LTV-enabled signature became non-LTV signature in 2 hours (same machine)

Question

I have a problem with LTV signatures. Last thursday we have signed a document (7 signatures, 5 on my computer, 2 on different computers, all certificates from one CA). After each signature I checked the document (on my computer)and everything was OK (every signature was LTV-enabled). Few hours later and all the signatures (on my computer) are non-LTV. What is more - we checked the document on 5 different machines - 2 non-LTV, 3 LTV (Acrobat Reader DC everywhere)
I checked the \AppData\Roaming\Adobe\Acrobat\DC\Security\CRLCache directory on two computers (one with LTV and one with non-LTV) - no CRL for this CA.
This is a very important document - please help.

margueritek · Accepted Answer

By "CRL / OCSP Response embedded in the signature" I mean "in the signed document" not "in the signature field".

There is no timestamp. All the certificates are valid (some of them will expire next week).

And I know the reason of the difference - if the option "verifying signatures using time at which the signature was created" is selected, then the signature is "LTV-enabled". If the option "verifying signatures using secure time (timestamp) embedded in the signature" is selected then the same signature is "non-LTV".

In my opinion this is not exaclty OK with the ETSI norm.

But I still don't understand why on my computer (with the "verifying signatures using secure time (timestamp) embedded in the signature" option selected) I had a LTV-enabled signature for first 2 hours.

(I'm guessing) that's related to the fact that Acrobat caches a lot of CRL and OCSP responses while it is launched, without regard for which signature they apply to. The cache gets cleared when you exit Acrobat (and maybe at other times).

uandme72 · Answer

A digital signature showing as "LTV enabled" in the signature panel of Adobe reader becomes "not LTV enabled" if in 'Signature Verification Preferences' dialog that opens (In Edit > Preferences, under categories, select Signatures.. From the Verification box in the Digital Signatures panel, select More...)

, we deselect the Require certificate revocation checking to succeed... checkbox.

However, the same signature again becomes LTV enabled if we select Require certificate revocation checking to succeed... checkbox.

Is it a bug in Adobe Reader (latest version),

Sign up

To post, reply, or follow discussions, please sign in with your Adobe ID.

Sign in to Adobe Community

To post, reply, or follow discussions, please sign in with your Adobe ID.

Scanning file for viruses.

This file cannot be downloaded