hexapdf 0.18.0 → 0.19.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: d95ce1575c017f44b2c0f96e7e5a927b8c4f8c3adf6aa0f3a7dc983c5dfa77a8
-  data.tar.gz: e49a23655e5ce4f4ded50c5ac0c90d7892c41bd526dbdfe72ad85cca4891098b
+  metadata.gz: 55ddbf5c737ab446c5793660957e64aaf6f8872c6bb1c4a76ba39a87193b951f
+  data.tar.gz: eb29fbb41cbb20c060c43cc80406bd4b11fa36b0d86a95daa9d1093d060ab89e
 SHA512:
-  metadata.gz: 37e3b09a059bb7875c797f50f60642b080f20a081fa2540f74837ac51a8cb9c1aa5b93e6502dd9f242d178f68ea654c0619b2e55d4cb934e36badca4a5057d1c
-  data.tar.gz: cd9fc830b8b4f5387478d7e6c32260672a9332bb2faf3aa7afcb4d71bf7c39481616f7f33d731229a6099e44dac84bbecd651c3618593f6c7ba872b9e958a3cb
+  metadata.gz: 28368cd415cd9adf28050df8812a0cda999b8140fcba4a9f307d7e37f6dc0254d99abf5173a81a1b2b59f9f6a658a46f6998d7834b93ffc19840d578e507ce92
+  data.tar.gz: b25e409653a4bd9359f3a39c2920187261a43151942c4120d2bd818886dbf236f77483a42ca7a7fb39ffbcdfc7da8cf9d7a87609a4f4af514cf7f93f495eb5ed

data/CHANGELOG.md

@@ -1,3 +1,17 @@
+## 0.19.0 - 2021-11-24
+
+### Added
+
+* Page resource pruning to the optimization task
+* An option for page resources pruning to the optimization options of the
+  `hexapdf` command
+
+### Fixed
+
+* Handling of invalid date strings with a minute time zone offset greater than
+  59
+
+
 ## 0.18.0 - 2021-11-04
 
 ### Added
@@ -6,7 +20,7 @@
   device colors in parts other than the canvas
 * [HexaPDF::Type::AcroForm::VariableTextField::create_appearance_string] for
   centralized creation of appearance strings
-* [HexaPDF::Object.make_direct] for making objects and all parts of them direct
+* [HexaPDF::Object::make_direct] for making objects and all parts of them direct
   instead of indirect
 
 ### Changed
@@ -26,7 +40,7 @@
   dictionary are indirect objects
 * [HexaPDF::Content::GraphicObject::EndpointArc] to correctly determine the
   start and end points
-* [HexaPDF::Dictionary#perform_validation] to correctly handle objects that
+* HexaPDF::Dictionary#perform_validation to correctly handle objects that
   should not be indirect objects
 
 

data/lib/hexapdf/cli/command.rb

@@ -66,6 +66,7 @@ module HexaPDF
         @out_options.xref_streams = :preserve
         @out_options.streams = :preserve
         @out_options.optimize_fonts = false
+        @out_options.prune_page_resources = false
 
         @out_options.encryption = :preserve
         @out_options.enc_user_pwd = @out_options.enc_owner_pwd = nil
@@ -169,6 +170,10 @@ module HexaPDF
                    "time; default: #{@out_options.compress_pages})") do |c|
           @out_options.compress_pages = c
         end
+        options.on("--[no-]prune-page-resources", "Prunes unused objects from the page resources " \
+                   "(may take a long time; default: #{@out_options.prune_page_resources})") do |c|
+          @out_options.prune_page_resources = c
+        end
         options.on("--[no-]optimize-fonts", "Optimize embedded font files; " \
                    "default: #{@out_options.optimize_fonts})") do |o|
           @out_options.optimize_fonts = o
@@ -236,7 +241,8 @@ module HexaPDF
         doc.task(:optimize, compact: @out_options.compact,
                  object_streams: @out_options.object_streams,
                  xref_streams: @out_options.xref_streams,
-                 compress_pages: @out_options.compress_pages)
+                 compress_pages: @out_options.compress_pages,
+                 prune_page_resources: @out_options.prune_page_resources)
         if @out_options.streams != :preserve || @out_options.optimize_fonts
           doc.each(only_current: false) do |obj|
             optimize_stream(obj)

data/lib/hexapdf/content/canvas.rb

@@ -589,7 +589,7 @@ module HexaPDF
       #
       # The line cap style specifies how the ends of stroked open paths should look like.
       #
-      # The +style+ parameter can be one of:
+      # The +style+ parameter can be one of (also see LineCapStyle):
       #
       # :butt or 0::
       #     Stroke is squared off at the endpoint of a path.
@@ -641,7 +641,7 @@ module HexaPDF
       #
       # The line join style specifies the shape that is used at the corners of stroked paths.
       #
-      # The +style+ parameter can be one of:
+      # The +style+ parameter can be one of (also see LineJoinStyle):
       #
       # :miter or 0::
       #     The outer lines of the two segments continue until the meet at an angle.

data/lib/hexapdf/content/graphics_state.rb

@@ -73,7 +73,7 @@ module HexaPDF
     end
 
     # Defines all available line cap styles as constants. Each line cap style is an instance of
-    # NamedValue. For use with Content::GraphicsState#line_cap_style.
+    # NamedValue, see ::normalize. For use with e.g. Content::Canvas#line_cap_style.
     #
     # See: PDF1.7 s8.4.3.3
     module LineCapStyle
@@ -95,18 +95,39 @@ module HexaPDF
       end
 
       # Stroke is squared off at the endpoint of a path.
+      #
+      # Specify as 0 or :butt.
+      #
+      #   #>pdf-small-hide
+      #   canvas.line_cap_style(:butt)
+      #   canvas.line_width(10).line(50, 20, 50, 80).stroke
+      #   canvas.stroke_color("white").line_width(1).line(50, 20, 50, 80).stroke
       BUTT_CAP = NamedValue.new(:butt, 0)
 
       # A semicircular arc is drawn at the endpoint of a path.
+      #
+      # Specify as 1 or :round.
+      #
+      #   #>pdf-small-hide
+      #   canvas.line_cap_style(:round)
+      #   canvas.line_width(10).line(50, 20, 50, 80).stroke
+      #   canvas.stroke_color("white").line_width(1).line(50, 20, 50, 80).stroke
       ROUND_CAP = NamedValue.new(:round, 1)
 
       # The stroke continues half the line width beyond the endpoint of a path.
+      #
+      # Specify as 2 or :projecting_square.
+      #
+      #   #>pdf-small-hide
+      #   canvas.line_cap_style(:projecting_square)
+      #   canvas.line_width(10).line(50, 20, 50, 80).stroke
+      #   canvas.stroke_color("white").line_width(1).line(50, 20, 50, 80).stroke
       PROJECTING_SQUARE_CAP = NamedValue.new(:projecting_square, 2)
 
     end
 
     # Defines all available line join styles as constants. Each line join style is an instance of
-    # NamedValue. For use with Content::GraphicsState#line_join_style.
+    # NamedValue, see ::normalize For use with e.g. Content::Canvas#line_join_style.
     #
     # See: PDF1.7 s8.4.3.4
     module LineJoinStyle
@@ -127,20 +148,47 @@ module HexaPDF
         end
       end
 
-      # The outer lines of the two segments continue until the meet at an angle.
+      # The outer lines of the two segments continue until they meet at an angle.
+      #
+      # Specify as 0 or :miter.
+      #
+      #   #>pdf-small-hide
+      #   canvas.line_join_style(:miter)
+      #   canvas.line_width(10).
+      #     polyline(20, 20, 50, 80, 80, 20).stroke
+      #   canvas.stroke_color("white").line_width(1).line_join_style(:bevel).
+      #     polyline(20, 20, 50, 80, 80, 20).stroke
       MITER_JOIN = NamedValue.new(:miter, 0)
 
       # An arc of a circle is drawn around the point where the segments meet.
+      #
+      # Specify as 1 or :round.
+      #
+      #   #>pdf-small-hide
+      #   canvas.line_join_style(:round)
+      #   canvas.line_width(10).
+      #     polyline(20, 20, 50, 80, 80, 20).stroke
+      #   canvas.stroke_color("white").line_width(1).line_join_style(:bevel).
+      #     polyline(20, 20, 50, 80, 80, 20).stroke
       ROUND_JOIN = NamedValue.new(:round, 1)
 
-      # The two segments are finished with butt caps and the space between the ends is filled with
-      # a triangle.
+      # The two segments are finished with butt caps and the space between the ends is filled with a
+      # triangle.
+      #
+      # Specify as 2 or :bevel.
+      #
+      #   #>pdf-small-hide
+      #   canvas.line_join_style(:bevel)
+      #   canvas.line_width(10).
+      #     polyline(20, 20, 50, 80, 80, 20).stroke
+      #   canvas.stroke_color("white").line_width(1).line_join_style(:bevel).
+      #     polyline(20, 20, 50, 80, 80, 20).stroke
       BEVEL_JOIN = NamedValue.new(:bevel, 2)
 
     end
 
-    # The line dash pattern defines how a line should be dashed. For use with
-    # Content::GraphicsState#line_dash_pattern.
+    # The line dash pattern defines how a line should be dashed. For use with e.g.
+    # Content::Canvas#line_dash_pattern.
     #
     # A dash pattern consists of two parts: the dash array and the dash phase. The dash array
     # defines the length of alternating dashes and gaps (important: starting with dashes). And the
@@ -159,6 +207,12 @@ module HexaPDF
     # See: PDF1.7 s8.4.3.6
     class LineDashPattern
 
+      # :call-seq:
+      #   LineDashPattern.normalize(line_dash_pattern)         -> line_dash_pattern
+      #   LineDashPattern.normalize(array, phase = 0)          -> LineDashPattern.new(array, phase)
+      #   LineDashPattern.normalize(number, phase = 0)         -> LineDashPattern.new([number], phase)
+      #   LineDashPattern.normalize(0)                         -> LineDashPattern.new
+      #
       # Returns the arguments normalized to a valid LineDashPattern instance.
       #
       # If +array+ is 0, the default line dash pattern representing a solid line will be used. If it
@@ -206,8 +260,8 @@ module HexaPDF
 
     end
 
-    # Defines all available rendering intents as constants. For use with
-    # Content::GraphicsState#rendering_intent.
+    # Defines all available rendering intents as constants. For use with e.g.
+    # Content::Canvas#rendering_intent.
     #
     # See: PDF1.7 s8.6.5.8
     module RenderingIntent
@@ -241,7 +295,7 @@ module HexaPDF
     end
 
     # Defines all available text rendering modes as constants. Each text rendering mode is an
-    # instance of NamedValue. For use with Content::GraphicsState#text_rendering_mode.
+    # instance of NamedValue. For use with e.g. Content::Canvas#text_rendering_mode.
     #
     # See: PDF1.7 s9.3.6
     module TextRenderingMode
@@ -272,28 +326,97 @@ module HexaPDF
         end
       end
 
-      # Fill text
+      # Fill text.
+      #
+      # Specify as 0 or :fill.
+      #
+      #   #>pdf-small-hide
+      #   canvas.font("Helvetica", size: 13)
+      #   canvas.stroke_color("green").line_width(0.5)
+      #   canvas.text_rendering_mode(:fill)
+      #   canvas.text("#{canvas.text_rendering_mode.name}", at: [10, 50])
       FILL = NamedValue.new(:fill, 0)
 
-      # Stroke text
+      # Stroke text.
+      #
+      # Specify as 1 or :stroke.
+      #
+      #   #>pdf-small-hide
+      #   canvas.font("Helvetica", size: 13)
+      #   canvas.stroke_color("green").line_width(0.5)
+      #   canvas.text_rendering_mode(:stroke)
+      #   canvas.text("#{canvas.text_rendering_mode.name}", at: [10, 50])
       STROKE = NamedValue.new(:stroke, 1)
 
-      # Fill, then stroke text
+      # Fill, then stroke text.
+      #
+      # Specify as 2 or :fill_stroke.
+      #
+      #   #>pdf-small-hide
+      #   canvas.font("Helvetica", size: 13)
+      #   canvas.stroke_color("green").line_width(0.5)
+      #   canvas.text_rendering_mode(:fill_stroke)
+      #   canvas.text("#{canvas.text_rendering_mode.name}", at: [10, 50])
       FILL_STROKE = NamedValue.new(:fill_stroke, 2)
 
-      # Neither fill nor stroke text (invisible)
+      # Neither fill nor stroke text (invisible).
+      #
+      # Specify as 3 or :invisible.
+      #
+      #   #>pdf-small-hide
+      #   canvas.font("Helvetica", size: 13)
+      #   canvas.stroke_color("green").line_width(0.5)
+      #   canvas.text_rendering_mode(:invisible)
+      #   canvas.text("#{canvas.text_rendering_mode.name}", at: [10, 50])
+      #   canvas.stroke_color("red").line_width(20).line(30, 20, 30, 80).stroke
       INVISIBLE = NamedValue.new(:invisible, 3)
 
-      # Fill text and add to path for clipping
+      # Fill text and add to path for clipping.
+      #
+      # Specify as 4 or :fill_clip.
+      #
+      #   #>pdf-small-hide
+      #   canvas.font("Helvetica", size: 13)
+      #   canvas.stroke_color("green").line_width(0.5)
+      #   canvas.text_rendering_mode(:fill_clip)
+      #   canvas.text("#{canvas.text_rendering_mode.name}", at: [10, 50])
+      #   canvas.stroke_color("red").line_width(20).line(30, 20, 30, 80).stroke
       FILL_CLIP = NamedValue.new(:fill_clip, 4)
 
-      # Stroke text and add to path for clipping
+      # Stroke text and add to path for clipping.
+      #
+      # Specify as 5 or :stroke_clip.
+      #
+      #   #>pdf-small-hide
+      #   canvas.font("Helvetica", size: 13)
+      #   canvas.stroke_color("green").line_width(0.5)
+      #   canvas.text_rendering_mode(:stroke_clip)
+      #   canvas.text("#{canvas.text_rendering_mode.name}", at: [10, 50])
+      #   canvas.stroke_color("red").line_width(20).line(30, 20, 30, 80).stroke
       STROKE_CLIP = NamedValue.new(:stroke_clip, 5)
 
-      # Fill, then stroke text and add to path for clipping
+      # Fill, then stroke text and add to path for clipping.
+      #
+      # Specify as 6 or :fill_stroke_clip.
+      #
+      #   #>pdf-small-hide
+      #   canvas.font("Helvetica", size: 13)
+      #   canvas.stroke_color("green").line_width(0.5)
+      #   canvas.text_rendering_mode(:fill_stroke_clip)
+      #   canvas.text("#{canvas.text_rendering_mode.name}", at: [10, 50])
+      #   canvas.stroke_color("red").line_width(20).line(30, 20, 30, 80).stroke
       FILL_STROKE_CLIP = NamedValue.new(:fill_stroke_clip, 6)
 
-      # Add text to path for clipping
+      # Add text to path for clipping.
+      #
+      # Specify as 7 or :clip.
+      #
+      #   #>pdf-small-hide
+      #   canvas.font("Helvetica", size: 13)
+      #   canvas.stroke_color("green").line_width(0.5)
+      #   canvas.text_rendering_mode(:clip)
+      #   canvas.text("#{canvas.text_rendering_mode.name}", at: [10, 50])
+      #   canvas.stroke_color("red").line_width(20).line(30, 20, 30, 80).stroke
       CLIP = NamedValue.new(:clip, 7)
 
     end
@@ -415,21 +538,21 @@ module HexaPDF
 
       # The scaled character spacing used in glyph displacement calculations.
       #
-      # This returns the value T_c multiplied by #scaled_horizontal_scaling.
+      # This returns the character spacing multiplied by #scaled_horizontal_scaling.
       #
       # See PDF1.7 s9.4.4
       attr_reader :scaled_character_spacing
 
       # The scaled word spacing used in glyph displacement calculations.
       #
-      # This returns the value T_w  multiplied by #scaled_horizontal_scaling.
+      # This returns the word spacing  multiplied by #scaled_horizontal_scaling.
       #
       # See PDF1.7 s9.4.4
       attr_reader :scaled_word_spacing
 
       # The scaled font size used in glyph displacement calculations.
       #
-      # This returns the value T_fs / 1000 multiplied by #scaled_horizontal_scaling.
+      # This returns the font size divided by 1000 multiplied by #scaled_horizontal_scaling.
       #
       # See PDF1.7 s9.4.4
       attr_reader :scaled_font_size

data/lib/hexapdf/dictionary_fields.rb

@@ -293,7 +293,7 @@ module HexaPDF
       end
 
       # :nodoc:
-      DATE_RE = /\AD:(\d{4})(\d\d)?(\d\d)?(\d\d)?(\d\d)?(\d\d)?([Z+-])?(?:(\d\d)(?:'|'(\d\d)'?|\z)?)?\z/n
+      DATE_RE = /\AD:(\d{4})(\d\d)?(\d\d)?(\d\d)?(\d\d)?(\d\d)?([Z+-])?(?:(\d\d)(?:'|'([0-5]\d)'?|\z)?)?\z/n
 
       # Checks if the given object is a string and converts into a Time object if possible.
       # Otherwise returns +nil+.

data/lib/hexapdf/task/optimize.rb

@@ -72,8 +72,19 @@ module HexaPDF
       #   Compresses the content streams of all pages if set to +true+. Note that this can take a
       #   *very* long time because each content stream has to be unfiltered, parsed, serialized
       #   and then filtered again.
+      #
+      # prune_page_resources::
+      #   Removes all unused XObjects from the resources dictionaries of all pages. It is
+      #   recommended to also set the +compact+ argument because otherwise the unused XObjects won't
+      #   be deleted from the document.
+      #
+      #   This is sometimes necessary after importing pages from other PDF files that use a single
+      #   resources dictionary for all pages.
       def self.call(doc, compact: false, object_streams: :preserve, xref_streams: :preserve,
-                    compress_pages: false)
+                    compress_pages: false, prune_page_resources: false)
+        used_refs = compress_pages(doc) if compress_pages
+        prune_page_resources(doc, used_refs) if prune_page_resources
+
         if compact
           compact(doc, object_streams, xref_streams)
         elsif object_streams != :preserve
@@ -83,8 +94,6 @@ module HexaPDF
         else
           doc.each(only_current: false, &method(:delete_fields_with_defaults))
         end
-
-        compress_pages(doc) if compress_pages
       end
 
       # Compacts the document by merging all revisions into one, deleting null and unused entries
@@ -214,12 +223,41 @@ module HexaPDF
 
       # Compresses the contents of all pages by parsing and then serializing again. The HexaPDF
       # serializer is already optimized for small output size so nothing else needs to be done.
+      #
+      # Returns a hash of the form key=>true where the keys are the used XObjects (for use with
+      # #prune_page_resources).
       def self.compress_pages(doc)
+        used_refs = {}
         doc.pages.each do |page|
           processor = SerializationProcessor.new
           HexaPDF::Content::Parser.parse(page.contents, processor)
           page.contents = processor.result
           page[:Contents].set_filter(:FlateDecode)
+          xobjects = page.resources[:XObject]
+          processor.used_references.each {|ref| used_refs[xobjects[ref]] = true }
+        end
+        used_refs
+      end
+
+      # Deletes all XObject entries from the resources dictionaries of all pages whose names do not
+      # match the keys in +used_refs+.
+      def self.prune_page_resources(doc, used_refs)
+        unless used_refs
+          used_refs = {}
+          doc.pages.each do |page|
+            xobjects = page.resources[:XObject]
+            HexaPDF::Content::Parser.parse(page.contents) do |op, operands|
+              used_refs[xobjects[operands[0]]] = true if op == :Do
+            end
+          end
+        end
+
+        doc.pages.each do |page|
+          xobjects = page.resources[:XObject]
+          xobjects.each do |key, obj|
+            next if used_refs[obj]
+            xobjects.delete(key)
+          end
         end
       end
 
@@ -228,14 +266,19 @@ module HexaPDF
 
         attr_reader :result #:nodoc:
 
+        # Contains all found references
+        attr_reader :used_references
+
         def initialize #:nodoc:
           @result = ''.b
           @serializer = HexaPDF::Serializer.new
+          @used_references = []
         end
 
         def process(op, operands) #:nodoc:
           @result << HexaPDF::Content::Operator::DEFAULT_OPERATORS[op].
             serialize(@serializer, *operands)
+          @used_references << operands[0] if op == :Do
         end
 
       end

data/lib/hexapdf/version.rb

@@ -37,6 +37,6 @@
 module HexaPDF
 
   # The version of HexaPDF.
-  VERSION = '0.18.0'
+  VERSION = '0.19.0'
 
 end

data/test/data/cert/create.sh

@@ -0,0 +1,171 @@
+#!/bin/sh
+# See https://www.feistyduck.com/library/openssl-cookbook/online/ch-openssl.html
+
+
+#####################################3
+# Root CA
+mkdir root-ca
+cd root-ca
+mkdir certs db private
+touch db/index
+openssl rand -hex 16 > db/serial
+echo 1001 > db/crlnumber
+
+cat > root-ca.conf <<'CACONF'
+[default]
+name                     = root-ca
+domain_suffix            = hexapdf.gettalong.org
+aia_url                  = http://$name.$domain_suffix/$name.crt
+crl_url                  = http://$name.$domain_suffix/$name.crl
+default_ca               = ca_default
+name_opt                 = utf8,esc_ctrl,multiline,lname,align
+
+[ca_dn]
+countryName              = "AT"
+organizationName         = "HexaPDF"
+commonName               = "HexaPDF Test Root CA"
+
+[ca_default]
+home                     = ../root-ca
+database                 = $home/db/index
+serial                   = $home/db/serial
+crlnumber                = $home/db/crlnumber
+certificate              = $home/$name.crt
+private_key              = $home/private/$name.key
+RANDFILE                 = $home/private/random
+new_certs_dir            = $home/certs
+unique_subject           = no
+copy_extensions          = none
+default_days             = 36500
+default_crl_days         = 365
+default_md               = sha256
+policy                   = policy_c_o_match
+
+[policy_c_o_match]
+countryName              = match
+stateOrProvinceName      = optional
+organizationName         = match
+organizationalUnitName   = optional
+commonName               = supplied
+emailAddress             = optional
+
+[req]
+default_bits             = 4096
+encrypt_key              = no
+default_md               = sha256
+utf8                     = yes
+string_mask              = utf8only
+prompt                   = no
+distinguished_name       = ca_dn
+req_extensions           = ca_ext
+
+[ca_ext]
+basicConstraints         = critical,CA:true
+keyUsage                 = critical,keyCertSign,cRLSign
+subjectKeyIdentifier     = hash
+
+[sub_ca_ext]
+authorityKeyIdentifier   = keyid:always
+basicConstraints         = critical,CA:true,pathlen:0
+extendedKeyUsage         = clientAuth,serverAuth
+keyUsage                 = critical,keyCertSign,cRLSign
+subjectKeyIdentifier     = hash
+
+[client_ext]
+authorityKeyIdentifier   = keyid:always
+basicConstraints         = critical,CA:false
+extendedKeyUsage         = clientAuth
+keyUsage                 = critical,digitalSignature
+subjectKeyIdentifier     = hash
+CACONF
+
+openssl req -new -config root-ca.conf -out root-ca.csr -keyout private/root-ca.key
+openssl ca -selfsign -config root-ca.conf -batch -in root-ca.csr -out root-ca.crt -extensions ca_ext
+
+#####################################3
+# Subordinate CA
+cd ..
+mkdir sub-ca
+cd sub-ca
+mkdir certs db private
+touch db/index
+openssl rand -hex 16 > db/serial
+echo 1001 > db/crlnumber
+
+cat > sub-ca.conf <<'CACONF'
+[default]
+name                     = sub-ca
+domain_suffix            = hexapdf.gettalong.org
+aia_url                  = http://$name.$domain_suffix/$name.crt
+crl_url                  = http://$name.$domain_suffix/$name.crl
+default_ca               = ca_default
+name_opt                 = utf8,esc_ctrl,multiline,lname,align
+
+[ca_dn]
+countryName              = "AT"
+organizationName         = "HexaPDF"
+commonName               = "HexaPDF Test Subordinate CA"
+
+[ca_default]
+home                     = ../sub-ca
+database                 = $home/db/index
+serial                   = $home/db/serial
+crlnumber                = $home/db/crlnumber
+certificate              = $home/$name.crt
+private_key              = $home/private/$name.key
+RANDFILE                 = $home/private/random
+new_certs_dir            = $home/certs
+unique_subject           = no
+copy_extensions          = copy
+default_days             = 36500
+default_crl_days         = 90
+default_md               = sha256
+policy                   = policy_c_o_match
+
+[policy_c_o_match]
+countryName              = match
+stateOrProvinceName      = optional
+organizationName         = match
+organizationalUnitName   = optional
+commonName               = supplied
+emailAddress             = optional
+
+[req]
+default_bits             = 4096
+encrypt_key              = no
+default_md               = sha256
+utf8                     = yes
+string_mask              = utf8only
+prompt                   = no
+distinguished_name       = ca_dn
+req_extensions           = ca_ext
+
+[ca_ext]
+basicConstraints         = critical,CA:true
+keyUsage                 = critical,keyCertSign,cRLSign
+subjectKeyIdentifier     = hash
+
+[sub_ca_ext]
+authorityKeyIdentifier   = keyid:always
+basicConstraints         = critical,CA:true,pathlen:0
+extendedKeyUsage         = clientAuth,serverAuth
+keyUsage                 = critical,keyCertSign,cRLSign
+subjectKeyIdentifier     = hash
+
+[client_ext]
+authorityKeyIdentifier   = keyid:always
+basicConstraints         = critical,CA:false
+extendedKeyUsage         = clientAuth
+keyUsage                 = critical,digitalSignature
+subjectKeyIdentifier     = hash
+CACONF
+
+openssl req -new -config sub-ca.conf -out sub-ca.csr -keyout private/sub-ca.key
+openssl ca -config ../root-ca/root-ca.conf -batch -in sub-ca.csr -out sub-ca.crt -extensions sub_ca_ext
+
+
+#####################################3
+# Signing certificate
+openssl req -new -config sub-ca.conf -subj "/C=AT/O=HexaPDF/CN=HexaPDF Test Certifcate" -keyout private/signing.key -out signing.csr
+openssl ca -config sub-ca.conf -in signing.csr -batch -out signing.crt -extensions client_ext
+openssl pkcs12 -export -in signing.crt -inkey private/signing.key -password pass: -out signing.p12