ICEpdf
  1. ICEpdf
  2. PDF-1132

CertPathBuilderException: No certificate found matching targetContraints

          Details

          • Type: Bug Bug
          • Status: Closed
          • Priority: Major Major
          • Resolution: Fixed
          • Affects Version/s: 6.2.2
          • Fix Version/s: 6.2.3, 6.3
          • Component/s: Core/Rendering, Forms
          • Labels:
            None
          • Environment:
            All

            Description

            When rendering the provided PDF file, the following exception is thrown, causing the PDF to render blank:

            FINEST: Certificate chain could not be validated.
            org.icepdf.core.pobjects.acroform.signature.exceptions.CertificateVerificationException: Error building certification path: CN=Stadt Zürich, OU=Third Party Services (Art. 9 ElDI-V), OU=Scanning Center Steueramt, O=Stadt Zürich, L=Zürich, ST=ZH, C=CH
            at org.icepdf.core.pobjects.acroform.signature.certificates.CertificateVerifier.verifyCertificate(CertificateVerifier.java:98)
            at org.icepdf.core.pobjects.acroform.signature.AbstractPkcsValidator.validateDocument(AbstractPkcsValidator.java:634)
            at org.icepdf.core.pobjects.acroform.signature.Pkcs7Validator.validate(Pkcs7Validator.java:69)
            at org.icepdf.ri.common.utility.signatures.SignatureTreeNode.validateSignatureNode(SignatureTreeNode.java:116)
            at org.icepdf.ri.common.utility.signatures.SignatureTreeNode.<init>(SignatureTreeNode.java:73)
            at org.icepdf.ri.common.utility.signatures.SignaturesPanel.addSignature(SignaturesPanel.java:167)
            at org.icepdf.ri.common.utility.signatures.SigVerificationTask$VerifyAllSignatures$1.run(SigVerificationTask.java:213)
            at java.awt.event.InvocationEvent.dispatch(InvocationEvent.java:312)
            at java.awt.EventQueue.dispatchEventImpl(EventQueue.java:733)
            at java.awt.EventQueue.access$200(EventQueue.java:103)
            at java.awt.EventQueue$3.run(EventQueue.java:694)
            at java.awt.EventQueue$3.run(EventQueue.java:692)
            at java.security.AccessController.doPrivileged(Native Method)
            at java.security.ProtectionDomain$1.doIntersectionPrivilege(ProtectionDomain.java:76)
            at java.awt.EventQueue.dispatchEvent(EventQueue.java:703)
            at java.awt.EventDispatchThread.pumpOneEventForFilters(EventDispatchThread.java:242)
            at java.awt.EventDispatchThread.pumpEventsForFilter(EventDispatchThread.java:161)
            at java.awt.EventDispatchThread.pumpEventsForHierarchy(EventDispatchThread.java:150)
            at java.awt.EventDispatchThread.pumpEvents(EventDispatchThread.java:146)
            at java.awt.EventDispatchThread.pumpEvents(EventDispatchThread.java:138)
            at java.awt.EventDispatchThread.run(EventDispatchThread.java:91)
            Caused by: java.security.cert.CertPathBuilderException: No certificate found matching targetContraints.
            at org.bouncycastle.jce.provider.PKIXCertPathBuilderSpi.engineBuild(Unknown Source)
            at java.security.cert.CertPathBuilder.build(CertPathBuilder.java:268)
            at org.icepdf.core.pobjects.acroform.signature.certificates.CertificateVerifier.verifyCertificate(CertificateVerifier.java:171)
            at org.icepdf.core.pobjects.acroform.signature.certificates.CertificateVerifier.verifyCertificate(CertificateVerifier.java:83)
            ... 20 more

              Activity

              Ascending order - Click to sort in descending order
              Arran Mccullough created issue -
              Hide
              Permalink
              Patrick Corless added a comment -

              The security exception is expected at the finest logging level as the cert in question can not be found in the JVM's keystore. The rendering issue is actually coming from the application of the an overlay blending mode. The blending mode is added to the drawing stack first and thus there is no primary or src colour yet defined. Or overlay algorithm works fine in other instances so I have to assume it's placement in the stack is the reason for the missing missing content.

              Show
              Patrick Corless added a comment - The security exception is expected at the finest logging level as the cert in question can not be found in the JVM's keystore. The rendering issue is actually coming from the application of the an overlay blending mode. The blending mode is added to the drawing stack first and thus there is no primary or src colour yet defined. Or overlay algorithm works fine in other instances so I have to assume it's placement in the stack is the reason for the missing missing content.
              Patrick Corless made changes -
              Field Original Value New Value
              Fix Version/s 6.2.3 [ 13098 ]
              Hide
              Permalink
              Patrick Corless added a comment -

              Added fix to trunk and 6.2 branch.

              Show
              Patrick Corless added a comment - Added fix to trunk and 6.2 branch.
              Patrick Corless made changes -
              Status Open [ 1 ] Resolved [ 5 ]
              Resolution Fixed [ 1 ]
              Repository Revision Date User Message
              ICEsoft Public SVN Repository #51096 Tue Mar 07 08:59:07 MST 2017 patrick.corless PDF-1132 added check to make sure we aren't adding a blending mode as
              the first element on the graphics stack.
              Files Changed
              Commit graph MODIFY /icepdf/trunk/icepdf/core/src/org/icepdf/core/util/content/AbstractContentParser.java
              Repository Revision Date User Message
              ICEsoft Public SVN Repository #51097 Tue Mar 07 08:59:23 MST 2017 patrick.corless PDF-1132 added check to make sure we aren't adding a blending mode as
              the first element on the graphics stack.
              Files Changed
              Commit graph MODIFY /icepdf/branches/icepdf-6.2.0/icepdf/core/src/org/icepdf/core/util/content/AbstractContentParser.java
              Patrick Corless made changes -
              Fix Version/s 6.3 [ 13093 ]
              Repository Revision Date User Message
              ICEsoft Public SVN Repository #51354 Fri Mar 17 12:52:36 MDT 2017 patrick.corless PDF-1132 adjusted rule to keep overlay blending from occurring on first
              element of stack.
              Files Changed
              Commit graph MODIFY /icepdf/branches/icepdf-6.2.0/icepdf/core/src/org/icepdf/core/util/content/AbstractContentParser.java
              Repository Revision Date User Message
              ICEsoft Public SVN Repository #51355 Fri Mar 17 12:54:59 MDT 2017 patrick.corless PDF-1132 adjusted rule to keep overlay blending from occurring on first
              element of stack.
              Files Changed
              Commit graph MODIFY /icepdf/tags/icepdf-6.2.3/icepdf/core/src/org/icepdf/core/util/content/AbstractContentParser.java
              Patrick Corless made changes -
              Status Resolved [ 5 ] Closed [ 6 ]

                People

                • Assignee:
                  Patrick Corless
                  Reporter:
                  Arran Mccullough
                • Votes:
                  0 Vote for this issue
                  Watchers:
                  2 Start watching this issue

                  Dates

                  • Created:
                    Updated:
                    Resolved: