From dev-return-66724-archive-asf-public=cust-asf.ponee.io@pdfbox.apache.org Tue Dec 3 04:39:02 2019 Return-Path: X-Original-To: archive-asf-public@cust-asf.ponee.io Delivered-To: archive-asf-public@cust-asf.ponee.io Received: from mail.apache.org (hermes.apache.org [207.244.88.153]) by mx-eu-01.ponee.io (Postfix) with SMTP id 4359C18064E for ; Tue, 3 Dec 2019 05:39:02 +0100 (CET) Received: (qmail 44735 invoked by uid 500); 3 Dec 2019 04:39:01 -0000 Mailing-List: contact dev-help@pdfbox.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: dev@pdfbox.apache.org Delivered-To: mailing list dev@pdfbox.apache.org Received: (qmail 44721 invoked by uid 99); 3 Dec 2019 04:39:01 -0000 Received: from mailrelay1-us-west.apache.org (HELO mailrelay1-us-west.apache.org) (209.188.14.139) by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 03 Dec 2019 04:39:01 +0000 Received: from jira-he-de.apache.org (static.172.67.40.188.clients.your-server.de [188.40.67.172]) by mailrelay1-us-west.apache.org (ASF Mail Server at mailrelay1-us-west.apache.org) with ESMTP id C1F15E0E2E for ; Tue, 3 Dec 2019 04:39:00 +0000 (UTC) Received: from jira-he-de.apache.org (localhost.localdomain [127.0.0.1]) by jira-he-de.apache.org (ASF Mail Server at jira-he-de.apache.org) with ESMTP id 184AD7807A3 for ; Tue, 3 Dec 2019 04:39:00 +0000 (UTC) Date: Tue, 3 Dec 2019 04:39:00 +0000 (UTC) From: "Tilman Hausherr (Jira)" To: dev@pdfbox.apache.org Message-ID: In-Reply-To: References: Subject: [jira] [Commented] (PDFBOX-4702) signature verification in Adobe products MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit X-JIRA-FingerPrint: 30527f35849b9dde25b450d4833f0394 [ https://issues.apache.org/jira/browse/PDFBOX-4702?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16986602#comment-16986602 ] Tilman Hausherr commented on PDFBOX-4702: ----------------------------------------- I added you as a "contributor" so you can add yourself there. But AFAIK this is the only advantage, i.e. you still need one of the committers to commit your code. Depending on the complexity of the patch we need a ICLA ( [https://www.apache.org/licenses/icla.pdf] ) but it isn't needed for things sized like you did in the past, or for refactoring, or bug fixing. I had a look at the last file; one difference I see is that /V is indirect. It was direct in the "bad" file. And indirect in the default signing. > signature verification in Adobe products > ---------------------------------------- > > Key: PDFBOX-4702 > URL: https://issues.apache.org/jira/browse/PDFBOX-4702 > Project: PDFBox > Issue Type: Improvement > Reporter: Jason Pyeron > Priority: Major > Attachments: image-2019-12-01-17-33-28-155.png, image-2019-12-02-06-31-12-527.png, image-2019-12-02-16-50-30-220.png, image-2019-12-02-16-51-06-551.png, pdfbox-4702-signed-Adobe.pdf, pdfbox-4702-signed-PDFBOX-Tilman.pdf, pdfbox-4702-signed-PDFBOX.pdf, pdfbox-4702-unsigned-SignedAndLockedWithLocking.pdf, pdfbox-4702-unsigned.pdf, pdfbox-4702.pdf, screenshot-1.png, test_signed.pdf > > > Signatures with appearances have some unknown validation, that is resulting in "Bad parameter" error when validating. > See mailing list thread: https://lists.apache.org/thread.html/dde2f9531be0126402251b9fa95bd2274c1162fe5806420cbe1ca9ee@%3Cdev.pdfbox.apache.org%3E -- This message was sent by Atlassian Jira (v8.3.4#803005) --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscribe@pdfbox.apache.org For additional commands, e-mail: dev-help@pdfbox.apache.org