<html> <head> <base href="https://bugs.freedesktop.org/"> </head> <body> <div> <a class="bz_bug_link bz_status_NEW " title="NEW - Certificate chain from PDF digital signature back to trusted root certificate not verified?" href="https://bugs.freedesktop.org/show_bug.cgi?id=99365#c4">Comment # 4</a> on <a class="bz_bug_link bz_status_NEW " title="NEW - Certificate chain from PDF digital signature back to trusted root certificate not verified?" href="https://bugs.freedesktop.org/show_bug.cgi?id=99365">bug 99365</a> from <a class="email" href="mailto:sebras@hotmail.com" title="Sebastian Rasmussen <sebras@hotmail.com>"> Sebastian Rasmussen</a> <pre>Thanks for the explanations of where I misunderstood what's happening. Sorry for the unnecessary noise. > Maybe we can change the output string of pdfsig for the 1st validation to > something more specific if people find the wording to be misleading: > "Signature Validation: the document was not modified since the document was > signed" There is alos "Digest mismatch" though, which also says something about whether the document was been modified. As I understand it you basically have three booleans: 1. does the digest for the file match that in the signature dictionary? 2. does the signature in the dictionary sign the digest? 3. is the signature trusted? And to lessen the confusion maybe these three cases should attempt to not use overlapping terminology. I'm new to this certificate validation things though, so maybe it's just me being confused because I'm not yet clued in on the details. :)</pre> </div> <hr> You are receiving this mail because: <ul> <li>You are the assignee for the bug.</li> </ul> </body> </html>