https://bugs.kde.org/show_bug.cgi?id=496604
Bug ID: 496604
Summary: signing PDF documents in Okular using EiDAS certificat
generates signature of type adbe.pkcs7.detached
instead of type ETSI.CAdES.detached
Classification: Applications
Product: okular
Version: 24.08.3
Platform: Other
OS: Linux
Status: REPORTED
Severity: normal
Priority: NOR
Component: PDF backend
Assignee: okular-devel@kde.org
Reporter: richard.p...@free.fr
Target Milestone: ---
SUMMARY
Signing PDF with recent Okular creates signature non-compatible with the ETSI
formats (CAdES/PAdES)
Chorus-pro (in France) now rejects documents signed with my EiDAS certificat as
the verification tool
with (in French, naturally):
Signature 1/1
Cette signature est mal formatée : champ manquant, valeur invalide, incohérence
Signature 1/1
Statut de la signature
Au moins une erreur a été trouvée
Identifiant de la signature : {db739815-6935-4f56-8f3d-d1d3b955b63b}
STEPS TO REPRODUCE
1. Open pdf document to sign
2. sign the document, with the image being a facsimile of my handwritten
signature+company stamp
3. pdfsig -nocert on the new __signed file
OBSERVED RESULT
Digital Signature Info of: AELOT9_signé.pdf
Signature #1:
- Signature Field Name: {db739815-6935-4f56-8f3d-d1d3b955b63b}
- Signer Certificate Common Name: Richard PALO
- Signer full Distinguished Name:
OID.2.5.4.97=NTRFR-441322385,serialNumber=cdef60dc95be86f4926592c28baeae6365968311,givenName=Richard,SN=PALO,CN=Richard
PALO,OU=0002 441322385,O=BAOU,C=FR
- Signing Time: Nov 20 2024 10:10:44
- Signing Hash Algorithm: SHA-256
- Signature Type: adbe.pkcs7.detached
- Signed Ranges: [0 - 312764], [332766 - 333269]
- Total document signed
- Signature Validation: Signature is Valid.
EXPECTED RESULT
Digital Signature Info of: AELOT9_signé.pdf
Signature #1:
- Signature Field Name: Signature1
- Signer Certificate Common Name: Richard PALO
- Signer full Distinguished Name:
OID.2.5.4.97=NTRFR-441322385,serialNumber=cdef60dc95be86f4926592c28baeae6365968311,givenName=Richard,SN=PALO,CN=Richard
PALO,OU=0002 441322385,O=BAOU,C=FR
- Signing Time: Nov 21 2024 16:44:08
- Signing Hash Algorithm: SHA-256
- Signature Type: ETSI.CAdES.detached
- Signed Ranges: [0 - 239409], [289411 - 290760]
- Total document signed
- Signature Validation: Signature is Valid.
(this was signed with LibreOffice)
By the way, cannot sign using pdfsig -add-signature -etsi either,
where I get the message '-etsi is not supported yet with -add-signature'
SOFTWARE/OS VERSIONS
Operating System: EndeavourOS
KDE Plasma Version: 6.2.3
KDE Frameworks Version: 6.8.0
Qt Version: 6.8.0
Kernel Version: 6.6.62-1-lts (64-bit)
Graphics Platform: Wayland
Processors: 12 × AMD Ryzen 5 5500U with Radeon Graphics
Memory: 30.7 Gio of RAM
Graphics Processor: AMD Radeon Graphics
Manufacturer: ASUSTeK COMPUTER INC.
Product Name: MINIPC PN51-E1
System Version: 0509
ADDITIONAL INFORMATION
can be provided upon demand
--
You are receiving this mail because:
You are the assignee for the bug.
