You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@pdfbox.apache.org by "ASF subversion and git services (JIRA)" <ji...@apache.org> on 2019/02/17 14:58:00 UTC

[jira] [Commented] (PDFBOX-4466) Signature without /Type /Sig can't be read

    [ https://issues.apache.org/jira/browse/PDFBOX-4466?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16770430#comment-16770430 ] 

ASF subversion and git services commented on PDFBOX-4466:
---------------------------------------------------------

Commit 1853760 from Tilman Hausherr in branch 'pdfbox/trunk'
[ https://svn.apache.org/r1853760 ]

PDFBOX-4466: add more heuristics to detect a signature dictionary because /Type is optional

> Signature without /Type /Sig can't be read
> ------------------------------------------
>
>                 Key: PDFBOX-4466
>                 URL: https://issues.apache.org/jira/browse/PDFBOX-4466
>             Project: PDFBox
>          Issue Type: Bug
>          Components: Crypto, Signing
>    Affects Versions: 1.8.16, 2.0.13
>            Reporter: Tilman Hausherr
>            Assignee: Tilman Hausherr
>            Priority: Major
>             Fix For: 1.8.17, 2.0.14, 3.0.0 PDFBox
>
>         Attachments: DSS-1538-Signature.pdf
>
>
> Signatures are not to be decrypted, and currently decryption is skipped when their type is detected. However the type is optional, so in the attached file where the type is missing it is "decrypted". See at the end of PDFBOX-4453 and in the linked issue of the European commission DSS project. Thanks [~mkl] for pointing me to this one.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@pdfbox.apache.org
For additional commands, e-mail: dev-help@pdfbox.apache.org