Insert digital signature into existing pdf file

by

After some research, recurring to the OpenSSL documentation and exploring the Origami solution, i built the code below, and managed to insert a locally generated signature/certificate into a pdf document. Now I just need to figure out how to use this with an external generated certificate (check version 2 below, where i solved it). I’ve opened a new question where you can find some details on a difficulty i had with OpenSSL and DER encoded certificates.

To develop version 2, i also spent some time wondering how to add an annotation – so the signature becomes visible in Adobe reader – without adding a new page to the document. From origami documentation, i found the get_page method, which solved my last problem on this. I’m using Adobe Reader X, for the record.

Hope you find this useful as I will ;-).

VERSION 1 – Generate certificate and key file, and insert them directly into the document

require 'openssl'

begin
  require 'origami'
rescue LoadError
  ORIGAMIDIR = "C:\RailsInstaller\Ruby1.9.3\lib\ruby\gems\1.9.1\gems\origami-1.2.4\lib"
  $: << ORIGAMIDIR
  require 'origami'
end
include Origami

# Code below is based on documentation available on
# http://www.ruby-doc.org/stdlib-1.9.3/libdoc/openssl/rdoc/OpenSSL.html
key = OpenSSL::PKey::RSA.new 2048

open 'private_key.pem', 'w' do |io| io.write key.to_pem end
open 'public_key.pem', 'w' do |io| io.write key.public_key.to_pem end

cipher = OpenSSL::Cipher::Cipher.new 'AES-128-CBC'
pass_phrase="Origami rocks"

key_secure = key.export cipher, pass_phrase

open 'private_key.pem', 'w' do |io|
  io.write key_secure
end

#Create the certificate

name = OpenSSL::X509::Name.parse 'CN=nobody/DC=example'

cert = OpenSSL::X509::Certificate.new
cert.version = 2
cert.serial = 0
cert.not_before = Time.now
cert.not_after = Time.now + 3600

cert.public_key = key.public_key
cert.subject = name


OUTPUTFILE = "test.pdf"

contents = ContentStream.new.setFilter(:FlateDecode)
contents.write OUTPUTFILE,
  :x => 350, :y => 750, :rendering => Text::Rendering::STROKE, :size => 30

pdf = PDF.read('Sample.pdf')


# Open certificate files

#sigannot = Annotation::Widget::Signature.new
#sigannot.Rect = Rectangle[:llx => 89.0, :lly => 386.0, :urx => 190.0, :ury => 353.0]

#page.add_annot(sigannot)

# Sign the PDF with the specified keys
pdf.sign(cert, key, 
  :method => 'adbe.pkcs7.sha1',
  #:annotation => sigannot, 
  :location => "Portugal", 
  :contact => "[email protected]", 
  :reason => "Proof of Concept"
)

# Save the resulting file
pdf.save(OUTPUTFILE)

VERSION 2 – Use existing certificates to sign a pdf document

require 'openssl'

begin
  require 'origami'
rescue LoadError
  ORIGAMIDIR = "C:\RailsInstaller\Ruby1.9.3\lib\ruby\gems\1.9.1\gems\origami-1.2.4\lib"
  $: << ORIGAMIDIR
  require 'origami'
end
include Origami

INPUTFILE = "Sample.pdf"
@inputfile = String.new(INPUTFILE)
OUTPUTFILE = @inputfile.insert(INPUTFILE.rindex("."),"_signed")
CERTFILE = "certificate.pem"
RSAKEYFILE = "private_key.pem"
passphrase = "your passphrase"

key4pem=File.read RSAKEYFILE

key = OpenSSL::PKey::RSA.new key4pem, passphrase
cert = OpenSSL::X509::Certificate.new(File.read CERTFILE)

pdf = PDF.read(INPUTFILE)
page = pdf.get_page(1)

# Add signature annotation (so it becomes visibles in pdf document)

sigannot = Annotation::Widget::Signature.new
sigannot.Rect = Rectangle[:llx => 89.0, :lly => 386.0, :urx => 190.0, :ury => 353.0]

page.add_annot(sigannot)

# Sign the PDF with the specified keys
pdf.sign(cert, key, 
  :method => 'adbe.pkcs7.sha1',
  :annotation => sigannot, 
  :location => "Portugal", 
  :contact => "[email protected]", 
  :reason => "Proof of Concept"
)

# Save the resulting file
pdf.save(OUTPUTFILE)

More Related Contents:

  1. Why do Ruby setters need “self.” qualification within the class?
  2. What is the difference between require_relative and require in Ruby?
  3. Why does Ruby 1.9.2 remove “.” from LOAD_PATH, and what’s the alternative?
  4. Blocks and yields in Ruby
  5. Best way to require all files from a directory in ruby?
  6. What does %w(array) mean?
  7. How to get argument names using reflection
  8. How to make a HTTP request using Ruby on Rails?
  9. Continuously read from STDOUT of external process in Ruby
  10. How to count duplicate elements in a Ruby array
  11. When to use `self.foo` instead of `foo` in Ruby methods
  12. Is the ruby operator ||= intelligent?
  13. Ruby method Array#
  14. What does ||= mean in Ruby? [duplicate]
  15. What does the “||=” operand stand for in ruby [duplicate]
  16. How to avoid tripping over UTF-8 BOM when reading files
  17. String concatenation in Ruby
  18. Method to parse HTML document in Ruby?
  19. How do you uninstall rbenv on macOS?
  20. What is the difference between print and puts?
  21. Read binary file as string in Ruby
  22. Why doesn’t Ruby find classes in a higher scope when module is specified using ::?
  23. ruby: class instance variables vs instance variables
  24. Ruby: Proc#call vs yield
  25. How to install ruby-debug when needing necessary libraries and/or headers
  26. How to cleanly initialize attributes in Ruby with new?
  27. Mac Rmagick won’t install with Xcode 4.2
  28. How to determine if a character is a Chinese character
  29. What does the unary question mark (?) operator do?
  30. Should I use alias or alias_method?

Leave a Comment