在对 PDDocument 进行数字签名后,我关闭了 Apache PDFBox 中的 PDDocument。我收到警告:You did not close PDF Document当我关闭我的实例时。只有一个地方创建了 PDDocument 并且它被正确关闭。
代码 :
private byte[] buildDocument(File pdfToSign, PDVisibleSigProperties visibleSigProperties) throws Exception
{
FileOutputStream fos = null;
PDDocument doc = null;
try
{
String signedPdfName = pdfToSign.getName().substring(0, pdfToSign.getName().indexOf("."));
File signedFile = File.createTempFile(signedPdfName + "_signed", null);
signedFile.deleteOnExit();
fos = new FileOutputStream(signedFile);
doc = PDDocument.load(pdfToSign);
// create signature dictionary
PDSignature signature = new PDSignature();
signature.setFilter(PDSignature.FILTER_ADOBE_PPKLITE);
// subfilter for basic and PAdES Part 2 signatures
signature.setSubFilter(PDSignature.SUBFILTER_ADBE_PKCS7_DETACHED);
signature.setName(visibleSigProperties.getSignerName());
signature.setLocation(visibleSigProperties.getSignerLocation());
signature.setReason(visibleSigProperties.getSignatureReason());
// the signing date, needed for valid signature
signature.setSignDate(Calendar.getInstance());
// register signature dictionary and sign interface
SignatureOptions options = new SignatureOptions();
options.setVisualSignature(visibleSigProperties);
options.setPage(visibleSigProperties.getPage() - 1);
doc.addSignature(signature, this, options);
byte[] pdfInBytes = IOUtils.toByteArray(new FileInputStream(signedFile));
return pdfInBytes;
}
finally
{
if(doc != null)
{
// write incremental (only for signing purpose)
doc.saveIncremental(fos);
doc.close();
}
if(fos != null)
{
fos.flush();
fos.close();
}
}
}
Run Code Online (Sandbox Code Playgroud)
签名接口实现
/**
* Signature Interface implementation
* This is called by pdf Box
*/
public byte[] sign(InputStream content) throws IOException
{
try
{
List<Certificate> certList = new ArrayList<Certificate>();
certList.add(getCertificate());
Store certs = new JcaCertStore(certList);
CMSSignedDataGenerator gen = new CMSSignedDataGenerator();
org.bouncycastle.asn1.x509.Certificate cert = org.bouncycastle.asn1.x509.Certificate.getInstance(ASN1Primitive.fromByteArray(getCertificate().getEncoded()));
ContentSigner sha1Signer = new JcaContentSignerBuilder("SHA256WithRSA").build(getPrivateKey());
gen.addSignerInfoGenerator(new JcaSignerInfoGeneratorBuilder(new JcaDigestCalculatorProviderBuilder().build()).build(sha1Signer, new X509CertificateHolder(cert)));
gen.addCertificates(certs);
CMSProcessableInputStream msg = new CMSProcessableInputStream(content);
CMSSignedData signedData = gen.generate(msg, false);
return signedData.getEncoded();
}
catch (GeneralSecurityException e)
{
throw new IOException(e);
}
catch (CMSException e)
{
throw new IOException(e);
}
catch (OperatorCreationException e)
{
throw new IOException(e);
}
}
Run Code Online (Sandbox Code Playgroud)
请options在关闭文档后关闭:
if(doc != null)
{
// write incremental (only for signing purpose)
doc.saveIncremental(fos);
doc.close();
IOUtils.closeQuietly(options);
}
Run Code Online (Sandbox Code Playgroud)
原因是它options包含一个视觉签名模板。