Can it be possible to trust a certificate like in acrobat?

IDontKnow2Code commented 7 months ago

Here is the reference for what I am asking? Validity-Unknown-in-Aadhaar-Card-when-it-is-not-Verified.png

Validate-E-Aadhaar-Card-Signature-after-Downloading.gif

Validated-Aadhaar-Card-Sign-after-Validating-Aadhaar-Card.png

JakubMelka commented 7 months ago

Hello, I have fixed it. Now, you can just open context menu and add the certificate as valid.

IDontKnow2Code commented 7 months ago

It still shows not trusted and no green - tick either but certificate did get add to trusted store.

JakubMelka commented 7 months ago

Strange, it worked for me. Could you please provide sample document, where it does not work?

IDontKnow2Code commented 7 months ago

Strange, it worked for me. Could you please provide sample document, where it does not work?

Unfortunately, I can't provide it. It is a government issued document. I don't know where to get similar dummy document. My search about that document show that it's certificate is x.509 certificate, they generate it with iTextPDF The document is called Aadhar card.

itsKV commented 2 months ago

Hello, I have fixed it. Now, you can just open context menu and add the certificate as valid.

@JakubMelka Would you plz explain how to do this? I couldn't find the context menu as no menu gets open on right click.

JakubMelka commented 2 months ago

@itsKV, please try this:

itsKV commented 2 months ago

Sorry to say but that context menu doesn't come on any of the field from signature sidebar content. Nothing happens when you right click on any of them.

This also happens for Actual PDF content too. Nothing happens when you right click or left click anywhere on the pdf content. I don't know if that's the normal behavior.

JakubMelka commented 2 months ago

Could you please try a newest install from daily build? Could you please attach problematic PDF, if it is possible?

itsKV commented 2 months ago

I am not installing the build but using the zip version by extracting it locally (no admin rights to install). I can't share the pdf because the file is itself a critical document (analogues to your social security number SSN document) However, I can post issuer's chained certificates if you ask.

JakubMelka commented 2 months ago

OK @itsKV , if you can post the certificates, please post them.

itsKV commented 2 months ago

Complete chain of trust is as follows. Read from bottom to top where root CA is at last and so on.

lucifer-woo commented 2 weeks ago

Hey folks, what is the status of the issue ?

This app is the only fully featured alternative to adobe. If this is done. It would be great.

JakubMelka commented 2 weeks ago

@lucifer-woo, sorry, I will try to take time to solve it. I will reopen the issue.

lucifer-woo commented 2 weeks ago

Cool to know. Looking forward for the fix.

8 Sept 2024, by @.***:

@lucifer-woo https://github.com/lucifer-woo> , sorry, I will try to take time to solve it. I will reopen the issue.

— Reply to this email directly, > view it on GitHub https://github.com/JakubMelka/PDF4QT/issues/161#issuecomment-2336731326> , or > unsubscribe https://github.com/notifications/unsubscribe-auth/BHW4ETI6MI5AWWSCYOFHMEDZVRV73AVCNFSM6AAAAABCO4UCF6VHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDGMZWG4ZTCMZSGY> . You are receiving this because you were mentioned.> Message ID: > <JakubMelka/PDF4QT/issues/161/2336731326> @> github> .> com>

JakubMelka commented 1 week ago

Hello, I am not an expert in internet security and I was unable to create a PDF with the given certificate chain. But I think the workaround exists. @lucifer-woo, @itsKV, could you please try to install the root certificate to the system's certificate store? When PDF4QT validates the PDF's signatures, it also looks in the system's certificate store to retrieve the root certificates for the validation.

lucifer-woo commented 1 week ago

I understand your frustation. But how do I install the root CA to the system CA. I am novice to this stuff. I am not that much proficient in this.

Foxit PDF reader for linux also provides this feature. Maybe check it out as a reference ?

As of now, I added the certificate by right clicking and "Add to Trusted certificates". I could also see it in Tools > Options > Signatures. But I cannot see it in Tools > Certificates. Is that a problem ?

So far, this is how it is done - https://www.youtube.com/watch?v=aVNfUNlccZs.

It's an old video. Trusting isn't even needed as of now because Adobe just validates and renders it using OCSP servers. No need to trust certificates. Maybe you need to rethink the logic behind it.

Some docs regarding:

I think could be implemented using this python library : https://pyhanko.readthedocs.io/en/latest/cli-guide/validation.html

I just pulled the web regarding this info. I don't know much other than these.

itsKV commented 1 week ago

Hello, I am not an expert in internet security and I was unable to create a PDF with the given certificate chain. But I think the workaround exists. @lucifer-woo, @itsKV, could you please try to install the root certificate to the system's certificate store? When PDF4QT validates the PDF's signatures, it also looks in the system's certificate store to retrieve the root certificates for the validation.

The issue is not about root cert availability in cert store. The issue is UI bug which doesn't give option to validate the document's signature. See the OP. btw, the root and intermediate certs are already installed into windows store.

itsKV commented 1 week ago

I understand your frustation. But how do I install the root CA to the system CA. I am novice to this stuff. I am not that much proficient in this.

See the article here... https://www.itechtics.com/update-root-certificates/ Adding the signature into PDF reader's trusted database in different and adding the certificate into operating system's root store is different thing.

lucifer-woo commented 5 days ago

It isn't the same way for linux, I am not sure if those root and intermediate CA or installed. Can you tell the name ?

For windows, problem is validation. For linux, to trust and also validate.

16 Sept 2024, 13:05 by @.***:

I understand your frustation. But how do I install the root CA to the system CA. I am novice to this stuff. I am not that much proficient in this.

See the article here... > https://www.itechtics.com/update-root-certificates/ Adding the signature into PDF reader's trusted database in different and adding the certificate into operating system's root store is different thing.

— Reply to this email directly, > view it on GitHub https://github.com/JakubMelka/PDF4QT/issues/161#issuecomment-2352202292> , or > unsubscribe https://github.com/notifications/unsubscribe-auth/BHW4ETPFVZZK4AL2DXV6QRTZW2C27AVCNFSM6AAAAABCO4UCF6VHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDGNJSGIYDEMRZGI> . You are receiving this because you were mentioned.> Message ID: > <JakubMelka/PDF4QT/issues/161/2352202292> @> github> .> com>

JakubMelka / PDF4QT

Can it be possible to trust a certificate like in acrobat? #161