Q: PDF signature processing?

View: New views
3 Messages — Rating Filter:   Alert me  

Q: PDF signature processing?

by Bugzilla from heiko.nardmann@secunet.com :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message

Hi together!

Is openssl capable of validating and/or extracting PDF signatures?

Thanks in advance!

Regards
Heiko Nardmann
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@...
Automated List Manager                           majordomo@...

Re: Q: PDF signature processing?

by wolfoftheair :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message

Short answer: No.

Longer answer: The code will perform cryptographic verification, but
it doesn't know anything about the structure of PDF documents or how
their signatures are put together.  Thus, depending on the algorithms
in use, it might be be useful as a toolkit to help perform validation
-- but it cannot on its own.

It was never designed to, and in fact has been developed for longer
than PDFs have had signature capability, for purposes other than PDF
signatures.

-Kyle H

On Thu, May 8, 2008 at 1:18 AM, Nardmann, Heiko
<heiko.nardmann@...> wrote:

> Hi together!
>
> Is openssl capable of validating and/or extracting PDF signatures?
>
> Thanks in advance!
>
> Regards
> Heiko Nardmann
> ______________________________________________________________________
> OpenSSL Project                                 http://www.openssl.org
> User Support Mailing List                    openssl-users@...
> Automated List Manager                           majordomo@...
>
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@...
Automated List Manager                           majordomo@...

RE: Q: PDF signature processing?

by Wahaj :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message

You can use iText API (no OpenSSL is reqd) or understand the PDF
dictionaries (Read PDF Public-Key Digital Signature & Encryption
Specification)to extract PDF content and the PKCS#7 and then use OpenSSL to
verify the signature.

Best regards,
Wahaj

-----Original Message-----
From: owner-openssl-users@...
[mailto:owner-openssl-users@...] On Behalf Of Kyle Hamilton
Sent: 09 May 2008 14:16
To: openssl-users@...
Subject: Re: Q: PDF signature processing?

Short answer: No.

Longer answer: The code will perform cryptographic verification, but
it doesn't know anything about the structure of PDF documents or how
their signatures are put together.  Thus, depending on the algorithms
in use, it might be be useful as a toolkit to help perform validation
-- but it cannot on its own.

It was never designed to, and in fact has been developed for longer
than PDFs have had signature capability, for purposes other than PDF
signatures.

-Kyle H

On Thu, May 8, 2008 at 1:18 AM, Nardmann, Heiko
<heiko.nardmann@...> wrote:

> Hi together!
>
> Is openssl capable of validating and/or extracting PDF signatures?
>
> Thanks in advance!
>
> Regards
> Heiko Nardmann
> ______________________________________________________________________
> OpenSSL Project                                 http://www.openssl.org
> User Support Mailing List                    openssl-users@...
> Automated List Manager                           majordomo@...
>
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@...
Automated List Manager                           majordomo@...


______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@...
Automated List Manager                           majordomo@...
LightInTheBox - Buy quality products at wholesale price