RubyGems - hexapdf - Versions diffs - 0.19.0 → 0.20.0 - Mend

hexapdf 0.19.0 → 0.20.0

Files changed (92) hide show

checksums.yaml +4 -4
data/CHANGELOG.md +69 -0
data/data/hexapdf/cert/demo_cert.rb +22 -0
data/data/hexapdf/cert/root-ca.crt +119 -0
data/data/hexapdf/cert/signing.crt +125 -0
data/data/hexapdf/cert/signing.key +52 -0
data/data/hexapdf/cert/sub-ca.crt +125 -0
data/lib/hexapdf/cli/info.rb +21 -1
data/lib/hexapdf/configuration.rb +26 -0
data/lib/hexapdf/content/graphics_state.rb +24 -5
data/lib/hexapdf/content/processor.rb +1 -1
data/lib/hexapdf/document/signatures.rb +327 -0
data/lib/hexapdf/document.rb +26 -0
data/lib/hexapdf/encryption/standard_security_handler.rb +1 -2
data/lib/hexapdf/importer.rb +1 -1
data/lib/hexapdf/layout/style.rb +2 -1
data/lib/hexapdf/object.rb +5 -3
data/lib/hexapdf/parser.rb +21 -9
data/lib/hexapdf/rectangle.rb +0 -6
data/lib/hexapdf/revision.rb +13 -6
data/lib/hexapdf/type/acro_form/appearance_generator.rb +2 -4
data/lib/hexapdf/type/acro_form/field.rb +2 -0
data/lib/hexapdf/type/acro_form/form.rb +9 -1
data/lib/hexapdf/type/annotation.rb +36 -3
data/lib/hexapdf/type/font.rb +5 -0
data/lib/hexapdf/type/font_simple.rb +1 -1
data/lib/hexapdf/type/font_type3.rb +20 -0
data/lib/hexapdf/type/object_stream.rb +3 -1
data/lib/hexapdf/type/signature/adbe_pkcs7_detached.rb +125 -0
data/lib/hexapdf/type/signature/adbe_x509_rsa_sha1.rb +99 -0
data/lib/hexapdf/type/signature/handler.rb +112 -0
data/lib/hexapdf/type/signature/verification_result.rb +92 -0
data/lib/hexapdf/type/signature.rb +236 -0
data/lib/hexapdf/type.rb +1 -0
data/lib/hexapdf/version.rb +1 -1
data/lib/hexapdf/writer.rb +24 -10
data/test/hexapdf/content/test_graphics_state.rb +9 -1
data/test/hexapdf/content/test_operator.rb +8 -3
data/test/hexapdf/content/test_processor.rb +1 -1
data/test/hexapdf/document/test_signatures.rb +225 -0
data/test/hexapdf/encryption/test_standard_security_handler.rb +8 -6
data/test/hexapdf/layout/test_style.rb +11 -0
data/test/hexapdf/test_document.rb +28 -0
data/test/hexapdf/test_object.rb +7 -2
data/test/hexapdf/test_parser.rb +14 -0
data/test/hexapdf/test_rectangle.rb +0 -7
data/test/hexapdf/test_revision.rb +44 -14
data/test/hexapdf/test_writer.rb +44 -14
data/test/hexapdf/type/acro_form/test_field.rb +11 -1
data/test/hexapdf/type/acro_form/test_form.rb +5 -0
data/test/hexapdf/type/signature/common.rb +71 -0
data/test/hexapdf/type/signature/test_adbe_pkcs7_detached.rb +99 -0
data/test/hexapdf/type/signature/test_adbe_x509_rsa_sha1.rb +66 -0
data/test/hexapdf/type/signature/test_handler.rb +76 -0
data/test/hexapdf/type/signature/test_verification_result.rb +47 -0
data/test/hexapdf/type/test_annotation.rb +40 -2
data/test/hexapdf/type/test_font.rb +4 -0
data/test/hexapdf/type/test_font_simple.rb +5 -5
data/test/hexapdf/type/test_font_type3.rb +16 -1
data/test/hexapdf/type/test_object_stream.rb +9 -0
data/test/hexapdf/type/test_signature.rb +131 -0
metadata +21 -33
data/test/data/cert/create.sh +0 -171
data/test/data/cert/root-ca/certs/84E66B6F4C359E741C0AFA014790DF39.pem +0 -119
data/test/data/cert/root-ca/certs/84E66B6F4C359E741C0AFA014790DF3A.pem +0 -125
data/test/data/cert/root-ca/db/crlnumber +0 -1
data/test/data/cert/root-ca/db/index +0 -2
data/test/data/cert/root-ca/db/index.attr +0 -1
data/test/data/cert/root-ca/db/index.attr.old +0 -1
data/test/data/cert/root-ca/db/index.old +0 -1
data/test/data/cert/root-ca/db/serial +0 -1
data/test/data/cert/root-ca/db/serial.old +0 -1
data/test/data/cert/root-ca/private/root-ca.key +0 -52
data/test/data/cert/root-ca/root-ca.conf +0 -65
data/test/data/cert/root-ca/root-ca.crt +0 -119
data/test/data/cert/root-ca/root-ca.csr +0 -28
data/test/data/cert/signature-1-pkcs7-detached.pdf +0 -182
data/test/data/cert/sub-ca/certs/453FF080E3EDCD6A388D5368DFC320D9.pem +0 -125
data/test/data/cert/sub-ca/db/crlnumber +0 -1
data/test/data/cert/sub-ca/db/index +0 -1
data/test/data/cert/sub-ca/db/index.attr +0 -1
data/test/data/cert/sub-ca/db/index.old +0 -0
data/test/data/cert/sub-ca/db/serial +0 -1
data/test/data/cert/sub-ca/db/serial.old +0 -1
data/test/data/cert/sub-ca/private/signing.key +0 -52
data/test/data/cert/sub-ca/private/sub-ca.key +0 -52
data/test/data/cert/sub-ca/signing.crt +0 -125
data/test/data/cert/sub-ca/signing.csr +0 -28
data/test/data/cert/sub-ca/signing.p12 +0 -0
data/test/data/cert/sub-ca/sub-ca.conf +0 -65
data/test/data/cert/sub-ca/sub-ca.crt +0 -125
data/test/data/cert/sub-ca/sub-ca.csr +0 -28

checksums.yaml CHANGED Viewed

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 55ddbf5c737ab446c5793660957e64aaf6f8872c6bb1c4a76ba39a87193b951f
-  data.tar.gz: eb29fbb41cbb20c060c43cc80406bd4b11fa36b0d86a95daa9d1093d060ab89e
+  metadata.gz: afdc2d646f24ddd3dacfb52ddc7b0f0d1de9dfdaff138e615a2126e16c86d1f4
+  data.tar.gz: 482f839f70fe4f68d9006f3e8db7427a27d9fbc7a71da219da63653ddfeedb3a
 SHA512:
-  metadata.gz: 28368cd415cd9adf28050df8812a0cda999b8140fcba4a9f307d7e37f6dc0254d99abf5173a81a1b2b59f9f6a658a46f6998d7834b93ffc19840d578e507ce92
-  data.tar.gz: b25e409653a4bd9359f3a39c2920187261a43151942c4120d2bd818886dbf236f77483a42ca7a7fb39ffbcdfc7da8cf9d7a87609a4f4af514cf7f93f495eb5ed
+  metadata.gz: 40c32b6df0f349e3f071e54b37fd546f1c87aef0fd645b9990b5e3b6cfa1c5c0bedb734bbc91b3fb09d968f95fdd8e6b78be004383920583cf91f920aa1623ea
+  data.tar.gz: e9f3f0a0fa0850e2adb308999d2edd7561ecf1871cbd7b2e244ff6f9144b97466a24afa7ebdadb9f27fc8fcb7964ddd913dc3a41c0b46aed01fd10bc4e26c92a

data/CHANGELOG.md CHANGED Viewed

@@ -1,3 +1,72 @@
+## 0.20.0 - 2021-12-30
+### Added
+* Support for signing a PDF using a digital signature
+* Support for reading and validating digital signatures
+* Output info regarding digital signatures when using the `hexapdf info` command
+* [HexaPDF::Type::AcroForm::Form#create_signature_field] for adding signature
+  fields
+* [HexaPDF::Type::Annotation::AppearanceDictionary#set_appearance] for setting
+  the appearance stream
+* [HexaPDF::Type::Annotation#create_appearance] for creating an empty appearance
+  stream
+### Changed
+* **Breaking change**: Method signature of
+  [HexaPDF::Type::Annotation#appearance] changed
+* [HexaPDF::Object#==] to allow comparison to simple value if not indirect
+* [HexaPDF::Type::AcroForm::Form] to use an empty array as default for the
+  /Fields field
+* [HexaPDF::Type::ObjectStream] to not store signature fields in object streams
+* [HexaPDF::Writer] to return the last written cross-reference section
+* [HexaPDF::Type::AcroForm::Field#create_widget] to automatically set the print
+  flag and assign the page
+### Fixed
+* Incremental writing of files in cases where object streams were deleted (e.g.
+  when using the `optimize: true` argument when writing)
+* Comparison of non-indirect [HexaPDF::Object] instances with other
+  HexaPDF::Object instances
+* Deleting of objects via [HexaPDF::Revision#delete] to re-use the
+  [HexaPDF::PDFData] object of the deleted object when using
+  `mark_as_free: true`
+* [HexaPDF::Revision#each_modified_object] to work correctly for dictionary
+  objects even if a value is changed only by reading it
+## 0.19.3 - 2021-12-14
+### Fixed
+* Handling of invalid files where the "startxref" keyword and its value are on
+  the same line
+## 0.19.2 - 2021-12-14
+### Fixed
+* Set the trailer's ID field to an array of two empty strings when decrypting in
+  case it is missing
+* Incremental writing when one of the existing revisions contains a
+  cross-reference stream
+## 0.19.1 - 2021-12-12
+### Added
+* [HexaPDF::Type::FontType3#bounding_box] to fix content stream processing error
+### Fixed
+* Calculation of scaled font size for [HexaPDF::Content::GraphicsState] and
+  [HexaPDF::Layout::Style] when Type3 fonts are used
 ## 0.19.0 - 2021-11-24
 ### Added

data/data/hexapdf/cert/demo_cert.rb ADDED Viewed

@@ -0,0 +1,22 @@
+require 'hexapdf'
+require 'openssl'
+DemoCertData = Struct.new(:key, :cert, :sub_ca, :root_ca)
+module HexaPDF
+  class << self
+    attr_reader :demo_cert
+  end
+  cert_file = File.join(__dir__, 'signing.crt')
+  key_file = File.join(__dir__, 'signing.key')
+  sub_ca_cert_file = File.join(__dir__, 'sub-ca.crt')
+  root_ca_cert_file = File.join(__dir__, 'root-ca.crt')
+  @demo_cert = DemoCertData.new(OpenSSL::PKey::RSA.new(File.read(key_file)),
+                                OpenSSL::X509::Certificate.new(File.read(cert_file)),
+                                OpenSSL::X509::Certificate.new(File.read(sub_ca_cert_file)),
+                                OpenSSL::X509::Certificate.new(File.read(root_ca_cert_file)))
+end

data/data/hexapdf/cert/root-ca.crt ADDED Viewed

@@ -0,0 +1,119 @@
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number:
+            90:c2:b5:e9:6a:fd:70:e4:55:b0:6e:c8:5d:4b:c2:66
+        Signature Algorithm: sha256WithRSAEncryption
+        Issuer: C=AT, O=HexaPDF, CN=HexaPDF Demo Root CA
+        Validity
+            Not Before: Dec 22 08:24:17 2021 GMT
+            Not After : Nov 28 08:24:17 2121 GMT
+        Subject: C=AT, O=HexaPDF, CN=HexaPDF Demo Root CA
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                RSA Public-Key: (4096 bit)
+                Modulus:
+                    00:b9:f8:13:06:0a:29:d2:8e:0a:29:e5:0b:65:c9:
+                    74:f8:b0:ca:4f:39:6c:46:4c:4e:41:a7:a5:f9:9a:
+                    27:f2:1e:4c:bb:36:c2:d2:3a:6e:c7:89:cf:08:62:
+                    96:48:9f:bb:60:3c:cf:e3:e3:0e:1c:d7:54:89:c5:
+                    27:b2:8a:da:a7:bb:e7:2a:29:76:53:bd:8d:36:8e:
+                    ab:e1:63:74:48:b9:6f:ac:1a:2f:4e:4a:9b:8f:70:
+                    d3:2d:19:c3:85:26:21:4f:6d:c3:1c:a7:63:6e:ae:
+                    00:ad:93:4e:57:fe:29:1b:80:bc:52:bf:6d:aa:a7:
+                    dc:3f:a3:40:3e:d0:22:ca:c3:cd:1e:d2:72:01:82:
+                    f0:a2:a9:66:bf:e3:7b:6c:6a:d6:f3:c1:75:ab:0c:
+                    9c:93:3e:11:bf:8d:ee:33:9b:95:9e:e9:df:55:23:
+                    17:94:fc:10:6f:69:a4:e0:0b:37:92:1f:2b:bf:07:
+                    14:f8:16:cd:d9:b7:80:df:a8:d8:34:49:77:ee:0e:
+                    3d:4f:3c:7d:fb:95:ff:d5:8a:63:a1:cf:d9:e4:3d:
+                    39:b3:7c:e7:8c:d5:28:f4:bb:c4:70:ca:d9:8b:a9:
+                    39:09:8e:bf:7a:b1:5e:d1:76:1f:a7:66:9b:03:70:
+                    15:47:10:58:06:e0:b7:c0:28:b9:7b:70:91:bf:7d:
+                    00:12:bc:98:0b:f8:a7:74:f5:3f:ac:18:39:20:bb:
+                    5a:11:2d:e4:04:49:8b:8b:77:f8:5a:2f:e2:58:e4:
+                    22:2e:6c:b6:22:3e:b4:c7:71:6a:48:31:78:71:47:
+                    ec:8b:2f:26:86:cd:6d:cc:2c:64:b8:6b:a6:68:10:
+                    f9:3a:35:36:6d:a3:1e:b6:e3:40:b8:0b:88:29:52:
+                    45:85:65:9a:fe:0a:63:16:97:46:46:ac:cc:2d:32:
+                    d6:79:cc:2a:94:58:2c:1d:35:b7:1d:42:03:32:73:
+                    dd:91:23:6d:15:17:d0:b6:bb:66:b4:f1:a8:9d:ff:
+                    e4:54:fa:7f:56:50:5c:e7:7c:2d:c0:1d:36:29:10:
+                    f0:9e:44:4e:c8:3b:93:53:26:ce:fc:0e:be:8c:3a:
+                    a8:2d:7f:b9:93:70:7c:b2:35:43:be:74:e9:53:f5:
+                    b6:a5:bc:b2:11:e7:d7:e2:6f:92:a9:54:bd:b7:d8:
+                    93:a1:24:0b:2f:4a:a6:92:67:95:03:c0:3b:37:b4:
+                    aa:e6:36:7b:a5:2b:e0:5b:2f:a4:27:6b:52:e7:c0:
+                    2e:6e:b1:21:5b:3e:b1:2b:e1:cb:ad:c3:bb:8c:6b:
+                    f8:1b:8b:08:e3:c9:91:b8:11:6c:76:1b:2c:26:70:
+                    4d:e4:ff:8b:c7:6a:fe:db:c1:c7:85:dc:e4:cd:35:
+                    94:d5:2d
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Basic Constraints: critical
+                CA:TRUE
+            X509v3 Key Usage: critical
+                Certificate Sign, CRL Sign
+            X509v3 Subject Key Identifier:
+                B0:45:1A:51:FB:96:CE:62:C7:FD:5E:73:CF:F9:9A:E0:71:F8:AC:61
+    Signature Algorithm: sha256WithRSAEncryption
+         77:65:4e:a4:e0:e2:09:ae:fb:e8:6f:80:a9:4b:1c:53:5c:48:
+         db:ee:02:3a:f9:28:16:a8:7d:31:14:be:95:0d:48:1a:9e:de:
+         b5:fa:21:75:de:b0:da:c0:32:00:fc:4f:eb:bf:68:08:80:e2:
+         33:15:4f:36:8b:05:3a:6d:20:57:64:7f:02:7a:a3:b8:ab:4d:
+         44:b4:4e:1c:58:f7:96:15:ec:09:b9:8b:d0:f5:20:d3:7a:ef:
+         e0:54:63:8d:d5:1e:51:55:f5:a0:4f:4c:35:9e:60:11:14:2b:
+         44:85:ee:5d:da:d8:c2:b2:44:04:b9:e6:20:21:4f:b9:01:60:
+         7e:7b:98:07:75:6d:8c:68:11:4f:f6:0b:18:5e:d6:1a:30:db:
+         e5:9a:66:c3:cb:97:5d:4e:41:87:35:29:2c:0e:b1:cf:37:d2:
+         b8:bd:04:74:c3:46:0b:90:68:fb:d1:a9:5c:ef:44:06:af:41:
+         db:fb:16:99:4e:97:dd:f6:71:f5:e6:fe:c0:a8:aa:68:4c:17:
+         9c:a0:58:db:3f:35:75:aa:d0:e3:00:f1:21:e5:45:93:29:49:
+         a5:af:15:e1:b0:63:5f:e3:69:fc:80:d7:c5:c9:df:33:ab:28:
+         83:57:12:c7:16:c4:88:96:bb:d4:67:4b:7d:06:ab:9e:15:ad:
+         6d:84:bf:77:0b:2d:c4:a4:52:5b:b7:a1:dd:50:10:49:24:a2:
+         36:ef:d4:13:72:47:81:c9:84:34:ce:0b:fe:2e:26:cf:52:eb:
+         59:27:86:f3:72:26:02:05:d1:c6:51:8c:b1:5b:fd:30:54:f9:
+         9b:38:b0:f0:d2:8f:a3:7f:3d:5c:76:04:76:62:f1:d1:a4:96:
+         17:2d:d8:a9:df:7d:1f:03:73:67:05:66:3d:e5:9e:64:55:3c:
+         17:30:39:ac:db:7c:94:1e:d4:71:5f:d3:75:5f:fa:98:53:89:
+         9d:f6:32:e4:c8:79:26:f3:7b:2d:af:76:5b:38:c0:1f:f8:49:
+         c7:b2:e4:9c:d9:ea:98:24:9c:60:d4:bb:65:66:ce:90:70:29:
+         a2:c9:04:e9:fc:b9:4e:6a:bb:02:ce:a3:7e:b5:b2:a0:d1:12:
+         48:57:a6:73:8b:b4:9b:10:6e:76:5f:bc:1b:e3:29:cf:4a:0e:
+         0d:cc:9d:bb:23:2d:e3:37:7a:92:53:38:8c:54:d5:7a:d8:90:
+         70:f5:c6:ce:c8:1c:01:fd:47:0e:21:20:e9:19:b4:a5:ce:cb:
+         d1:29:17:1a:1c:be:6f:43:6d:d0:75:5e:01:49:2c:46:c9:9e:
+         f6:41:54:e8:17:aa:ae:07:fb:7b:16:1f:de:ee:f6:da:65:3e:
+         d0:84:2c:c2:0e:63:e8:42
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

data/data/hexapdf/cert/signing.crt ADDED Viewed

@@ -0,0 +1,125 @@
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number:
+            86:b1:44:1b:63:e9:10:bb:4e:ca:53:53:c0:69:cb:89
+        Signature Algorithm: sha256WithRSAEncryption
+        Issuer: C=AT, O=HexaPDF, CN=HexaPDF Demo Subordinate CA
+        Validity
+            Not Before: Dec 22 08:24:19 2021 GMT
+            Not After : Nov 28 08:24:19 2121 GMT
+        Subject: C=AT, O=HexaPDF, CN=HexaPDF Demo Certifcate
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                RSA Public-Key: (4096 bit)
+                Modulus:
+                    00:c8:72:46:f4:29:42:13:1c:b7:a3:17:5d:d3:ee:
+                    08:42:3d:30:3a:ea:94:74:b5:8d:75:31:b3:a3:4d:
+                    c2:6b:56:07:dc:8f:a0:fe:ec:4f:a6:18:df:8b:84:
+                    5b:ad:0d:00:c4:d4:dd:bf:bc:49:c7:05:98:c0:3c:
+                    8d:25:7d:2b:22:c4:4b:f4:be:46:f5:47:94:76:14:
+                    2e:bf:01:c5:e6:8f:00:1b:b2:de:0b:17:b1:44:30:
+                    26:4e:99:49:29:1a:e8:d4:72:bb:3c:b8:ed:60:2b:
+                    f7:a4:df:27:c9:56:58:a0:1f:88:18:2a:0b:91:fd:
+                    79:d0:74:2a:b4:c6:23:9c:f6:ad:41:35:71:06:fc:
+                    71:b7:c4:40:b8:57:46:79:5b:8f:78:c2:c0:87:0a:
+                    ab:e5:57:4e:83:a7:0f:44:9c:d8:3b:42:d7:0f:e8:
+                    91:ee:51:0b:bf:e6:70:9d:13:f4:86:ff:2c:bb:cb:
+                    2e:e2:5e:66:d5:68:d4:9e:ce:a4:60:98:e2:ed:61:
+                    83:c7:96:33:42:93:5b:78:e1:e1:59:90:bb:c4:ae:
+                    45:12:a3:14:6a:a7:34:13:94:f5:4b:4d:fc:85:77:
+                    34:49:9b:b4:07:ac:a4:89:80:4e:6a:2c:aa:f3:b4:
+                    9d:df:33:e1:4c:05:a3:97:f9:3f:bf:0a:da:bc:19:
+                    d6:01:dc:a0:98:a7:19:f4:73:c9:d4:9f:ea:e8:6c:
+                    60:6e:01:bb:fc:7a:f4:a8:16:43:16:c9:12:f5:09:
+                    57:7e:c0:c6:96:9d:69:fe:e8:76:f5:12:e5:e3:7b:
+                    55:f9:69:d9:23:aa:b7:25:83:42:50:7f:26:11:2b:
+                    a6:d1:eb:40:6a:37:29:59:6f:53:4c:5b:dd:b2:21:
+                    1f:19:a5:c8:a5:d2:b2:c9:5f:c0:c4:e8:1f:d5:b4:
+                    5b:f1:46:53:18:69:21:01:63:b9:96:d4:ae:22:9b:
+                    ed:c0:95:82:da:56:68:67:d1:a1:65:d9:3c:3b:ec:
+                    7f:ce:21:41:cf:48:e3:ed:1f:45:79:ec:8a:03:8e:
+                    51:34:e0:e2:02:68:62:c7:9b:53:5b:09:26:e7:68:
+                    70:57:85:05:da:e1:ba:12:06:90:75:77:0f:5a:e5:
+                    f1:12:a5:79:51:82:e0:b1:91:74:30:9f:10:b9:2a:
+                    b8:19:d5:37:7a:1d:cb:b3:16:15:b6:39:0e:b2:86:
+                    52:6b:8d:f9:46:e1:bc:f0:87:57:45:11:82:dc:85:
+                    85:16:5e:e7:eb:97:08:79:1d:2a:81:79:a5:6b:9e:
+                    55:f1:a7:35:1a:a7:aa:89:d1:bf:d0:b8:3b:15:40:
+                    f6:25:01:62:d9:be:40:71:75:03:f3:c3:72:54:d7:
+                    50:8d:07
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Authority Key Identifier:
+                keyid:44:00:ED:DC:BF:56:82:17:0B:8A:0B:77:AF:68:B1:3B:18:51:DD:0E
+            X509v3 Basic Constraints: critical
+                CA:FALSE
+            X509v3 Extended Key Usage:
+                TLS Web Client Authentication
+            X509v3 Key Usage: critical
+                Digital Signature
+            X509v3 Subject Key Identifier:
+                CB:03:E6:4E:5F:E5:2B:AA:C8:6D:CA:1C:2E:A7:F4:4C:2E:C9:8B:02
+    Signature Algorithm: sha256WithRSAEncryption
+         05:43:fe:bb:57:66:bf:18:ae:95:df:9e:fb:39:bd:1f:4b:e3:
+         e4:e3:07:f5:60:f0:1e:31:5b:df:31:76:3b:77:11:7d:dc:b1:
+         99:b0:aa:41:6a:7b:ae:8a:2b:78:ca:17:87:7a:38:bb:7d:1a:
+         5a:bd:c4:17:9b:15:af:6a:b9:19:a9:c1:b8:c9:ce:07:93:b9:
+         ec:6b:e2:f1:65:fc:61:a0:e0:c6:77:64:01:2b:48:56:81:4d:
+         c8:2d:ed:60:fd:fe:4d:bd:86:14:53:6d:db:d6:77:eb:ed:29:
+         28:82:ec:7a:44:82:8b:2b:83:be:70:95:08:21:f2:40:56:8e:
+         fa:4e:95:6e:fb:48:72:33:fb:76:bb:c1:3e:32:95:c3:95:25:
+         02:9c:15:1d:dd:bb:53:da:35:46:2c:bd:51:79:4e:ac:0e:35:
+         98:f8:8f:f9:c4:dd:41:c7:c5:ef:c8:b5:8f:f8:b2:03:f0:ae:
+         4a:38:84:76:7c:e4:ad:b0:ce:c8:87:8e:57:25:cc:9b:ff:0b:
+         de:85:c6:7b:82:2a:cf:d6:18:7a:bd:2f:96:57:7f:72:c6:53:
+         d2:cf:0f:14:23:87:ab:0b:8a:7c:87:c3:32:ba:54:5b:50:08:
+         bf:a8:8d:5a:cb:6f:7e:aa:2a:3a:06:58:a8:aa:f8:74:ad:c7:
+         85:f7:7d:4f:9f:5c:b7:16:61:35:75:4f:cc:bc:4c:ca:fa:15:
+         46:1f:dc:c3:b9:59:de:9e:13:fb:dc:9d:71:21:ef:7b:68:20:
+         21:50:2c:50:a4:e7:b6:dc:cc:72:34:df:d5:72:a1:23:c4:34:
+         0b:29:5f:7d:ed:b3:1e:3c:e0:88:8f:7f:b3:5d:e8:68:96:63:
+         05:d7:c0:2c:eb:0d:10:cf:b2:69:6f:d6:db:22:c5:71:90:17:
+         de:5b:b9:5e:22:dc:94:40:ad:8c:29:45:00:5b:93:39:0e:6b:
+         49:5f:c1:d8:7b:e9:05:03:1f:42:97:94:2c:c9:0c:c3:41:02:
+         aa:26:02:42:94:03:18:44:c4:2b:cd:a2:54:eb:9c:6a:04:9b:
+         f3:45:75:ff:8f:38:0c:a9:91:b1:c2:ff:34:d9:d6:2a:5f:4f:
+         74:a7:0c:96:df:8a:59:f2:ff:66:79:90:1b:f9:c6:88:99:b5:
+         e9:46:27:ea:00:95:e6:92:2c:ab:1e:d2:7a:80:55:8c:fc:fa:
+         8d:6c:db:42:1e:c0:26:e8:f8:8c:a2:85:bd:4a:37:ca:5a:56:
+         f4:fe:91:d8:81:c8:b9:69:22:53:52:8a:1e:7e:df:c2:70:d6:
+         7a:b7:4b:89:6e:4e:f3:6a:22:d1:2a:53:17:df:b7:29:68:4a:
+         e0:7d:a9:fb:43:ad:34:b0
+-----BEGIN CERTIFICATE-----
+MIIFiDCCA3CgAwIBAgIRAIaxRBtj6RC7TspTU8Bpy4kwDQYJKoZIhvcNAQELBQAw
+RTELMAkGA1UEBhMCQVQxEDAOBgNVBAoMB0hleGFQREYxJDAiBgNVBAMMG0hleGFQ
+REYgRGVtbyBTdWJvcmRpbmF0ZSBDQTAgFw0yMTEyMjIwODI0MTlaGA8yMTIxMTEy
+ODA4MjQxOVowQTELMAkGA1UEBhMCQVQxEDAOBgNVBAoMB0hleGFQREYxIDAeBgNV
+BAMMF0hleGFQREYgRGVtbyBDZXJ0aWZjYXRlMIICIjANBgkqhkiG9w0BAQEFAAOC
+Ag8AMIICCgKCAgEAyHJG9ClCExy3oxdd0+4IQj0wOuqUdLWNdTGzo03Ca1YH3I+g
+/uxPphjfi4RbrQ0AxNTdv7xJxwWYwDyNJX0rIsRL9L5G9UeUdhQuvwHF5o8AG7Le
+CxexRDAmTplJKRro1HK7PLjtYCv3pN8nyVZYoB+IGCoLkf150HQqtMYjnPatQTVx
+Bvxxt8RAuFdGeVuPeMLAhwqr5VdOg6cPRJzYO0LXD+iR7lELv+ZwnRP0hv8su8su
+4l5m1WjUns6kYJji7WGDx5YzQpNbeOHhWZC7xK5FEqMUaqc0E5T1S038hXc0SZu0
+B6ykiYBOaiyq87Sd3zPhTAWjl/k/vwravBnWAdygmKcZ9HPJ1J/q6GxgbgG7/Hr0
+qBZDFskS9QlXfsDGlp1p/uh29RLl43tV+WnZI6q3JYNCUH8mESum0etAajcpWW9T
+TFvdsiEfGaXIpdKyyV/AxOgf1bRb8UZTGGkhAWO5ltSuIpvtwJWC2lZoZ9GhZdk8
+O+x/ziFBz0jj7R9FeeyKA45RNODiAmhix5tTWwkm52hwV4UF2uG6EgaQdXcPWuXx
+EqV5UYLgsZF0MJ8QuSq4GdU3eh3LsxYVtjkOsoZSa435RuG88IdXRRGC3IWFFl7n
+65cIeR0qgXmla55V8ac1GqeqidG/0Lg7FUD2JQFi2b5AcXUD88NyVNdQjQcCAwEA
+AaN1MHMwHwYDVR0jBBgwFoAURADt3L9WghcLigt3r2ixOxhR3Q4wDAYDVR0TAQH/
+BAIwADATBgNVHSUEDDAKBggrBgEFBQcDAjAOBgNVHQ8BAf8EBAMCB4AwHQYDVR0O
+BBYEFMsD5k5f5SuqyG3KHC6n9EwuyYsCMA0GCSqGSIb3DQEBCwUAA4ICAQAFQ/67
+V2a/GK6V3577Ob0fS+Pk4wf1YPAeMVvfMXY7dxF93LGZsKpBanuuiit4yheHeji7
+fRpavcQXmxWvarkZqcG4yc4Hk7nsa+LxZfxhoODGd2QBK0hWgU3ILe1g/f5NvYYU
+U23b1nfr7Skogux6RIKLK4O+cJUIIfJAVo76TpVu+0hyM/t2u8E+MpXDlSUCnBUd
+3btT2jVGLL1ReU6sDjWY+I/5xN1Bx8XvyLWP+LID8K5KOIR2fOStsM7Ih45XJcyb
+/wvehcZ7girP1hh6vS+WV39yxlPSzw8UI4erC4p8h8MyulRbUAi/qI1ay29+qio6
+Blioqvh0rceF931Pn1y3FmE1dU/MvEzK+hVGH9zDuVnenhP73J1xIe97aCAhUCxQ
+pOe23MxyNN/VcqEjxDQLKV997bMePOCIj3+zXeholmMF18As6w0Qz7Jpb9bbIsVx
+kBfeW7leItyUQK2MKUUAW5M5DmtJX8HYe+kFAx9Cl5QsyQzDQQKqJgJClAMYRMQr
+zaJU65xqBJvzRXX/jzgMqZGxwv802dYqX090pwyW34pZ8v9meZAb+caImbXpRifq
+AJXmkiyrHtJ6gFWM/PqNbNtCHsAm6PiMooW9SjfKWlb0/pHYgci5aSJTUooeft/C
+cNZ6t0uJbk7zaiLRKlMX37cpaErgfan7Q600sA==
+-----END CERTIFICATE-----

data/data/hexapdf/cert/signing.key ADDED Viewed

@@ -0,0 +1,52 @@
+-----BEGIN PRIVATE KEY-----
+MIIJQgIBADANBgkqhkiG9w0BAQEFAASCCSwwggkoAgEAAoICAQDIckb0KUITHLej
+F13T7ghCPTA66pR0tY11MbOjTcJrVgfcj6D+7E+mGN+LhFutDQDE1N2/vEnHBZjA
+PI0lfSsixEv0vkb1R5R2FC6/AcXmjwAbst4LF7FEMCZOmUkpGujUcrs8uO1gK/ek
+3yfJVligH4gYKguR/XnQdCq0xiOc9q1BNXEG/HG3xEC4V0Z5W494wsCHCqvlV06D
+pw9EnNg7QtcP6JHuUQu/5nCdE/SG/yy7yy7iXmbVaNSezqRgmOLtYYPHljNCk1t4
+4eFZkLvErkUSoxRqpzQTlPVLTfyFdzRJm7QHrKSJgE5qLKrztJ3fM+FMBaOX+T+/
+Ctq8GdYB3KCYpxn0c8nUn+robGBuAbv8evSoFkMWyRL1CVd+wMaWnWn+6Hb1EuXj
+e1X5adkjqrclg0JQfyYRK6bR60BqNylZb1NMW92yIR8Zpcil0rLJX8DE6B/VtFvx
+RlMYaSEBY7mW1K4im+3AlYLaVmhn0aFl2Tw77H/OIUHPSOPtH0V57IoDjlE04OIC
+aGLHm1NbCSbnaHBXhQXa4boSBpB1dw9a5fESpXlRguCxkXQwnxC5KrgZ1Td6Hcuz
+FhW2OQ6yhlJrjflG4bzwh1dFEYLchYUWXufrlwh5HSqBeaVrnlXxpzUap6qJ0b/Q
+uDsVQPYlAWLZvkBxdQPzw3JU11CNBwIDAQABAoICACWTttWC/o4SriJ2+PIIB6hT
+TD1fSKFwf6pevOx6YV457JNeobHony3mL9I55+3TKDe+KCwPok0bMX2oXFWQ14tW
+/V5OZYMJ/jz8n57TOER2vnBy4cl2kZbU5/mIJvz7vHZHY+6IRIfo9i4EX7MQ6uBp
+yNuu1ihyOmnnvTHSi06bt/Mnj57dqHvo4LEuO1n43janW+x1BbCi42cu5F/af3bs
+muCymtjwfKFnE+l+mjLMl5hFCO8K/4A2fNWgq5QoVTJnO4spD0cF1Poebl6aEXlX
+qj9KL0OnQM4C+NE7N4HVzQmXlPJzXQ0h7pFc+ldhns7/LNdRn0+YPGkWIddtiH7P
+V9OS7L/pYKs5gNKfU27H+YZhjpuYjKWoYOfdBs9dPQtfSCXlB2HRq56bpEQ26Bt6
+KTIA3ThByz+iwA/BFNRYaVCE5U5BkRJI7T8l6d2hiZ3dEXaC05j0EbsrZNQVnzns
+jNGUP7brS4ilVDms7f2c9iUjP95SnGbUD20xRVaUTrXZy4//8Hi6KlLCgrV4qQBr
+cVqlkbKaWoGXVUOUYE1vVd+ufDg5ORsbu+rlOLxnsCgsX6S8lfM5pjuql111Ocgf
+QGqRdReVcvaVMZzvos74WNzPBNHk8WdJIvrr03G6c82PBqAsCTiTz7DEB7D4EHVz
+jiPX/7J7P25R0c3cW+BRAoIBAQD+nkGhR6hykbCElZdtuYBkl67zmxPnbKxhf8U1
+67i9+o0961T3L3OLhqmbIyWIgqa34VsS9Z1r7WtRxNEArKYPl5LKj36luBXH4w/9
+LHaF+kYMkCCW6H3Vv1OxW3ixr6gAutauCWsCy+z/DbIYVxvIbgO1hwIblb25OUVC
+TC6eEjK4OqBrL69EJwIZDXpRPUYtR89D+KAh+FdgZ3kktaJRsr+/ZKDSmaRHZZqh
+JJAq+Ud5IwIhXj/jGEN/cEZJUhRA5cZilGBoYW8TP4F1JEXSr4K2zsHG+yPfaz4V
+LTLlccw3i7sQr28rskY+I6lk3CgcXmpKhFxUU4gEaua4bkVtAoIBAQDJiMJmSeyH
+OqD/npNgoAzBmYXZQmJml3FXujApIRYl4Kb5p6VgJVDqZliwFtN7EIKm+bW5yTzz
+j0yA1T2xrkhRH/zwkpAu7jrVLl4F7//jQsxH6Rjp3R/zZH9NtKpgJriy03L9vB0C
+o86m+93UzrEIVKL++P7r51NIWzF0hCkniKnrD3bmnHyDnwTgaNjd7w15MYXEHIgA
+zivT3CRplnFN4ftIo7muLGP+nb+xREyjq8NHfFC/q2P+k9HrriVez/fjpbMspsOq
+WqE/Py86MTGTH9CV77iMmO8r8m/iBiuuO4kEuUSHqF6YtjkYMOeX5N1Dn+PNLOyZ
+9fDzPkdxvHfDAoIBAQCkp5jPgDSJaneZNdfISDakVob32Chl9xv+rQ7OUNKWYImo
+KiA2/YOeDgZuYasq/TptHRm1SAp2OgG1zi5OXlfBK4bs4SDIcCP9sHOtiGxZNcDI
+7Qd2L4D4khLAVePWHD7rweeEgmimVVO8mJG8NdCsq6BQaq9NQWeAeW21cuiOpjwQ
+cTE+P4b67rLnmpSoJpTUQWTiksyTSzLOD/wCZkdCx/JCBgQOTPc0iJsXbDqi37N9
+vcrp4zYzWISFzAhX7/FTCoRhSYyS07dt3hqMs1lH5uID7+7WC6BmIcbzENiiEhY7
+MWxWXOzqeA3+rzcjF1AFEHVyHOhMS/xgxvTO/dh9AoIBAET79BcRXM5ZKjz1adsc
+TeGDDIb2qzoUwq5VxCB/+9XRVTaFxRzpCQ6DI/56gb9RQnenaCYFFUEFnxlGZMzK
+LGTgfzNV59a4oxjPu01q/nsrJUPELUv37fThRJYzrlIlTvmfWXAzEPcTXSxZcHBk
+o8KHPhfq4U+cqixNUttgVbn7lLYqX/fGPvTK3N935CvrpQAEDJa5cXBdIjFt3GTs
+IzKWlO4jZO6SsVO5aaFjEJzBsaFpkzZYk2zT6noy7QXMSDz7Ph6dosJQLXu5xA+2
+QRLsQ/jeypwNyWiQnu2OUStdo6QjSqro3iCF13tJWizrITYBp/dWVlLJFcYdXlU3
+PwMCggEARmudKubIaDNgjWyOOgOwF9rZk/I+bEeh4YZHB8UAMJ5Kzqcgi8eFWaPI
+HMvGRzssftU9ZC3lCbsMM8g3sEkILKMk7alQ++G0EprtpZ7/z7yvYur2oZUxaXzT
+9qdn2stGPeD994BC+SbZqfM3li5Jkxqha+FLFUBaR2OIUomNeanubJk2NOroty26
+7M+WIJqSTNqRi+HZVsvd3v8uInE/epcQwEh/ZiFa2h9tjxMZLw/+Pj78kXotNFVt
+mvyisPO2dFyl6oCpyhS/uwuR2wmcIKhVbIcBx9vOWkO8i2CCjTcU1WSWGzZegYso
+P5BZdi+tRIj8RCULp7mURlkyRLPdaw==
+-----END PRIVATE KEY-----

data/data/hexapdf/cert/sub-ca.crt ADDED Viewed

@@ -0,0 +1,125 @@
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number:
+            90:c2:b5:e9:6a:fd:70:e4:55:b0:6e:c8:5d:4b:c2:67
+        Signature Algorithm: sha256WithRSAEncryption
+        Issuer: C=AT, O=HexaPDF, CN=HexaPDF Demo Root CA
+        Validity
+            Not Before: Dec 22 08:24:19 2021 GMT
+            Not After : Nov 28 08:24:19 2121 GMT
+        Subject: C=AT, O=HexaPDF, CN=HexaPDF Demo Subordinate CA
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                RSA Public-Key: (4096 bit)
+                Modulus:
+                    00:bf:a7:a2:ca:a2:32:ff:e4:8c:83:9f:26:85:ec:
+                    ac:d3:d9:5c:f0:23:9a:34:1d:db:51:d2:03:90:21:
+                    e7:0e:24:59:9b:79:7a:5d:3a:b6:52:95:cf:99:0d:
+                    5f:eb:25:8c:2f:1b:af:6b:ab:ea:e4:96:db:b3:4a:
+                    64:dd:fc:1f:9e:ba:47:c3:cf:5b:a9:47:3c:f6:e5:
+                    4b:2e:15:d9:98:53:69:43:72:05:cc:ce:02:4e:21:
+                    c6:38:5a:22:29:4b:18:b4:75:bb:a3:75:bf:e0:c3:
+                    fe:80:42:7c:2e:98:18:de:ec:4e:34:95:a5:e5:fd:
+                    91:0a:68:d2:7c:23:13:22:66:ef:e2:04:d1:ab:59:
+                    d1:5b:dd:ab:f3:4d:4a:11:78:dd:74:7d:7d:b6:77:
+                    6d:6b:02:97:d8:6f:a8:dc:0c:81:ec:a8:09:18:b5:
+                    7e:dd:02:a3:1f:78:81:a3:9a:a7:38:5f:2e:18:bb:
+                    c7:39:fd:bc:95:bb:4d:88:04:8f:61:e5:b8:28:4c:
+                    a5:7d:25:dc:3c:00:d9:db:3c:1a:37:05:2f:69:60:
+                    a2:f9:95:7d:98:56:cf:cd:c3:49:a0:20:54:b9:72:
+                    e0:8c:1c:e9:0a:7a:43:d4:b1:af:2c:09:84:e3:b6:
+                    45:6b:42:ec:27:24:e3:11:78:f1:cd:2b:44:87:63:
+                    19:cf:f2:22:93:f0:64:ba:f6:74:4e:9e:26:de:93:
+                    b8:74:0f:ef:82:5c:de:26:ab:31:af:b7:fe:6b:b1:
+                    4e:4d:95:df:c6:02:ca:8c:f8:ca:c2:ca:dc:16:58:
+                    f0:67:a0:d1:c2:a0:dc:3e:23:91:a1:c7:5e:7f:ee:
+                    8f:43:d5:d9:2c:fb:9a:a6:ce:69:67:01:f7:55:f1:
+                    e3:7c:49:9f:48:e9:79:e6:1e:21:88:37:85:91:09:
+                    2b:9b:27:12:90:4d:42:bc:a0:04:15:51:72:2b:97:
+                    bb:05:73:ff:b8:f9:c1:6e:4a:b6:ca:75:db:d3:25:
+                    43:cf:f1:4d:cc:ad:16:6b:4b:1a:31:10:78:2a:ac:
+                    53:b3:c7:08:dd:d0:f6:65:d5:73:59:cb:27:f2:fb:
+                    5a:70:c9:45:85:89:43:91:75:0c:9c:36:c2:89:5b:
+                    c5:86:0a:1b:c1:d7:1b:67:5f:06:d4:56:a0:c0:46:
+                    e1:d7:91:0e:c0:bb:e5:20:77:d1:bb:fc:86:f2:e9:
+                    8d:11:61:88:56:6f:0e:93:82:c3:09:4f:19:60:4c:
+                    75:36:b7:17:e6:31:e8:fd:65:2d:16:22:4f:c0:26:
+                    b1:3c:2f:2e:06:97:98:03:ee:5f:45:dd:5f:11:4b:
+                    86:43:45:89:3b:c4:8c:24:71:fe:f9:cf:cc:2a:b7:
+                    33:37:f3
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Authority Key Identifier:
+                keyid:B0:45:1A:51:FB:96:CE:62:C7:FD:5E:73:CF:F9:9A:E0:71:F8:AC:61
+            X509v3 Basic Constraints: critical
+                CA:TRUE, pathlen:0
+            X509v3 Extended Key Usage:
+                TLS Web Client Authentication, TLS Web Server Authentication
+            X509v3 Key Usage: critical
+                Certificate Sign, CRL Sign
+            X509v3 Subject Key Identifier:
+                44:00:ED:DC:BF:56:82:17:0B:8A:0B:77:AF:68:B1:3B:18:51:DD:0E
+    Signature Algorithm: sha256WithRSAEncryption
+         13:7c:9b:15:63:61:d1:19:95:22:06:b6:c3:7d:8f:f5:88:55:
+         d7:69:3d:e2:51:c1:c9:6d:9a:a1:61:83:d4:09:e0:2e:df:04:
+         b9:48:b5:36:d8:26:17:65:f6:73:45:c2:ae:a6:ce:1e:6b:61:
+         f6:ea:39:17:2f:c8:3b:bc:99:09:3f:e6:f6:5a:0e:18:f1:d6:
+         01:b3:18:67:d9:55:af:ec:c1:f7:13:af:6f:28:9d:5d:91:e6:
+         92:07:1b:1f:69:80:86:69:cd:15:f1:e5:a2:d1:fd:93:d6:9f:
+         8b:58:60:be:09:d9:c5:18:53:3d:c6:40:8a:8d:d7:0e:e1:bb:
+         21:3d:36:c2:e5:ef:a3:d8:b7:fa:b0:83:f2:f9:2a:8d:bf:8f:
+         ea:62:0e:2a:21:a1:ea:6e:99:d3:06:e7:2c:9b:cb:51:46:1d:
+         6b:4e:78:6e:72:dd:cb:97:7e:77:01:86:19:de:c6:da:30:35:
+         1c:29:6a:f6:55:90:a8:f9:13:62:77:cc:80:90:02:69:a6:6b:
+         c8:18:2b:7b:5f:11:a3:c6:16:12:a8:62:75:8a:4e:49:a6:bf:
+         77:cd:69:2c:e4:9c:50:7d:a7:87:c2:14:cd:c6:43:41:36:5a:
+         10:0c:97:83:d4:9e:14:0d:76:33:7f:4a:0a:8a:1f:cf:25:ec:
+         63:a0:aa:bc:27:7d:bb:78:69:bf:2d:dd:fb:7b:cc:e0:20:9c:
+         7f:a5:75:09:0e:80:bf:e3:3c:24:3b:31:b4:4b:f3:01:78:65:
+         70:aa:2e:5d:cb:32:a3:c3:c6:db:08:74:3c:4a:21:48:24:c5:
+         cd:c3:8f:42:81:f0:13:8e:b1:1f:eb:c0:db:81:43:5e:41:3c:
+         25:dc:3b:6a:59:5d:ab:ab:2a:33:62:58:33:6a:6e:0b:2f:e1:
+         64:ca:ba:8e:55:df:18:6f:9c:cd:bb:97:9c:bb:da:57:01:11:
+         ca:3d:82:99:8b:ce:b6:55:a0:58:9e:bc:ec:28:70:8d:bf:43:
+         66:71:c6:f3:5b:1b:dc:45:9c:cb:06:b9:b9:e3:a7:00:1a:6a:
+         0e:66:4d:c3:75:94:35:13:32:13:18:e1:8e:cc:d9:18:36:0c:
+         85:a5:3c:a1:b0:f1:84:f9:17:4e:7f:f5:c0:57:f2:5e:a8:b9:
+         76:ec:b0:32:95:7e:1f:70:22:bd:b2:da:80:1f:d6:9e:6a:2d:
+         7b:a9:56:44:45:25:3d:5f:ab:1c:84:20:ff:fa:31:56:79:83:
+         be:1b:0f:4b:de:a1:1a:85:8c:fa:da:f6:72:7a:e3:a1:92:cd:
+         47:c4:67:cf:fe:ca:37:db:21:72:ef:51:80:66:7b:c1:14:4f:
+         64:15:3b:31:ca:12:01:45
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

data/lib/hexapdf/cli/info.rb CHANGED Viewed

@@ -130,6 +130,26 @@ module HexaPDF
             output_line("Encrypted", "yes (no or wrong password given)")
           end
+          signatures = doc.signatures.to_a
+          unless signatures.empty?
+            nr_sigs = signatures.count
+            output_line("Document signed", "yes - #{nr_sigs} signature#{nr_sigs > 1 ? 's' : ''}")
+            signatures.each do |signature|
+              output_line("  Signer", signature.signer_name)
+              output_line("    Signing time", signature.signing_time)
+              if (reason = signature.signing_reason)
+                output_line("    Reason", reason)
+              end
+              if (location = signature.signing_location)
+                output_line("    Location", location)
+              end
+              output_line("    Signature type", signature.signature_type)
+              signature.verify(allow_self_signed: true).messages.sort.each do |msg|
+                output_line("    #{msg.type.capitalize}", msg.content)
+              end
+            end
+          end
           output_line("Pages", doc.pages.count.to_s)
           output_line("Version", doc.version)
         end
@@ -162,7 +182,7 @@ module HexaPDF
       end
       def output_line(header, text) #:nodoc:
-        puts(("#{header}:").ljust(COLUMN_WIDTH) << text)
+        puts(("#{header}:").ljust(COLUMN_WIDTH) << text.to_s)
       end
     end

data/lib/hexapdf/configuration.rb CHANGED Viewed

@@ -373,6 +373,20 @@ module HexaPDF
   #
   #    See HexaPDF::Layout::Style::Layers for more information.
   #
+  # signature.signing_handler::
+  #   A mapping from a Symbol to a signing handler class (see
+  #   HexaPDF::Document::Signatures::DefaultHandler). If the value is a String, it should contain
+  #   the name of a constant to such a class.
+  #
+  # signature.sub_filter_map::
+  #    A mapping from a PDF name (a Symbol) to a signature handler class (see
+  #    HexaPDF::Type::Signature::Handler). If the value is a String, it should contain the name of a
+  #    constant to such a class.
+  #
+  #    The sub filter map is used for mapping specific signature algorithms to handler classes. The
+  #    filter value of a signature dictionary is ignored since we only support the standard
+  #    signature algorithms.
+  #
   # task.map::
   #    A mapping from task names to callable task objects. See HexaPDF::Task for more information.
   DefaultDocumentConfiguration =
@@ -451,6 +465,14 @@ module HexaPDF
                       'style.layers_map' => {
                         link: 'HexaPDF::Layout::Style::LinkLayer',
                       },
+                      'signature.signing_handler' => {
+                        default: 'HexaPDF::Document::Signatures::DefaultHandler',
+                      },
+                      'signature.sub_filter_map' => {
+                        'adbe.x509.rsa_sha1': 'HexaPDF::Type::Signature::AdbeX509RsaSha1',
+                        'adbe.pkcs7.detached': 'HexaPDF::Type::Signature::AdbePkcs7Detached',
+                        'ETSI.CAdES.detached': 'HexaPDF::Type::Signature::AdbePkcs7Detached',
+                      },
                       'task.map' => {
                         optimize: 'HexaPDF::Task::Optimize',
                         dereference: 'HexaPDF::Task::Dereference',
@@ -539,6 +561,10 @@ module HexaPDF
                         SigFieldLock: 'HexaPDF::Type::AcroForm::SignatureField::LockDictionary',
                         SV: 'HexaPDF::Type::AcroForm::SignatureField::SeedValueDictionary',
                         SVCert: 'HexaPDF::Type::AcroForm::SignatureField::CertificateSeedValueDictionary',
+                        Sig: 'HexaPDF::Type::Signature',
+                        DocTimeStamp: 'HexaPDF::Type::Signature',
+                        SigRef: 'HexaPDF::Type::Signature::SignatureReference',
+                        TransformParams: 'HexaPDF::Type::Signature::TransformParams',
                       },
                       'object.subtype_map' => {
                         nil => {