[ 
https://issues.apache.org/jira/browse/PDFBOX-5076?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17262602#comment-17262602
 ] 

Michael Klink edited comment on PDFBOX-5076 at 1/11/21, 11:49 AM:
------------------------------------------------------------------

With that change the example looks more prepared for PAdES signing; some 
changes still are required, e.g. adding an ESS signing-certificate[-v2] 
attribute and changing the subfilter, but that's pretty much straight forward.

By the way, looking at your PDF I see that you do include a signature time 
stamp. In that case even the *M* entry is not necessary. But it's not 
forbidden, either; in case of a lazy time stamp server a claimed signing time 
in the *M* entry might be of interest.

 


was (Author: mkl):
With that change the example looks more prepared for PAdES signing; some 
changes still are required, e.g. adding an ESS signing-certificate[-v2] 
attribute and changing the subfilter, but that's pretty much straight forward.

By the way, looking at your PDF I see that you do include a signature time 
stamp. In that case even the *M* entry is not necessary...

> make the signing time from CMS signed attributes
> ------------------------------------------------
>
>                 Key: PDFBOX-5076
>                 URL: https://issues.apache.org/jira/browse/PDFBOX-5076
>             Project: PDFBox
>          Issue Type: Improvement
>          Components: Signing
>    Affects Versions: 2.0.23
>            Reporter: Ralf Hauser
>            Priority: Major
>         Attachments: minimum_20210111_065849-sig.pdf, 
> minimum_20210111_115524-PDFBOX-5076_noCMSsigTimesig.pdf, 
> patch-PDFBOX-5076.txt, patch-PDFBOX-5076_noCmsSigningTime.txt
>
>
> As both come from your local computer, the should be aligned



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@pdfbox.apache.org
For additional commands, e-mail: dev-h...@pdfbox.apache.org

Reply via email to