Update to DSS 5.12.RC1 (!177) · Merge requests · Firmador / Firmador

The source project of this merge request has been removed.

Francisco de la Peña requested to merge (removed):dss-5.12.RC1 into master Mar 18, 2023

Since DSS 5.12, PDF signatures don't include the VRI dictionary by default. Adobe Acrobat and BCCR validators have been tested and work as expected without VRI.

It moved from SLF4j 1.7.36 to 2.0.6 and slf4j-jcl (commons-logging) has been replaced with slf4j-jdk14 (Java Util Logging) because the former is not available in SLF4j 2.x.x yet. It seems to work, though. Non-localized timestamps could get improved with configuration later.

The JAR increased around 6 MB and that's a lot. This is caused by new bundled BouncyCastle library version that includes Post-Quantum Cryptography (PQC) classes with a lot of new proposed algorithm implementation standard candidates. It could be worth stripping them (if possible) until they get actually used for our signing needs.

Additionally, fixed a regression in PDF application name stored in signatures not showing the application version (displaying "null" instead).

Update to DSS 5.12.RC1

Merge request reports