please take
a look at this document:
https://drive.google.com/open?id=14Wywy7PT7AzGWKPlZNnXmVNpMM-zt18Y
The supplied document is not signed with Apache PDFBox, it's most likely signed
by some commercial library or service .
BUT, if you open the file in Adobe Reader, click on Signature Panel, right
click on signature, click on Show Signature Properties..., and then click on
Advanced Properties..., you can see that in Signature Details section there is
a label saying:
PAdES Signature Level: B-T
When I sign the document with Apache PDFBox, even though adding validation
information now works after applying all the changes to PDFBox code you made,
and Adobe Reader in Signature Panel shows label Signature is LTV enabled, this
label about PadES Signature Level is still not shown.
I appologize for putting up another tedious task, but could you investigate
somewhat on this matter?
Thank you again and best regards,
Predrag
-----Original Message-----
From: Tilman Hausherr [mailto:thaush...@t-online.de]
Sent: Sunday, November 24, 2019 11:41 AM
To: users@pdfbox.apache.org
Subject: Re: After adding validation information, Adobe Reader says Signature
is not LTV enabled
Hi,
I have been in a nice contact with the person operating freetsa, and (s)he has
now made several changes.
However it turns out that our code needed some changes too, please look at
https://issues.apache.org/jira/browse/PDFBOX-4696#
and change the three files mentioned, or you will get endless loop or
recursions.
Tilman
Am 19.11.2019 um 10:55 schrieb Predrag Stojković:
That is valuable information regarding TSA.
Thank you again for your great efforts in resolving this issue. :)
Best regards,
Predrag
-----Original Message-----
From: Tilman Hausherr [mailto:thaush...@t-online.de]
Sent: Sunday, November 17, 2019 3:11 PM
To: users@pdfbox.apache.org
Subject: Re: After adding validation information, Adobe Reader says
Signature is not LTV enabled
Am 14.11.2019 um 20:48 schrieb Tilman Hausherr:
My next step will be to sign and timestamp and validate a file with
freetsa to see if this works. (this weekend, hopefully)
So I had a look... freetsa does have a self-signed root, but it isn't returned
when signing.
https://safestamper.com/tsa does return a certificate chain and not just a
single certificate.
Tilman
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@pdfbox.apache.org
For additional commands, e-mail: users-h...@pdfbox.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@pdfbox.apache.org
For additional commands, e-mail: users-h...@pdfbox.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@pdfbox.apache.org
For additional commands, e-mail: users-h...@pdfbox.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@pdfbox.apache.org
For additional commands, e-mail: users-h...@pdfbox.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@pdfbox.apache.org
For additional commands, e-mail: users-h...@pdfbox.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@pdfbox.apache.org
For additional commands, e-mail: users-h...@pdfbox.apache.org
