[ https://issues.apache.org/jira/browse/PDFBOX-2776?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17216945#comment-17216945 ]
Tilman Hausherr commented on PDFBOX-2776: ----------------------------------------- ShowSignature fails on the PDF you added, "OCSP: Status of Cert is unknown" on http://www.pki.admin.ch/aia/ocsp . The certificate being checked is "CN=Swiss Government Qualified Time Stamp Authority,OU=Time Stamp Services,O=Swiss Government PKI,L=Bern,C=CH", its issuer is "CN=Swiss Government Qualified CA 01,OU=Certification Authorities,OU=Services,O=Admin,C=CH". The CRL is also not good http://www.pki.admin.ch/crl/QualifiedCA01.crl its nextUpdate is Tue Jun 02 09:41:24 CEST 2020 > support "Long Term Validation" signature extensions (LTV) > --------------------------------------------------------- > > Key: PDFBOX-2776 > URL: https://issues.apache.org/jira/browse/PDFBOX-2776 > Project: PDFBox > Issue Type: Improvement > Components: Signing > Affects Versions: 2.0.0 > Reporter: Ralf Hauser > Priority: Major > Fix For: 3.0.0 PDFBox > > Attachments: nonSigPdf-sig1.pdf > > > in recent acrobat readers, every signature is commented w.r.t. "LTV" > ETSI TS 102 778-4 V1.1.2 (2009-12) Technical Specification > referenced as part 4 in > http://en.wikipedia.org/wiki/PAdES > It would be great if pdf signatures created with PDFBox would assist in > creatign those. > Target test setup: > 1) input of an unsigned PDF-1.5 document > 2) signature with > a) local key pair > b) hsm > c) remote signature service (e.g. via soap) > 3) add ocsp response for LTV (crls typically are larger) > ==> Result: signed pdf where acrobat reader claims it to be "LTV enabled" > see also PDFBOX-1848 > more in > http://stackoverflow.com/questions/26090558/ltv-enabled-signature-in-pdf -- This message was sent by Atlassian Jira (v8.3.4#803005) --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@pdfbox.apache.org For additional commands, e-mail: dev-h...@pdfbox.apache.org