[jira] [Created] (PDFBOX-4381) Revocation CRL check should be done at signing time in AddValidation example

["Tilman Hausherr (JIRA)" <ji...@apache.org>]

Tilman Hausherr created PDFBOX-4381:
---------------------------------------

             Summary: Revocation CRL check should be done at signing time in AddValidation example
                 Key: PDFBOX-4381
                 URL: https://issues.apache.org/jira/browse/PDFBOX-4381
             Project: PDFBox
          Issue Type: Bug
          Components: Signing
    Affects Versions: 2.0.12
            Reporter: Tilman Hausherr
            Assignee: Tilman Hausherr
             Fix For: 2.0.13, 3.0.0 PDFBox


{{crl.isRevoked(cert)}} in CRLHelper.java is not correct, a certificate could have been valid at signing time and be invalidated later, e.g. when an employee signs, but loses his card at the after-signing-party. The correct way to do it is in {{CRLVerifier.verifyCertificateCRLs()}}.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@pdfbox.apache.org
For additional commands, e-mail: dev-help@pdfbox.apache.org