NITRO PDF PROFESSIONAL V5.2.0.5 UPDATE
NITRO PDF PROFESSIONAL V5.2.0.5 CODE

Subject: Īs you see, signed.pdf has only one revision, its integrated signature is valid, and it covers the whole file. Signature name: Fadadaf1a333d3-d51a-4fbb-ad22-bbdcaddd7d8e The outputs for the OP's sample files are: babylove_signed.pdf ( VerifySignature test testVerifyBabyloveSigned) ('Subject: ' + CertificateInfo.getSubjectFields(pk.getSigningCertificate())) PdfPKCS7 pk = acroFields.verifySignature(name)

('Document revision: ' + acroFields.getRevision(name) + ' of ' + acroFields.getTotalRevisions()) ('Signature covers whole document: ' + acroFields.signatureCoversWholeDocument(name)) List names = acroFields.getSignatureNames() You can execute the checks with iText 5.5.10 like this: PdfReader reader = new PdfReader(resource) ĪcroFields acroFields = reader.getAcroFields() IText does offer the low-level tools to implement such tests, though, so anyone is welcome to implement them on top of iText.

NITRO PDF PROFESSIONAL V5.2.0.5 CODE

Even Adobe Reader in its code for this check has many false negatives for PDFs in which the allowed changes are implemented differently than Adobe Reader would have done it itself, e.g. This task actually is decidedly non-trivial as the allowed changes are not specified in deep detail I am not aware of any proper open source implementation of it.

IText does not offer simple API functions, though, that check whether the changes in incremental updates to signed revisions are all allowed. IText furthermore determines whether a signature covers the whole file, i.e. IText offers an API to validate each integrated signature, in particular this validation checks whether that integrated signature correctly signs the bytes it applies to. this answer on stack overflow and the documents referenced from there. Thus, a signature of a former revision still correctly signs its byte ranges even if a later revision completely changes how the PDF is displayed.Īs in common signing use cases content someone signed should not be arbitrarily changed, the PDF specification only considers very few types of changes in incremental updates to signed revisions valid, cf.

Integrated PDF signatures sign the complete revision of the document in which they were added to the file with the obvious exception of the actual signature bytes.

NITRO PDF PROFESSIONAL V5.2.0.5 UPDATE

With each such incremental update a new revision of the file is added to the file. This mechanism only appends to the file leaving the original bytes unchanged. PDFs can be changed by a mechanism called incremental updates. It does not check, though, whether changes in incremental updates are allowed changes. IText offers an API to validate each integrated signature and to check whether it covers the whole document.

Nitro pdf professional v5.2.0.5