[PDFBOX-2776] support "Long Term Validation" signature extensions (LTV)

• Type: Improvement
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Affects Version/s: 2.0.0
• Component/s: Signing
• Assignee: Unassigned
• Reporter: Ralf Hauser
• Created: 28/Apr/15 08:48
• Updated: 07/Jul/22 06:01

Description

in recent acrobat readers, every signature is commented w.r.t. "LTV"

ETSI TS 102 778-4 V1.1.2 (2009-12) Technical Specification
referenced as part 4 in
http://en.wikipedia.org/wiki/PAdES

It would be great if pdf signatures created with PDFBox would assist in creatign those.

Target test setup:
1) input of an unsigned PDF-1.5 document
2) signature with
a) local key pair
b) hsm
c) remote signature service (e.g. via soap)
3) add ocsp response for LTV (crls typically are larger)
==> Result: signed pdf where acrobat reader claims it to be "LTV enabled"

see also PDFBOX-1848

more in
http://stackoverflow.com/questions/26090558/ltv-enabled-signature-in-pdf

Issue Links

• depends upon: PDFBOX-1848 Time Stamp Document Level Sigature
• depends upon: PDFBOX-3984 Add validation data of signer to document
• depends upon: PDFBOX-4020 Into existing signature embedded signed timestamp for validation