3 Replies Latest reply on Feb 13, 2018 1:22 AM by sylvainr61802075

    Signature validation between Acrobat XI and DC




      We produce a qualified digital signature from Acrobat Reader and we have a different result during the validation process between Acrobat Reader XI and Acrobat Reader DC.


      The first one manages to validate the signature and the second one generate an error (see below).

      Acrobat DC - qualified digital signature validation process issue.png

      That is the same document, with the same signature and qualified certificate.


      Like we use a Certificate Authority referenced into the European Trusted List, our qualified certificate uses the following QCstatement :


          0:d=0  hl=2 l= 125 cons: SEQUENCE         

          2:d=1  hl=2 l=   8 cons: SEQUENCE         

          4:d=2  hl=2 l=   6 prim: OBJECT :

         12:d=1  hl=2 l=   8 cons:  SEQUENCE         

         14:d=2 hl=2 l=   6 prim: OBJECT :

      22:d=1  hl=2 l=  80 cons: SEQUENCE         

         24:d=2 hl=2 l=   6 prim: OBJECT :

      32:d=2  hl=2 l=  70 cons: SEQUENCE         

         34:d=3 hl=2 l=  68 cons: SEQUENCE         

         36:d=4 hl=2 l=  66 cons: SEQUENCE         

         38:d=5 hl=2 l=  60 prim: IA5STRING :https://www.preuve-electronique.org/ListeRevocations/cgu.pdf

      100:d=5  hl=2 l=   2 prim: PRINTABLESTRING   :en

      104:d=1  hl=2 l=  21 cons: SEQUENCE         

        106:d=2 hl=2 l=   6 prim:   OBJECT :

      114:d=2  hl=2 l=  11 cons: SEQUENCE         

        116:d=3 hl=2 l=   9 cons: SEQUENCE         

        118:d=4 hl=2 l=   7 prim: OBJECT :


      We don't really understand why the same document produces different result during the validation process between the two versions of the Reader.


      Is there a reason?