I have used PDFBOX-app 4.0.0 debug and this clarify the structure...

Here is attached the capture of the tree for internal data for the document 
before signing with DSS as PADES

the signature in "Perms/UR3/Contents" is PKCS7 signed data, signed by this 
certificate
CN=ARE Acrobat Product v8.0 P23 0002337
OU=Adobe Trust Services
O=Adobe Systems Incorporated
C=US

Maybe you will understand the purpose of that Perms/UR3 signature ?
It seems to be an Adobe functionality.

I cannot debug the result since the Pades signature fails and returns nothing.

However, I have signed with the older DSS, using PDFBOX2.x, which works well
and here is the capture of the tree of the resigned in PADES document

the problem seems to be that the ByteRange are slightly different, and the 
difference lead to a difference in the number of digits, thus the length of the 
field.

What I don't understand is why when I try to force the maximum length for 
ByteRange field for the Acroform/Field/0/V, it breaks the Perms/UR3 signing.
But I don't understand what is the incremental saving... PDF is very subtle.


Alain

Interne
-----Message d'origine-----
De : Tilman Hausherr <thaush...@t-online.de>
Envoyé : mardi 16 septembre 2025 16:41
À : users@pdfbox.apache.org
Objet : Re: Error "Can't write new byteRange … not enough space…" signing with 
PADES a document having user's rights protected by Perms/UR3

[EMETTEUR EXTERNE] : Soyez vigilant avant d’ouvrir les pièces-jointes ou de 
cliquer sur les liens. En cas de doute, signalez le message via le bouton « 
Signaler un courriel suspect ».

Am 16.09.2025 um 15:19 schrieb Coetmeur, Alain:
> By the way, do you know a tool that can parse a PDF and helps to navigate in 
> the dictionaries, to guess what happened.

PDFBox PDFDebugger, although it shows only the final state if there have been 
incremental savings.

You can also try itext RUPS, which I haven't used myself but it is used in this 
video  https://www.youtube.com/watch?v=g-QcU9B4qMc which inspired improvements 
in PDFDebugger 10 years ago
https://issues.apache.org/jira/browse/PDFBOX-2530

Tilman


---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@pdfbox.apache.org
For additional commands, e-mail: users-h...@pdfbox.apache.org

Ce message et toutes les pièces jointes (ci-après le «message») sont 
confidentiels et établis à l’intention exclusive de ses destinataires. Toute 
utilisation de ce message non conforme à sa destination, toute diffusion ou 
toute publication, totale ou partielle, est interdite, sauf autorisation 
expresse. Si vous recevez ce message par erreur, merci de le détruire sans en 
conserver de copie et d’en avertir immédiatement l’expéditeur. Internet ne 
permettant pas de garantir l’intégrité de ce message, la Caisse des Dépôts et 
Consignations décline toute responsabilité au titre de ce message s’il a été 
modifié, altéré, déformé ou falsifié. Par ailleurs et malgré toutes les 
précautions prises pour éviter la présence de virus dans nos envois, nous vous 
recommandons de prendre, de votre côté, les mesures permettant d'assurer la 
non-introduction de virus dans votre système informatique. This email message 
and any attachments (“the email”) are confidential and intended only for the 
recipient(s) indicated. If you are not an intended recipient, please be advised 
that any use, dissemination, forwarding or copying of this email whatsoever is 
prohibited without prior written consent of Caisse des Depots et Consignations. 
If you have received this email in error, please delete it without saving a 
copy and notify the sender immediately. Internet emails are not necessarily 
secure, and Caisse des Depots et Consignations declines responsibility for any 
changes that may have been made to this email after it was sent. While we take 
all reasonable precautions to ensure that viruses are not transmitted via 
emails, we recommend that you take your own measures to prevent viruses from 
entering your computer system.

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@pdfbox.apache.org
For additional commands, e-mail: users-h...@pdfbox.apache.org

Reply via email to