Search code examples
pdfitextadobedigital-signaturepades

Qualified signature showing invalid only in Adobe Reader

Here is PDF with qualified electronic signature pdf-qualified.invalid.pdf

All validation apps show it correct as PAdES-BASELINE-LT, however Adobe Reader shows it invalid. What is wrong with this digitally signed PDF? It includes CAdES-BASELINE-LT signature, all OCSPs, all needed Certs.

Adobe reader shows its invalid

Adobe reader wrongly says invalid

EU validation shows signature is valid at https://ec.europa.eu/cefdigital/DSS/webapp-demo/validation

EU validator shows valid

DigiDoc4 app shows signature is valid

DigiDoc4 shows valid

https://www.eparaksts.lv/ shows it is valid

eparaksts.lv shows valid

Here we can see the PDF structure related to the digital signature

iText Rups shows all needed components there

Solution

  • CAdES signature was baseline-LT level. When downgrading CAdES to baseline-T then it started working.

    I would say its Adobe Reader bug unless some specification explicitly says that CAdES in baseline-LT level is not allowed.