Linux下签名的PDF在Windows Acrobat Reader中显示签名有效性未知的排查求助
大家好,我遇到了一个棘手的问题,想请各位帮忙排查下:
我在Linux系统上用JsignPDF工具搭配我的Globalsign证书给一个PDF签了名,当时用pdfsig命令验证看起来一切正常,输出如下:
pdfsig test_signed.pdf Digital Signature Info of: test_signed.pdf Signature #1: - Signer Certificate Common Name: blah@example.com - Signer full Distinguished Name: E=blah@example.com,CN=blah@example.com - Signing Time: Oct 04 2023 19:10:32 - Signing Hash Algorithm: SHA1 - Signature Type: adbe.pkcs7.detached - Signed Ranges: [0 - 160], [30162 - 38375] - Total document signed - Signature Validation: Signature is Valid. - Certificate Validation: Certificate is Trusted.
(注:blah@example.com是我用来隐藏真实邮箱的占位符)
之后我把这个签名后的PDF传到Windows 10机器上,用Acrobat Reader打开时,弹出提示说:
The validity of the document certification is UNKNOWN. The author could not be verified
打开签名面板后,上面显示“Signature validity is unknown”。
我点击签名面板里的“Certificate details”打开证书查看器,里面的证书链有三个条目:最下面是我的签名证书,显示由GlobalSign GCC R3 PersonalSign 1 CA 2020签发;中间是这个PersonalSign证书,显示由“GlobalSign Root CA - R3”签发;最顶端就是GlobalSign Root CA - R3。而且查看器里明确显示“The selected certificate path is valid”,这和我预期的一致。
另外我检查了Windows的证书存储,确实已经有“GlobalSign Root CA - R3”这个根证书了。
明明证书链里的根证书已经在Windows信任存储里,Acrobat Reader却还是说签名有效性未知,有没有大佬能给点调试的思路?
备注:内容来源于stack exchange,提问作者Henry Law

