[
https://issues.apache.org/jira/browse/PDFBOX-5003?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17221384#comment-17221384
]
Michael Klink commented on PDFBOX-5003:
---------------------------------------
If you look into the CMS container of QV_RCA1_RCA3_CPCPS_V4_11.pdf, you'll find
the Adobe Revocation Information signed attribute
{noformat}
. . . . . . SEQUENCE {
. . . . . . . OBJECT IDENTIFIER '1 2 840 113583 1 1 8'
. . . . . . . SET {
. . . . . . . . SEQUENCE {
. . . . . . . . . [0] {
. . . . . . . . . . SEQUENCE {
. . . . . . . . . . . [... CRL ...]
. . . . . . . . . . . }
. . . . . . . . . . }
. . . . . . . . . [1] {
. . . . . . . . . . SEQUENCE {
. . . . . . . . . . . [... OCSP response ...]
. . . . . . . . . . . }
. . . . . . . . . . }
. . . . . . . . . }
. . . . . . . . }
. . . . . . . }
. . . . . . }
{noformat}
Revocation information for the CA certificate are taken from the CRL:
!QV_RCA1_RCA3_CPCPS_V4_11-CA.png!
Revocation information for the signer EE certificate are taken from the OCSP
response:
!QV_RCA1_RCA3_CPCPS_V4_11-Signer.png!
> Analyze signatures where DSS / LTV is inside the signature
> ----------------------------------------------------------
>
> Key: PDFBOX-5003
> URL: https://issues.apache.org/jira/browse/PDFBOX-5003
> Project: PDFBox
> Issue Type: Improvement
> Components: Signing
> Affects Versions: 3.0.0 PDFBox
> Reporter: Ralf Hauser
> Priority: Major
> Attachments: CH_ISBsigValidatRep_368811.pdf,
> QV_RCA1_RCA3_CPCPS_V4_11-CA.png, QV_RCA1_RCA3_CPCPS_V4_11-Signer.png,
> image-2020-10-27-12-27-32-843.png
>
>
> This is an extension of PDFBOX-4297
> E.g. in CH_ISBsigValidatRep_368811.pdf they are not where 4297 exptects them .
>
> Possibly,
> [https://ec.europa.eu/cefdigital/wiki/display/CEFDIGITAL/eSignature] gives
> further insights.
> (another test case is QV_RCA1_RCA3_CPCPS_V4_11.pdf from previous versions of
> TestCreateSignature.testAddValidationInformation() - PDFBOX-2776)
>
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
