search

intoolswetrust / jsignpdf

PDF signing software written in Java. It supports visible signatures, timestamping, certificate verification and many other cool features
https://intoolswetrust.github.io/jsignpdf/
Other
315 stars 121 forks source link

how to sign using gnupg #96

Closed vy closed 2 years ago

vy commented 2 years ago

Does jsignpdf 2.1.0 support signing PDF documents using GnuPG private keys? If so, would you mind describing, or better documenting, how this can be done, please? (If you describe how this is done, I can contribute it back as a PR improving the documentation.)

JohnPlanetary commented 2 years ago

No, it doesn't. Only X.509 certificates are supported.

If your want to sign PDF documents with GnuPG private keys, just use that program to sign the files, or some graphical interface that uses that engine.

It doesn't make sense to integrate OpenPGP in JSignPDF because it won't be recognized by any PDF reader, only X.509 are recognized when integrated in the PDF.

Even if someone did make a program capable of integrating OpenPGP signatures into the PDF file itself in a way that could be verified, who ever downloaded it, would need some extra software to check the signature, because stock PDF readers won't verify it... some (in browsers for example) don't even check the standard X.509 digital signature.

vy commented 2 years ago

Thanks so much for the prompt reply @JohnPlanetary! I am closing the issue since the use case is apparently useless.