touch-packages team mailing list archive

[André Guerreiro <740506@xxxxxxxxxxxxxxxxxx>]

@Albert

Thanks for the improvements.
Regarding your 3 questions:

1- I've no objection to make the feature optional. I understand there
are people building more minimal versions of poppler that dislike
additional dependencies.

2- Yes we should. Our defaults are meant to take advantage of the
already configured and implicitly trusted NSS cert DBs in Firefox but we
shouldn't limit the user's options.

3- We're already looking into supporting adbe.pkcs7.sha1 signatures
which we found are very widespread. In Portugal we found that several
big companies are still using this kind of signatures in signed PDF
invoices as of now.

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to poppler in Ubuntu.
https://bugs.launchpad.net/bugs/740506

Title:
  verify digital signatures

Status in Evince:
  Confirmed
Status in Poppler:
  Confirmed
Status in poppler package in Ubuntu:
  Triaged

Bug description:
  Binary package hint: evince

  This is a feature request to verify digital signatures.  I'm receiving more and more digitally signed PDF's and evince already acknowledges them with:
  Signature Not Verified
  Digitally signed by <signer>
  Date:  <time stamp>
  Reason: <reason>
  Location: <location>
  but it would be great if Evince would be integrated into the distro's ca-certificate infrastructure to verify these signatures.

To manage notifications about this bug go to:
https://bugs.launchpad.net/evince/+bug/740506/+subscriptions