Signing certificate not included in document download

[joseph]

@gdeflaux basic question but how can I check if the cert is included in the document or not?

[nebulon]

Did you follow the instructions at https://docs.cloudron.io/apps/documenso/#signing-certificate ?

[gdeflaux]

@joseph Thanks for your message. Here is a screenshot of the signed document in the app. You can see that there is only one page.

[gdeflaux]

@nebulon said in Signing certificate not included in document download:

Did you follow the instructions at https://docs.cloudron.io/apps/documenso/#signing-certificate ?

Yes I did. I am however able to download the certificate from the audit log page

[joseph]

@gdeflaux the certificate won't be a page. It's part of the pdf's metadata i.e it's embedded inside the pdf. You have to use Adobe Reader to validate. On linux, you can use pdfsig .

[gdeflaux]

Hey. That's the pdfsig output I get:

❯ pdfsig 'etiquettes pays - Google Sheets_signed (1).pdf'
Digital Signature Info of: etiquettes pays - Google Sheets_signed (1).pdf
Signature #1:
  - Signer Certificate Common Name: Akvo
  - Signer full Distinguished Name: E=contact@akvo.org,CN=Akvo,O=Akvo Foundation,L=Amsterdam,ST=Holland,C=NL
  - Signing Time: Jan 07 2025 09:19:17
  - Signing Hash Algorithm: SHA-256
  - Signature Type: adbe.pkcs7.detached
  - Signed Ranges: [0 - 302706], [335480 - 336627]
  - Total document signed
  - Signature Validation: Signature is Valid.
  - Certificate Validation: Certificate issuer isn't Trusted.

Does it look correct?

[joseph]

Yes, that looks correct

[gdeflaux]

Hey. I've tried to reinstall a few times and I still get the same issue: the certificate page is not appended automatically to the signed document (the document is indeed digitally signed and the certificate can be downloaded separately from the audit page).

Is anyone experiencing the same issue? Is that a limitation from the self hosted version of the application?

As a reference, the screenshot below is taken from Documenso hosted version:

Thanks!

[joseph]

FWIW, I can reproduce this. But I don't know what the problem is. The certificate page is attached in the cloud service but not on the selfhosted one.

[gdeflaux]

Hi. Should I file a bug report for this somewhere?

[nebulon]

@gdeflaux that might indeed yes just to get some more info on how it should be

[jdaviescoates]

@nebulon said in Signing certificate not included in document download:

Did you follow the instructions at https://docs.cloudron.io/apps/documenso/#signing-certificate ?

The upstream docs https://docs.documenso.com/developers/self-hosting/signing-certificate mentioned quite a few other variables - perhaps some of the others are needed too?

[girish]

@gdeflaux we have a task internally trying to figure what the issue is.

It seems the issue is that chromium is not installed in the package. We are fixing the package , hopefully that fixes it.

[girish]

@gdeflaux issue created upstream - https://github.com/documenso/documenso/issues/1634

[gdeflaux]

@girish Thanks so much.

[gdeflaux]

I see there's a possible solution posted on the GH issue. Flagging so that maybe you guys can try it. Thanks!