hexapdf 0.18.0 → 0.19.0

data/test/data/cert/sub-ca/signing.crt

@@ -0,0 +1,125 @@
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number:
+            45:3f:f0:80:e3:ed:cd:6a:38:8d:53:68:df:c3:20:d9
+        Signature Algorithm: sha256WithRSAEncryption
+        Issuer: C=AT, O=HexaPDF, CN=HexaPDF Test Subordinate CA
+        Validity
+            Not Before: Nov  8 06:10:03 2021 GMT
+            Not After : Oct 15 06:10:03 2121 GMT
+        Subject: C=AT, O=HexaPDF, CN=HexaPDF Test Certifcate
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                RSA Public-Key: (4096 bit)
+                Modulus:
+                    00:c6:06:9a:58:e1:b2:f9:5e:61:3b:30:e0:88:5f:
+                    11:ff:33:b9:1b:2b:94:f8:ad:02:fa:d2:53:62:74:
+                    f7:71:6a:b9:ca:08:2c:e8:8e:21:41:b3:66:3a:dd:
+                    c2:1f:a6:49:12:6e:d7:ca:df:5a:77:a4:d0:88:aa:
+                    8d:88:43:b1:3f:f4:67:3d:c7:9b:9e:54:d8:50:59:
+                    ac:a5:99:b6:39:f6:d5:5c:e5:c6:5e:1d:d7:dc:4f:
+                    4c:55:d5:d8:e6:5a:82:d0:1e:51:53:c8:92:b9:35:
+                    56:3d:61:d0:ed:dc:b7:4d:2b:e4:af:b7:c3:72:7a:
+                    ec:3e:d6:78:2c:83:2b:c9:1b:a0:67:f0:b0:3b:25:
+                    0f:d7:54:f5:0d:b4:8e:88:fe:e5:fa:53:36:d5:f3:
+                    77:e7:15:fe:83:3d:03:d1:99:bf:b9:39:3d:ca:1b:
+                    fe:b1:0e:33:44:5f:81:47:6f:d9:eb:ca:12:e5:e8:
+                    78:7f:1a:59:fe:52:ef:21:a5:71:97:b1:51:f1:96:
+                    e7:13:af:e7:bd:95:2d:4b:35:94:23:e6:aa:73:22:
+                    c8:83:58:61:4a:a9:a1:7d:d9:71:fa:f3:b9:fb:89:
+                    1d:1e:5c:be:f9:e1:8b:7b:66:95:45:25:94:4f:53:
+                    63:8e:34:20:dc:de:a7:20:0f:6a:34:f2:23:1d:51:
+                    8c:21:06:4d:36:34:88:43:18:8e:b7:1e:e7:e4:49:
+                    4a:e6:53:43:67:bf:fc:4e:db:41:54:da:56:b6:6a:
+                    6d:0e:02:d9:be:1a:38:5e:62:ca:2e:a3:f3:af:1f:
+                    a8:a4:f1:b7:04:92:91:0f:01:08:81:94:18:d2:39:
+                    d8:aa:20:0a:76:a4:c2:71:ce:ef:06:cd:19:d4:58:
+                    25:28:aa:86:a3:ab:44:74:6b:46:c8:57:04:37:0c:
+                    61:20:5f:24:fc:07:9b:81:13:76:1d:76:77:89:e2:
+                    04:25:c1:c2:13:4c:80:22:ec:10:c1:05:aa:f7:ca:
+                    c6:08:5f:87:c1:e3:6e:e7:ab:eb:6b:c3:61:9d:90:
+                    01:5f:19:16:a3:6d:64:6d:d3:f6:90:e5:61:30:60:
+                    72:fb:a9:a4:da:e0:97:b4:de:2b:ef:11:fa:8f:25:
+                    33:fe:a5:1a:64:e5:8a:fe:02:d5:97:c2:ea:98:fd:
+                    15:3b:8e:80:54:e3:44:46:8c:79:a3:a8:fd:2c:93:
+                    9b:db:9c:c4:47:3d:56:87:80:0d:e2:c8:a2:b8:17:
+                    9b:46:27:f0:e8:dd:7f:79:af:f4:50:01:da:90:0e:
+                    17:e8:91:33:75:2a:fc:92:68:5a:b2:a5:71:e1:21:
+                    e7:f4:9d:75:5d:82:d2:0b:10:cd:4f:52:74:46:9e:
+                    e6:32:4d
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Authority Key Identifier: 
+                keyid:56:3E:DA:D2:9A:AA:30:A1:70:75:5A:85:15:FE:2F:8B:F5:86:FF:61
+
+            X509v3 Basic Constraints: critical
+                CA:FALSE
+            X509v3 Extended Key Usage: 
+                TLS Web Client Authentication
+            X509v3 Key Usage: critical
+                Digital Signature
+            X509v3 Subject Key Identifier: 
+                F8:07:CF:B8:40:CB:1E:10:0F:AF:5F:26:4F:10:F5:76:94:EF:AD:27
+    Signature Algorithm: sha256WithRSAEncryption
+         6e:bb:7a:53:e0:87:f5:2c:c5:cc:a5:0b:3a:c6:15:f8:39:f1:
+         7d:a6:d0:ca:6c:10:fa:dc:bf:26:d1:39:2d:67:f4:e4:35:29:
+         1a:17:50:13:07:c9:79:85:be:d0:44:e7:15:20:5f:d5:6e:ae:
+         fa:fa:05:84:2c:d3:c9:ba:51:22:df:f4:6e:b1:c7:be:09:d5:
+         58:03:10:f5:95:7d:e3:c5:bf:91:05:05:c3:f3:3b:bc:b1:76:
+         19:e9:ba:9f:ac:7a:77:11:77:f8:f2:1b:6c:b1:ec:4d:43:52:
+         ac:87:9c:58:2d:5d:ea:6a:c3:97:d7:3d:ed:80:e4:68:9c:47:
+         d3:a8:0d:4e:63:37:55:77:b9:ec:eb:43:63:a5:8f:9d:51:13:
+         09:2f:3a:c8:e4:09:20:34:fc:1d:e9:42:0e:64:54:6c:32:ba:
+         de:50:73:ca:bd:6d:03:2a:ea:b9:3a:d0:4f:e8:de:12:c4:69:
+         72:c3:66:e3:be:5e:77:d4:04:9f:e9:25:11:ea:b5:db:68:1d:
+         23:a3:50:b4:c7:d1:9d:57:09:e2:aa:c4:b0:0f:80:54:d7:ba:
+         f4:01:a2:3a:ff:bd:65:af:14:69:b7:77:0a:fe:87:c5:21:48:
+         52:39:64:5c:df:e9:b3:62:98:7b:b0:e9:0a:79:6a:02:2f:10:
+         aa:9a:be:6d:91:a1:f0:66:84:ba:c2:68:8e:48:63:e8:dc:85:
+         87:3b:2e:fc:e2:ff:67:f6:3a:52:18:c1:80:14:11:b6:cc:86:
+         9c:8e:27:a9:e6:47:0f:a3:5f:5b:89:6e:b8:f2:98:59:3a:f0:
+         c7:30:42:cd:17:fe:cf:a0:a0:f3:22:cb:6c:e5:f8:a2:b4:ca:
+         87:e9:80:5a:28:7b:0e:dc:81:b9:74:c0:c8:27:0a:cf:fe:4d:
+         5f:d6:16:64:d6:d9:4e:04:ef:65:10:18:39:18:26:ad:d2:fe:
+         91:9a:3a:95:61:55:46:96:0e:ab:ea:b1:61:c2:04:b6:5e:14:
+         bf:5e:94:70:6e:c6:02:33:bf:d5:5f:4f:1d:b3:d5:45:c6:be:
+         be:7b:1d:30:c5:e2:3f:f4:77:63:fa:ab:85:40:58:b0:98:94:
+         7e:a2:a9:ce:59:04:c5:6d:99:71:7d:bd:ad:43:e6:24:37:fc:
+         01:75:7a:b9:5d:fc:80:b0:64:ba:f2:6f:d4:06:1f:21:13:82:
+         43:13:af:93:cd:d6:c0:79:75:ee:7b:01:96:6f:0c:38:45:52:
+         92:71:9a:d5:33:c1:f3:6c:7c:c6:18:96:59:d5:a9:21:36:9e:
+         fd:39:c6:7a:74:2f:71:64:52:b5:70:a8:d8:73:f4:50:bb:33:
+         fc:84:9c:77:9f:da:db:f5
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

data/test/data/cert/sub-ca/signing.csr

@@ -0,0 +1,28 @@
+-----BEGIN CERTIFICATE REQUEST-----
+MIIE1zCCAr8CAQAwQTELMAkGA1UEBhMCQVQxEDAOBgNVBAoMB0hleGFQREYxIDAe
+BgNVBAMMF0hleGFQREYgVGVzdCBDZXJ0aWZjYXRlMIICIjANBgkqhkiG9w0BAQEF
+AAOCAg8AMIICCgKCAgEAxgaaWOGy+V5hOzDgiF8R/zO5GyuU+K0C+tJTYnT3cWq5
+yggs6I4hQbNmOt3CH6ZJEm7Xyt9ad6TQiKqNiEOxP/RnPcebnlTYUFmspZm2OfbV
+XOXGXh3X3E9MVdXY5lqC0B5RU8iSuTVWPWHQ7dy3TSvkr7fDcnrsPtZ4LIMryRug
+Z/CwOyUP11T1DbSOiP7l+lM21fN35xX+gz0D0Zm/uTk9yhv+sQ4zRF+BR2/Z68oS
+5eh4fxpZ/lLvIaVxl7FR8ZbnE6/nvZUtSzWUI+aqcyLIg1hhSqmhfdlx+vO5+4kd
+Hly++eGLe2aVRSWUT1NjjjQg3N6nIA9qNPIjHVGMIQZNNjSIQxiOtx7n5ElK5lND
+Z7/8TttBVNpWtmptDgLZvho4XmLKLqPzrx+opPG3BJKRDwEIgZQY0jnYqiAKdqTC
+cc7vBs0Z1FglKKqGo6tEdGtGyFcENwxhIF8k/AebgRN2HXZ3ieIEJcHCE0yAIuwQ
+wQWq98rGCF+HweNu56vra8NhnZABXxkWo21kbdP2kOVhMGBy+6mk2uCXtN4r7xH6
+jyUz/qUaZOWK/gLVl8LqmP0VO46AVONERox5o6j9LJOb25zERz1Wh4AN4siiuBeb
+Rifw6N1/ea/0UAHakA4X6JEzdSr8kmhasqVx4SHn9J11XYLSCxDNT1J0Rp7mMk0C
+AwEAAaBRME8GCSqGSIb3DQEJDjFCMEAwDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8B
+Af8EBAMCAQYwHQYDVR0OBBYEFPgHz7hAyx4QD69fJk8Q9XaU760nMA0GCSqGSIb3
+DQEBCwUAA4ICAQAWLbFz+aTtfFq6xMoW1eekRcXzgaPboX+FEj8fsIJzIIZ+ff6V
+X1B9ozVJx1Sgkt1x7hoo0EJJt88NQcbiWi+HPhyCs/ak+WE/mKQEKSTArrgcUDtK
+B+F2a7eF5LWiY4YA+8tl1xeG6nCbxTFQMUGbO4s86HXu6B7FeXKmOBn3+83J1lBL
+D9lU3tSUcT9WncmP9QT4elQHAV5sYfo1tTjnHL1nUglZa2PScMa7bbaJZZd7C3N/
+FPEZt/kY2cYHj73Krh4L/bY6q6+CX8P0Fna1OhS0TFYOIYYxUnVzZ+7iKMBmexOZ
+bP3ggOPMgJE3qw7icF6XQbH95IaoLAXNm5DuPLF2+N9l6+rU+T9eyEWoBg+kqEl2
+dE/FrHpsse4Vr2+uuqm/zWr/oa+oESzwRAo3do1pH8uZuziYzDyt9OdSnhwVnjR0
+YXz5vTKzRf4AVSYQjxL6xJ+AUoZcfB/k6oTHoSR6KKKHCWi2uDJaZuMbTmQK1Slg
+YW4vi3DHIoeVfJGHvtTsHJ5OXVLm99toJN0lJYRLlp0sod+tmFhvaSvUTPZR0Vm4
+dpHgLOFJM8gcGGr4yZs+rZYrDuMLuT9KNGfudGgYXNenwE9Lw/9VLtkyZuoJSDfu
+/vQDNaGuq4SzhSHYv9rCnTK9jgmDfGCWaFYlbZkoMDwRN7E9VluEmnIeLA==
+-----END CERTIFICATE REQUEST-----

data/test/data/cert/sub-ca/sub-ca.conf

@@ -0,0 +1,65 @@
+[default]
+name                     = sub-ca
+domain_suffix            = hexapdf.gettalong.org
+aia_url                  = http://$name.$domain_suffix/$name.crt
+crl_url                  = http://$name.$domain_suffix/$name.crl
+default_ca               = ca_default
+name_opt                 = utf8,esc_ctrl,multiline,lname,align
+
+[ca_dn]
+countryName              = "AT"
+organizationName         = "HexaPDF"
+commonName               = "HexaPDF Test Subordinate CA"
+
+[ca_default]
+home                     = ../sub-ca
+database                 = $home/db/index
+serial                   = $home/db/serial
+crlnumber                = $home/db/crlnumber
+certificate              = $home/$name.crt
+private_key              = $home/private/$name.key
+RANDFILE                 = $home/private/random
+new_certs_dir            = $home/certs
+unique_subject           = no
+copy_extensions          = copy
+default_days             = 36500
+default_crl_days         = 90
+default_md               = sha256
+policy                   = policy_c_o_match
+
+[policy_c_o_match]
+countryName              = match
+stateOrProvinceName      = optional
+organizationName         = match
+organizationalUnitName   = optional
+commonName               = supplied
+emailAddress             = optional
+
+[req]
+default_bits             = 4096
+encrypt_key              = no
+default_md               = sha256
+utf8                     = yes
+string_mask              = utf8only
+prompt                   = no
+distinguished_name       = ca_dn
+req_extensions           = ca_ext
+
+[ca_ext]
+basicConstraints         = critical,CA:true
+keyUsage                 = critical,keyCertSign,cRLSign
+subjectKeyIdentifier     = hash
+
+[sub_ca_ext]
+authorityKeyIdentifier   = keyid:always
+basicConstraints         = critical,CA:true,pathlen:0
+extendedKeyUsage         = clientAuth,serverAuth
+keyUsage                 = critical,keyCertSign,cRLSign
+subjectKeyIdentifier     = hash
+
+[client_ext]
+authorityKeyIdentifier   = keyid:always
+basicConstraints         = critical,CA:false
+extendedKeyUsage         = clientAuth
+keyUsage                 = critical,digitalSignature
+subjectKeyIdentifier     = hash

data/test/data/cert/sub-ca/sub-ca.crt

@@ -0,0 +1,125 @@
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number:
+            84:e6:6b:6f:4c:35:9e:74:1c:0a:fa:01:47:90:df:3a
+        Signature Algorithm: sha256WithRSAEncryption
+        Issuer: C=AT, O=HexaPDF, CN=HexaPDF Test Root CA
+        Validity
+            Not Before: Nov  8 06:10:02 2021 GMT
+            Not After : Oct 15 06:10:02 2121 GMT
+        Subject: C=AT, O=HexaPDF, CN=HexaPDF Test Subordinate CA
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                RSA Public-Key: (4096 bit)
+                Modulus:
+                    00:a6:2e:82:aa:b8:8f:e4:3c:c5:15:bb:8b:ea:75:
+                    f6:10:a1:61:a8:43:2e:ef:ee:78:0a:a7:a0:ce:76:
+                    a0:85:ad:5c:93:d8:d1:21:27:55:85:8d:82:be:e0:
+                    e3:70:5e:01:e6:a7:1a:44:4d:80:83:9b:31:fc:35:
+                    0f:53:67:ea:b3:99:ca:34:78:19:c6:8a:7e:08:1e:
+                    01:17:f1:88:e5:4d:f0:28:9e:33:fa:68:a0:38:1c:
+                    ee:b8:8e:0a:85:40:62:2f:53:3e:e2:d4:50:5d:77:
+                    a1:7d:4b:a6:53:6e:5a:4d:ab:68:dd:95:7a:ba:2c:
+                    8b:f2:5b:7d:1d:87:e8:33:04:f7:f0:ed:60:f2:d3:
+                    85:48:e1:ab:98:d7:01:89:73:49:50:18:21:9e:fc:
+                    a7:3e:e2:eb:32:1c:fc:34:3d:5f:3b:f5:d6:2e:8d:
+                    5b:d7:80:48:62:b4:92:e1:ff:ca:f6:8a:e4:e4:ac:
+                    70:d7:2a:75:d2:1b:81:27:d4:39:60:e1:2a:c4:7e:
+                    7f:d1:5a:45:5d:da:14:ac:5e:47:6a:1f:81:6c:ec:
+                    91:44:b8:07:3b:02:d5:35:ff:fd:3b:d0:12:a6:67:
+                    0b:98:ae:26:5e:7c:9c:5f:0b:c5:8b:2a:63:85:45:
+                    c9:6e:1e:8a:64:fd:1f:e3:c6:82:65:52:e1:24:3f:
+                    b3:3e:e9:0c:37:de:26:91:61:b5:10:84:64:04:25:
+                    f7:ab:e0:83:76:3d:c9:9e:12:c8:dc:84:85:71:99:
+                    f4:75:3c:63:da:5a:06:ac:60:13:48:00:2a:c3:b5:
+                    23:06:99:d6:fd:81:3a:61:64:b2:d9:5b:ae:45:0c:
+                    4b:bb:a8:9c:2d:0e:a6:fe:d4:74:ca:51:70:4b:60:
+                    c2:bc:d5:c2:9a:79:c6:85:6c:f8:72:60:41:f6:b0:
+                    58:cf:d4:ed:7c:fd:d9:2a:bc:8e:3b:5a:4f:4b:58:
+                    e0:6e:7c:7c:f1:28:a5:52:85:dd:24:48:70:70:97:
+                    75:3f:b3:2b:02:55:ac:c6:05:bb:ec:f2:7d:6a:a2:
+                    c6:0a:5e:86:ed:32:93:cc:f2:2b:d9:68:22:c9:44:
+                    9c:8e:6d:88:17:50:54:7a:fc:27:c4:b5:93:42:6f:
+                    dd:d7:c5:28:8b:8f:c2:2c:0f:02:76:d9:f8:11:78:
+                    5d:00:d7:17:9c:57:4a:b6:0a:51:a6:d5:79:7b:ca:
+                    6b:e0:59:e2:7e:0a:4b:ae:33:cb:39:b4:fe:8f:62:
+                    8d:0b:07:87:d0:27:8c:3f:a0:42:f1:a5:36:4f:21:
+                    57:f7:3c:5a:1b:60:ca:41:0d:e3:3e:35:16:23:c5:
+                    82:d0:c1:47:50:8a:ba:35:26:8f:1a:d1:95:2c:1f:
+                    91:ee:1b
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Authority Key Identifier: 
+                keyid:1A:80:9F:49:AD:91:C8:C0:36:23:1D:ED:CD:FF:2A:F6:43:47:E4:6D
+
+            X509v3 Basic Constraints: critical
+                CA:TRUE, pathlen:0
+            X509v3 Extended Key Usage: 
+                TLS Web Client Authentication, TLS Web Server Authentication
+            X509v3 Key Usage: critical
+                Certificate Sign, CRL Sign
+            X509v3 Subject Key Identifier: 
+                56:3E:DA:D2:9A:AA:30:A1:70:75:5A:85:15:FE:2F:8B:F5:86:FF:61
+    Signature Algorithm: sha256WithRSAEncryption
+         39:23:34:6b:dc:54:d8:b0:ce:81:7c:59:5e:03:54:43:c3:28:
+         f7:a8:fd:73:2a:47:7e:d0:0c:29:7b:47:fe:5c:ce:64:dd:08:
+         99:35:91:b8:15:19:b2:b2:0e:6b:37:61:37:44:82:86:77:e0:
+         1f:63:c5:e1:15:e8:97:80:34:c0:cf:58:3c:32:60:d5:1c:9b:
+         14:80:72:cb:ac:d2:66:d4:c3:4b:f9:1a:7f:41:a5:46:ca:66:
+         ac:83:d6:e7:b0:02:a4:78:f4:7f:30:34:ac:33:f9:31:68:b4:
+         8e:a8:7f:2e:e1:64:58:e4:e8:92:48:18:18:15:40:8b:91:8d:
+         6e:a6:aa:80:c3:15:2d:e1:7d:33:46:b7:be:06:be:5e:72:7b:
+         fb:87:fc:9f:1e:74:cd:d8:c7:f9:eb:16:5c:62:28:1c:38:c3:
+         f8:bb:11:06:6f:3f:2b:51:a8:d2:f3:a2:80:87:57:72:f3:98:
+         b8:5d:9d:6e:32:8f:50:9e:12:ab:22:22:68:68:59:0e:99:93:
+         8c:1a:4e:0f:df:7f:0c:35:5c:fa:67:ad:4b:3e:2b:32:c2:10:
+         7f:cf:5e:16:d8:7e:1b:21:d3:ff:7a:0e:19:4a:49:c4:cf:b9:
+         e8:61:61:e3:3b:0f:10:73:28:fe:8e:3b:74:7e:a4:27:7e:d2:
+         67:27:a5:b4:11:e9:29:d9:ef:84:5e:53:d0:9b:1e:a8:2e:7b:
+         70:b4:09:e1:53:26:d9:09:25:e5:fb:e4:95:71:18:8d:22:de:
+         cc:6f:f2:6c:d3:10:8d:7b:1f:72:b0:1b:88:39:c7:5d:a7:46:
+         db:a1:91:ae:66:17:0d:6d:b0:09:b0:a0:89:fc:bf:37:3d:25:
+         67:3d:eb:e8:46:90:95:ac:46:d4:7f:4f:4a:3e:f4:98:96:21:
+         ba:59:f1:dc:96:e3:03:78:e5:74:5a:17:c3:99:a0:1c:45:36:
+         3c:82:01:a2:1b:ff:6f:5b:6a:6f:c4:da:bf:35:3c:05:73:01:
+         6a:ef:f0:57:99:ec:63:ff:dd:32:e2:8b:df:fc:64:10:90:47:
+         58:21:86:90:2f:1b:4c:bf:8b:36:2a:a3:c3:a2:9a:95:31:cb:
+         3a:03:37:c8:71:8f:ff:d8:9b:42:6c:2e:5e:dc:bb:1c:8b:97:
+         cd:97:33:4d:80:8f:db:ad:ec:ac:2a:45:e6:3f:a4:66:c1:17:
+         2d:90:e0:88:f3:b8:d5:fe:36:d6:33:e2:86:1a:bf:d0:e5:01:
+         90:17:da:fa:4a:8a:07:e5:1e:9f:43:45:00:a1:bd:b6:90:13:
+         01:35:d5:0f:59:06:63:b6:a8:3c:78:a6:5b:be:55:70:5e:be:
+         0b:da:72:38:ef:2c:f8:af
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

data/test/data/cert/sub-ca/sub-ca.csr

@@ -0,0 +1,28 @@
+-----BEGIN CERTIFICATE REQUEST-----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=
+-----END CERTIFICATE REQUEST-----

data/test/hexapdf/task/test_optimize.rb

@@ -159,4 +159,30 @@ describe HexaPDF::Task::Optimize do
       assert_equal("10 10 m\nq\nQ\nBI\n/Name 5 ID\ndataEI\n", page.contents)
     end
   end
+
+  describe "prune_page_resources" do
+    it "removes all unused XObject references" do
+      [false, true].each do |compress_pages|
+        page1 = @doc.pages.add
+        page1.resources[:XObject] = {}
+        page1.resources[:XObject][:test] = @doc.add({})
+        page1.resources[:XObject][:used_on_page2] = @doc.add({})
+        page1.resources[:XObject][:unused] = @doc.add({})
+        page1.contents = "/test Do"
+        page2 = @doc.pages.add
+        page2.resources[:XObject] = {}
+        page2.resources[:XObject][:used_on2] = page1.resources[:XObject][:used_on_page2]
+        page2.resources[:XObject][:also_unused] = page1.resources[:XObject][:unused]
+        page2.contents = "/used_on2 Do"
+
+        @doc.task(:optimize, prune_page_resources: true, compress_pages: compress_pages)
+
+        assert(page1.resources[:XObject].key?(:test))
+        assert(page1.resources[:XObject].key?(:used_on_page2))
+        refute(page1.resources[:XObject].key?(:unused))
+        assert(page2.resources[:XObject].key?(:used_on2))
+        refute(page2.resources[:XObject].key?(:also_unused))
+      end
+    end
+  end
 end

data/test/hexapdf/test_dictionary_fields.rb

@@ -173,6 +173,7 @@ describe HexaPDF::DictionaryFields do
 
     it "allows conversion to a Time object from a binary string" do
       refute(@field.convert('test'.b, self))
+      refute(@field.convert('D:01211016165909+00\'64'.b, self))
 
       [
         ["D:1998", [1998, 01, 01, 00, 00, 00, "-00:00"]],

data/test/hexapdf/test_writer.rb

@@ -40,7 +40,7 @@ describe HexaPDF::Writer do
       219
       %%EOF
       3 0 obj
-      <</Producer(HexaPDF version 0.18.0)>>
+      <</Producer(HexaPDF version 0.19.0)>>
       endobj
       xref
       3 1
@@ -72,7 +72,7 @@ describe HexaPDF::Writer do
       141
       %%EOF
       6 0 obj
-      <</Producer(HexaPDF version 0.18.0)>>
+      <</Producer(HexaPDF version 0.19.0)>>
       endobj
       2 0 obj
       <</Length 10>>stream

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: hexapdf
 version: !ruby/object:Gem::Version
-  version: 0.18.0
+  version: 0.19.0
 platform: ruby
 authors:
 - Thomas Leitner
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2021-11-04 00:00:00.000000000 Z
+date: 2021-11-24 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: cmdparse
@@ -434,6 +434,36 @@ files:
 - test/data/aes-test-vectors/CBCVarTxt-192-encrypt.data.gz
 - test/data/aes-test-vectors/CBCVarTxt-256-decrypt.data.gz
 - test/data/aes-test-vectors/CBCVarTxt-256-encrypt.data.gz
+- test/data/cert/create.sh
+- test/data/cert/root-ca/certs/84E66B6F4C359E741C0AFA014790DF39.pem
+- test/data/cert/root-ca/certs/84E66B6F4C359E741C0AFA014790DF3A.pem
+- test/data/cert/root-ca/db/crlnumber
+- test/data/cert/root-ca/db/index
+- test/data/cert/root-ca/db/index.attr
+- test/data/cert/root-ca/db/index.attr.old
+- test/data/cert/root-ca/db/index.old
+- test/data/cert/root-ca/db/serial
+- test/data/cert/root-ca/db/serial.old
+- test/data/cert/root-ca/private/root-ca.key
+- test/data/cert/root-ca/root-ca.conf
+- test/data/cert/root-ca/root-ca.crt
+- test/data/cert/root-ca/root-ca.csr
+- test/data/cert/signature-1-pkcs7-detached.pdf
+- test/data/cert/sub-ca/certs/453FF080E3EDCD6A388D5368DFC320D9.pem
+- test/data/cert/sub-ca/db/crlnumber
+- test/data/cert/sub-ca/db/index
+- test/data/cert/sub-ca/db/index.attr
+- test/data/cert/sub-ca/db/index.old
+- test/data/cert/sub-ca/db/serial
+- test/data/cert/sub-ca/db/serial.old
+- test/data/cert/sub-ca/private/signing.key
+- test/data/cert/sub-ca/private/sub-ca.key
+- test/data/cert/sub-ca/signing.crt
+- test/data/cert/sub-ca/signing.csr
+- test/data/cert/sub-ca/signing.p12
+- test/data/cert/sub-ca/sub-ca.conf
+- test/data/cert/sub-ca/sub-ca.crt
+- test/data/cert/sub-ca/sub-ca.csr
 - test/data/fonts/Ubuntu-Title.ttf
 - test/data/images/cmyk.jpg
 - test/data/images/fillbytes.jpg