-
Notifications
You must be signed in to change notification settings - Fork 2
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
- Loading branch information
Showing
7 changed files
with
11 additions
and
4 deletions.
There are no files selected for viewing
Binary file not shown.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -1,13 +1,20 @@ | ||
# How to sign a PDF | ||
|
||
options: | ||
- not supported by pdftk, qpdf | ||
- open-pdf-sign badly-written wrapper around Java PDFBox | ||
- pdfsig generates invalid certificates, complex operations | ||
- adobe acrobat feature hard to find ("use certificate"), touches/destroys file structure | ||
|
||
## pdfsig | ||
|
||
generate certificate: | ||
- gpgsm --generate-key (RSA, subject name CN=Florian Moser, self-signed yes) | ||
- gpgsm --import, then paste the certificate followed by CTRL+D | ||
- gpgsm --fingerprint, the copy ID field (e.g. `0x9C1A23DA`) | ||
|
||
apply certificate: | ||
- pdfsig signature.pdf signature_signed.pdf -add-signature -backend GPG -nick 0x9C1A23DA | ||
- pdfsig signature.pdf signature_signed.pdf -add-signature -backend GPG -nick 0x9C1A23DA (but observe errors in output) | ||
- pdfsig signature_sodapdf.pdf signature_sodapdf_signed.pdf -add-signature -backend GPG -nick 0x9C1A23DA (but resulting file invalid) | ||
- observe that signature of both files are invalid | ||
|
||
review of other tools: | ||
- not supported by pdftk, qpdf | ||
- open-pdf-sign bad wrapper around Java PDFBox |
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.