Skip to main content
Participant
April 24, 2025
Answered

Digital Signing - 'signing-certificate' is absent

  • April 24, 2025
  • 1 reply
  • 1308 views

When validating an Acrobat Reader digital signed document the validation service https://ec.europa.eu/digital-building-blocks/DSS/webapp-demo/validation reports "The signed attribute 'signed-certificate' is absent".

Because of that the Hungarian State issued digital signature service is also refusing the countersigning of that document.

Correct answer MikelKlink
quote

So, my actualized question sounds: why not this setting defaults to the latter one?

 

Well, Adobe Acrobat has to consider the global market, not only the EU.

The former option (the current default) is a format introduced decades ago, even before PDF became an ISO standard, and it is the only format in the first ISO specification of PDF, ISO 32000-1:2008. In several parts of the world this is still the only format accepted by the commonly used validators.

The latter format has been introduced after the publication of ISO 32000-1:2008 in specifications of ETSI and only become part of the core ISO PDF specification in 2017 (in ISO 32000-2:2017). While it is supported by most newer PDF validators, both in the EU and abroad, there still are a lot of legacy validators out there that don't support it. Furthermore, being originally specified in the EU and being strongly coupled with the EU signature infrastructure, using this format by default might not be politically appropriate everywhere...

 

As an aside, the Acrobat Help article you found appears to be quite old, "Part 2" and "Part 3" of PAdES still refers to the original ETSI specification of PAdES in the multi-part technical specification ETSI TS 102 778. Meanwhile (in 2016!) PAdES has become an actual European Norm, ETSI EN 319 142, and this norm is referenced from the ISO 32000-2 PDF specification as the original PAdES. So this also is the document the Acrobat Help article should reference...

1 reply

MikelKlink
Participating Frequently
April 24, 2025

When digitally signing with Acrobat Reader, have you made sure that Acrobat is configured to sign using the PAdES format (i.e. with a "CAdES-equivalent" signature container format configured in the signature creation preferences)?

 

petardo55Author
Participant
April 24, 2025

Thanks! That did the trick!
I read in Acrobat Help:

"The default signing format, when set up accordingly, is compliant with Part 2 of the PAdES standard. 

You can change the default signing method or format, in the Signatures panel of the Preferences dialog box"
On the other hand it says:

"Acrobat and Acrobat Reader provide an option to change the default signing format to a CAdES format. This option is compliant with Part 3 of the PAdES standard. "

So, my actualized question sounds: why not this setting defaults to the latter one?

MikelKlink
MikelKlinkCorrect answer
Participating Frequently
April 24, 2025
quote

So, my actualized question sounds: why not this setting defaults to the latter one?

 

Well, Adobe Acrobat has to consider the global market, not only the EU.

The former option (the current default) is a format introduced decades ago, even before PDF became an ISO standard, and it is the only format in the first ISO specification of PDF, ISO 32000-1:2008. In several parts of the world this is still the only format accepted by the commonly used validators.

The latter format has been introduced after the publication of ISO 32000-1:2008 in specifications of ETSI and only become part of the core ISO PDF specification in 2017 (in ISO 32000-2:2017). While it is supported by most newer PDF validators, both in the EU and abroad, there still are a lot of legacy validators out there that don't support it. Furthermore, being originally specified in the EU and being strongly coupled with the EU signature infrastructure, using this format by default might not be politically appropriate everywhere...

 

As an aside, the Acrobat Help article you found appears to be quite old, "Part 2" and "Part 3" of PAdES still refers to the original ETSI specification of PAdES in the multi-part technical specification ETSI TS 102 778. Meanwhile (in 2016!) PAdES has become an actual European Norm, ETSI EN 319 142, and this norm is referenced from the ISO 32000-2 PDF specification as the original PAdES. So this also is the document the Acrobat Help article should reference...