如何使用 Java (IText API) 在不丢失数字签名的情况下合并 PDF

Question

I have a pdf document which is digitally signed, I want to attach this digitally signed Pdf to another normal pdf using java itext api, is it possible? I tried to attach pdf which contains digital signature with the another. I am able to merge pdfs but the final pdf is not retaining digital signature in the output pdf file. Is it possible?.

Answer 1

As others already have stated, the idea (at least a major part of the idea) behind signing is to make sure the document has not changed. Merging, on the other hand, does change the document. Thus, merging will break signatures.

A different approach would be, though, to make the other, "normal" PDF a portable collection (a special kind of PDF with attachments) and attach the signed PDF to that collection.

When opening the signed PDF from the collection, the signature will be as unharmed as in the original signed PDF.

Example code for creating a portable collection

You can find an example of portable collection creation on the iText site:

public static final String DEST = "results/collections/portable_collection.pdf";
public static final String DATA = "resources/data/united_states.csv";
public static final String HELLO = "resources/pdfs/hello.pdf";
public static final String IMG = "resources/images/berlin2013.jpg";

public void createPdf(String dest) throws IOException, DocumentException {
    Document document = new Document();
    PdfWriter writer = PdfWriter.getInstance(document, new FileOutputStream(dest));
    document.open();
    document.add(new Paragraph("Portable collection"));
    PdfCollection collection = new PdfCollection(PdfCollection.TILE);
    writer.setCollection(collection);
    PdfFileSpecification fileSpec = PdfFileSpecification.fileEmbedded(
            writer, DATA, "united_states.csv", null);
    writer.addFileAttachment("united_states.csv", fileSpec);
    fileSpec = PdfFileSpecification.fileEmbedded(
            writer, HELLO, "hello.pdf", null);
    writer.addFileAttachment("hello.pdf", fileSpec);
    fileSpec = PdfFileSpecification.fileEmbedded(
            writer, IMG, "berlin2013.jpg", null);
    writer.addFileAttachment("berlin2013.jpg", fileSpec);
    document.close();
}

( here on the web site, here in their github)

A result of a run of that example is here .

(As you used the itext tag and not the itext7 tag, I assume you use an iText version 5.5.x.)

Answer 2

It is not possible, this digital signing is especially designed to protect the original document from being modified in any way.

To have this two documents merged and signed, you'd need to know the keys used for the signing and generate the signature once again for the new merged document.

Answer 3

1. Open the signed pdf in Adobe.

2. Open print dialogue ( Ctrl + P )

3. Change the printer to "Microsoft Print to PDF" then print.

4. The newly created PDF will have the signatures and will behave as a normal pdf for combine/merge activities.

   

Note : This approach converts a signed document to a standard pdf. The result displays the signature information but the underlying digital signature is lost. In my case the original signers understand the distinction.

Creating a summary file is my goal. I combine a variety of digitally signed, along with other related, documentation into a single summary pdf. The original, digitally signed documents, are stored for future reference. I am increasingly convinced that it is not possible to combine digitally signed documents into a single, summary pdf, while maintaining the underlying digital signatures.

Users needing summary packets will benefit from my suggested approach. Keep in mind that my my approach remains "legally valid" to the extent that the original digitally signed documents are available on demand.

Answer 4

I scanned the signature page and saved it as a pdf and replaced. It does break the rules but when nothing else works and they demand all these files be combined into one then what can I do!