You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@pdfbox.apache.org by "Petras (JIRA)" <ji...@apache.org> on 2016/08/29 19:46:20 UTC
[jira] [Issue Comment Deleted] (PDFBOX-2776) support "Long Term
Validation" signature extensions (LTV)
[ https://issues.apache.org/jira/browse/PDFBOX-2776?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Petras updated PDFBOX-2776:
---------------------------
Comment: was deleted
(was: To my opinion this feature with all its abilities in original post currently could be considered as "nice-to-have". As PDFBox COSModel provides everything to deal with PDF internals, invoking external services and dealing with all peculiarities of PKI infrastructure, to my opinion, is out of scope for PDFBox. Obtaining validation data requires validation of this data itself. Depending on the context, data acceptance policy may considerably differ. To my opinion PDFBox can only enhance PDModel API with ability to set and get LTV related data. We implemented LTV related features in our tool and probably I could contribute something here by providing suggested approach for PDModel API.)
> support "Long Term Validation" signature extensions (LTV)
> ---------------------------------------------------------
>
> Key: PDFBOX-2776
> URL: https://issues.apache.org/jira/browse/PDFBOX-2776
> Project: PDFBox
> Issue Type: Improvement
> Components: Signing
> Affects Versions: 2.0.0
> Reporter: Ralf Hauser
> Fix For: 2.1.0
>
>
> in recent acrobat readers, every signature is commented w.r.t. "LTV"
> ETSI TS 102 778-4 V1.1.2 (2009-12) Technical Specification
> referenced as part 4 in
> http://en.wikipedia.org/wiki/PAdES
> It would be great if pdf signatures created with PDFBox would assist in creatign those.
> Target test setup:
> 1) input of an unsigned PDF-1.5 document
> 2) signature with
> a) local key pair
> b) hsm
> c) remote signature service (e.g. via soap)
> 3) add ocsp response for LTV (crls typically are larger)
> ==> Result: signed pdf where acrobat reader claims it to be "LTV enabled"
> see also PDFBOX-1848
> more in
> http://stackoverflow.com/questions/26090558/ltv-enabled-signature-in-pdf
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@pdfbox.apache.org
For additional commands, e-mail: dev-help@pdfbox.apache.org