[
https://issues.apache.org/jira/browse/PDFBOX-4784?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17119384#comment-17119384
]
Aleksandr Beliakov commented on PDFBOX-4784:
--------------------------------------------
Hello [~tilman] ,
Good catch, indeed there was a problem on a step of CMSSignedData creation, the
signing time for which has been instantiated on every call. Therefore, if you
was not lucky to execute the test during one second, the test failed.
I added a fix for that:
[https://github.com/apache/pdfbox/pull/85/commits/0a88aded0b33c06c41d8fb52d2782f3b64548f47]
in order to skip this step, because the CMSSignedData is not really needed for
the test (the main PDF document content integrity is important). Also I've
added a fix for JavaDoc.
I hope this helps.
Regards,
Aleksandr.
> Possibility to provide the SecureRandom to SecurityHandler
> ----------------------------------------------------------
>
> Key: PDFBOX-4784
> URL: https://issues.apache.org/jira/browse/PDFBOX-4784
> Project: PDFBox
> Issue Type: Improvement
> Components: Crypto
> Affects Versions: 2.0.19
> Reporter: Pierrick Vandenbroucke
> Assignee: Andreas Lehmkühler
> Priority: Major
> Fix For: 2.0.20, 3.0.0 PDFBox
>
>
> In DSS, we build electronic signatures with two stateless operations
> (computation of the data to be signed and incorporation of the signature
> value). Currently, the signature creation fails with encrypted documents
> (AES) due to the Initialization Vector generations which produce different
> values at each call.
> We would need a way to "stabilize" this part. We discussed about that on our
> [issue tracker|https://ec.europa.eu/cefdigital/tracker/browse/DSS-1962] and
> the idea would be to provide a custom instance of the SecureRandom to the
> [SecurityHandler|https://github.com/apache/pdfbox/blob/2.0.19/pdfbox/src/main/java/org/apache/pdfbox/pdmodel/encryption/SecurityHandler.java#L381].
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
