You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@pdfbox.apache.org by ti...@apache.org on 2017/10/27 19:36:03 UTC

svn commit: r1813562 - /pdfbox/trunk/examples/src/main/java/org/apache/pdfbox/examples/signature/CreateSignedTimestamp.java

Author: tilman
Date: Fri Oct 27 19:36:03 2017
New Revision: 1813562

URL: http://svn.apache.org/viewvc?rev=1813562&view=rev
Log:
PDFBOX-1848: remove MDP permissions, not allowed

Modified:
    pdfbox/trunk/examples/src/main/java/org/apache/pdfbox/examples/signature/CreateSignedTimestamp.java

Modified: pdfbox/trunk/examples/src/main/java/org/apache/pdfbox/examples/signature/CreateSignedTimestamp.java
URL: http://svn.apache.org/viewvc/pdfbox/trunk/examples/src/main/java/org/apache/pdfbox/examples/signature/CreateSignedTimestamp.java?rev=1813562&r1=1813561&r2=1813562&view=diff
==============================================================================
--- pdfbox/trunk/examples/src/main/java/org/apache/pdfbox/examples/signature/CreateSignedTimestamp.java (original)
+++ pdfbox/trunk/examples/src/main/java/org/apache/pdfbox/examples/signature/CreateSignedTimestamp.java Fri Oct 27 19:36:03 2017
@@ -111,11 +111,10 @@ public class CreateSignedTimestamp exten
         signature.setFilter(PDSignature.FILTER_ADOBE_PPKLITE);
         signature.setSubFilter(COSName.getPDFName("ETSI.RFC3161"));
 
-        // Optional: certify
-        if (accessPermissions == 0)
-        {
-            SigUtils.setMDPPermission(document, signature, 2);
-        }
+        // No certification allowed because /Reference not allowed in signature directory
+        // see ETSI EN 319 142-1 Part 1 and ETSI TS 102 778-4
+        // http://www.etsi.org/deliver/etsi_en%5C319100_319199%5C31914201%5C01.01.00_30%5Cen_31914201v010100v.pdf
+        // http://www.etsi.org/deliver/etsi_ts/102700_102799/10277804/01.01.01_60/ts_10277804v010101p.pdf
 
         // register signature dictionary and sign interface
         document.addSignature(signature, this);