[PDFBOX-5187] TSAClient with username+password

• Type: Bug
• Status: Closed
• Priority: Minor
• Resolution: Fixed
• Affects Version/s: 2.0.23
• Fix Version/s: 2.0.24, 3.0.0 PDFBox
• Component/s: Signing
• Assignee: Tilman Hausherr
• Reporter: Miro
• Created: 07/May/21 08:40
• Updated: 11/Jun/21 06:08
• Resolved: 08/May/21 03:47

Description

TSAClient used for signing document has authentication to TSA server implemented "weirdly". There is:

connection.setRequestProperty(username, password);

... and it should be:

connection.setRequestProperty("Authorization", "Basic " + new String(Base64.getEncoder().encode((username + ":" + password).getBytes(StandardCharsets.UTF_8))));

(in case of basic authentication ofc.)