[PDFBOX-4261] Invalidated signature signing pdf twice

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 1.8.15
• Fix Version/s: 1.8.16
• Component/s: Signing
• Assignee: Tilman Hausherr
• Reporter: Claudio Tortorelli
• Created: 05/Jul/18 11:11
• Updated: 05/Oct/18 04:54
• Resolved: 11/Jul/18 17:51

Description

A customer sent us a pdf that has this problem: when it is signed twice by pdfbox 1.8.x the second signature invalidates the first one.

If we apply the same procedure using pdfbox 2.0.x the problem doesn't occur, but the customer required java 1.5 so we can't switch to the new version in this case.

For privacy purposes we had anonymized the original PDF file by editing 3 stream inside the pdf, without altering the original structure. So the file "92752146_noSign_anonymous.pdf" you can find in attachement has not the original text/image streams, but reproduces the problem as the original one.

Thank you in advance

 

Issue Links

• is related to: PDFBOX-4263 Check object key when signing