[Poppler-bugs] [Bug 106952] New: pdfunite must remove invalidated digital signatures

[bugzilla-daemon at freedesktop.org]

https://bugs.freedesktop.org/show_bug.cgi?id=106952

            Bug ID: 106952
           Summary: pdfunite must remove invalidated digital signatures
           Product: poppler
           Version: unspecified
          Hardware: Other
                OS: All
            Status: NEW
          Severity: normal
          Priority: medium
         Component: utils
          Assignee: poppler-bugs at lists.freedesktop.org
          Reporter: patrakov at gmail.com

Created attachment 140204
  --> https://bugs.freedesktop.org/attachment.cgi?id=140204&action=edit
First document with a signature

If I run pdfunite on pdf files, at least one of which is signed, then the
result has an invalid digital signature. I think that any signatures that
cannot be properly preserved must be removed.

To reproduce:

[aep at aep-haswell tmp]$ pdfsig 'Untitled 1.pdf'
Digital Signature Info of: Untitled 1.pdf
Signature #1:
  - Signer Certificate Common Name: (null)
  - Signer full Distinguished Name: E=patrakov at gmail.com
  - Signing Time: Jun 18 2018 21:43:41
  - Signing Hash Algorithm: SHA-256
  - Signature Type: adbe.pkcs7.detached
  - Signed Ranges: [0 - 9563], [59565 - 60513]
  - Total document signed
  - Signature Validation: Signature is Valid.
  - Certificate Validation: Certificate is Trusted.
[aep at aep-haswell tmp]$ pdfsig 'Untitled 2.pdf'
Digital Signature Info of: Untitled 2.pdf
Signature #1:
  - Signer Certificate Common Name: (null)
  - Signer full Distinguished Name: E=patrakov at gmail.com
  - Signing Time: Jun 18 2018 21:44:21
  - Signing Hash Algorithm: SHA-256
  - Signature Type: adbe.pkcs7.detached
  - Signed Ranges: [0 - 9426], [59428 - 60376]
  - Total document signed
  - Signature Validation: Signature is Valid.
  - Certificate Validation: Certificate is Trusted.
[aep at aep-haswell tmp]$ pdfunite 'Untitled 1.pdf' 'Untitled 2.pdf' 'Untitled
12.pdf'
[aep at aep-haswell tmp]$ pdfsig 'Untitled 12.pdf'
Digital Signature Info of: Untitled 12.pdf
Signature #1:
  - Signer Certificate Common Name: (null)
  - Signer full Distinguished Name: E=patrakov at gmail.com
  - Signing Time: Jun 18 2018 21:43:41
  - Signing Hash Algorithm: SHA-256
  - Signature Type: adbe.pkcs7.detached
  - Signed Ranges: [0 - 9563], [59565 - 60513]
  - Not total document signed
  - Signature Validation: Digest Mismatch.
Signature #2:
  - Signer Certificate Common Name: (null)
  - Signer full Distinguished Name: E=patrakov at gmail.com
  - Signing Time: Jun 18 2018 21:44:21
  - Signing Hash Algorithm: SHA-256
  - Signature Type: adbe.pkcs7.detached
  - Signed Ranges: [0 - 9426], [59428 - 60376]
  - Not total document signed
  - Signature Validation: Digest Mismatch.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.freedesktop.org/archives/poppler-bugs/attachments/20180618/162cc6a6/attachment.html>