[jira] [Created] (FOP-3299) PDF/A-3u with Digital Signature fails pdfForge Validator

"DaveLaw (Jira)" <[email protected]> Thu, 19 Mar 2026 16:41:00 +0000 (UTC)
Newsgroups gmane.text.xml.fop.devel
Message-ID <[email protected]>
DaveLaw created FOP-3299:
----------------------------

             Summary: PDF/A-3u with Digital Signature fails pdfForge Validator
                 Key: FOP-3299
                 URL: https://issues.apache.org/jira/browse/FOP-3299
             Project: FOP
          Issue Type: Bug
          Components: renderer/pdf
    Affects Versions: 2.11
         Environment: Windows 10, Eclipse 2026-03, JDK 17
            Reporter: DaveLaw
             Fix For: main


I tried validating a with-fop digitally signed "PDF/A-3u" using the pdfForge Validator. 
[https://www.pdfforge.org/online/en/validate-pdfa]

It complained about the following:
*ISO 19005-3:2012  §6.1.12*
_"If DocMDP is present, then the Signature References dictionary (ISO 32000-1:2008, 12.8.1, Table 253) shall not contain the keys DigestLocation, DigestMethod, and DigestValue."_

I made a change to org.apache.fop.pdf.PDFSignature, commenting out the following line:
put("DigestMethod", new PDFName("SHA1"));

pdfForge, thereafter, was happy with the generated PDF.

 



--
This message was sent by Atlassian Jira
(v8.20.10#820010)