From mboxrd@z Thu Jan 1 00:00:00 1970 X-Msuck: nntp://news.gmane.io/gmane.text.pandoc/32575 Path: news.gmane.io!.POSTED.blaine.gmane.org!not-for-mail From: Malcolm Nixon Newsgroups: gmane.text.pandoc Subject: Re: Digitally Signed Outputs Date: Tue, 9 May 2023 14:08:18 -0700 (PDT) Message-ID: <73c2358c-ef08-411f-94e7-0d55e14b29b7n@googlegroups.com> References: <5f41500c-54d8-43ca-855b-e2acfd0779dfn@googlegroups.com> Reply-To: pandoc-discuss-/JYPxA39Uh5TLH3MbocFFw@public.gmane.org Mime-Version: 1.0 Content-Type: multipart/mixed; boundary="----=_Part_1468_1691984999.1683666498854" Injection-Info: ciao.gmane.io; posting-host="blaine.gmane.org:116.202.254.214"; logging-data="1509"; mail-complaints-to="usenet@ciao.gmane.io" To: pandoc-discuss Original-X-From: pandoc-discuss+bncBDPLRZ7U3EFRBRHM5KRAMGQEMTNJAII-/JYPxA39Uh5TLH3MbocFFw@public.gmane.org Tue May 09 23:08:22 2023 Return-path: Envelope-to: gtp-pandoc-discuss@m.gmane-mx.org Original-Received: from mail-ot1-f58.google.com ([209.85.210.58]) by ciao.gmane.io with esmtps (TLS1.3:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.92) (envelope-from ) id 1pwUZK-0000Cb-RO for gtp-pandoc-discuss@m.gmane-mx.org; Tue, 09 May 2023 23:08:22 +0200 Original-Received: by mail-ot1-f58.google.com with SMTP id 46e09a7af769-6ab15a57269sf1296769a34.3 for ; Tue, 09 May 2023 14:08:22 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=googlegroups.com; s=20221208; t=1683666501; x=1686258501; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:reply-to:x-original-sender :mime-version:subject:references:in-reply-to:message-id:to:from:date :sender:from:to:cc:subject:date:message-id:reply-to; bh=a5yGCPx/FIIUT7yz6U1FsmYDFZMdpQY30qPxgq1cINY=; b=JszzA9hl6zJ58OJt9YAkA5jcar/VBZXCUsXp/8CYCVqvhbhmQLS21FyWSN/L0zslQZ 2XK2WzW5P7rKjmUgf9QkrZEdFbAFG8cqDJ1hwIK8ZFCmlEM1SbR66Il6lvn3B8gPJuoG sCrHMqH/nFoSFMRdjb28RbxtB0eHcyxvNo4UESfKL/Y5miynuRLiTMD0GNChqjJ3C6HT RMFVI7eZnPTtiHVivu5j2kVjenqUIjDOET7S9eBYruhnW61M3nuAg6blrXQY8Wtklrxa aHwPu2xddtnP9aH+oseLW2lnYG42MrRUp2n8g/SOng7Jphyi6UihBgnFxpm2R4PxUwV+ ov3Q== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20221208; t=1683666501; x=1686258501; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:reply-to:x-original-sender :mime-version:subject:references:in-reply-to:message-id:to:from:date :from:to:cc:subject:date:message-id:reply-to; bh=a5yGCPx/FIIUT7yz6U1FsmYDFZMdpQY30qPxgq1cINY=; b=kC4dS6hpoc2D59FN2a6SvYlvpYKQU8wy1cSUoMo8oTj/weAKcyZNXHA+s9tNeylT/p imArOzlRYU+8LpJ14NoIj439VLOXFhlzV/9FtSXX6kGnfSbLJmkyiPnksoZvWQlxQose rhvNm9FBOh+t9KYm5lbpur+ev/7kL7poc+R7uk443iZCRSWAyo1tYFTwBJgCHsjWsu6+ KyYT5WNd5ZvWHXo7GyiqkJHzFDLJaxxtu9YQHka7UJdeusx9dfKJAbskI7yYdrqO6qgT e9rIP/jxX5LoKGxg7ZXYsv4LDwMCw3Hjc4q5bILCIlsGvxiWsBEUnqcdTKCGfzLL6XXS czkg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20221208; t=1683666501; x=1686258501; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :x-spam-checked-in-group:list-id:mailing-list:precedence:reply-to :x-original-sender:mime-version:subject:references:in-reply-to :message-id:to:from:date:x-beenthere:x-gm-message-state:sender:from :to:cc:subject:date:message-id:reply-to; bh=a5yGCPx/FIIUT7yz6U1FsmYDFZMdpQY30qPxgq1cINY=; b=jY7mwGVBRinu4Czc+U2EG4qpMCejpFhrAHgq7SBt7AIuDidZYZtDSwUbWHnCG28VeV X6rStUM/oYPNxXFfV9oa37xq42loOYjXCogl1K+Mwy1bS1VbyGb67qDyrD7NR3pakKEY QcgOvSt4Op40fiv72NAIJyDxuooI8Z6tS7kYddMx3zjPkyDgC0NR+mctReWqnQmNTTeW pCn2n7qBhlc+dft+otyPf4rnoBnhguBtZJsW9xd5j7CMSeLRGUN1o2G1OaTZuahUG3PB My0b+exzr+kYHz+DyELKfzkRaKfZgjITpoHJv6gtGiZ9gYoaft Original-Sender: pandoc-discuss-/JYPxA39Uh5TLH3MbocFFw@public.gmane.org X-Gm-Message-State: AC+VfDxu6yZmUCv33Ot0gjeoLDq0LVravYTh7pTkWHANRN3qwJOLMVeZ MRFd8EC48WwIjcmFc2HIMWA= X-Google-Smtp-Source: ACHHUZ5XVPwzCfJAGqPjy5vngqw1KR+vBaZp7Cm5r5bcIJwKczIrpWEvJlApNY+3Y+PGiTvuCQaaVQ== X-Received: by 2002:a9d:65d5:0:b0:6a9:770c:7d26 with SMTP id z21-20020a9d65d5000000b006a9770c7d26mr1158952oth.4.1683666501694; Tue, 09 May 2023 14:08:21 -0700 (PDT) X-BeenThere: pandoc-discuss-/JYPxA39Uh5TLH3MbocFFw@public.gmane.org Original-Received: by 2002:a05:6870:a684:b0:180:3bb4:fca with SMTP id i4-20020a056870a68400b001803bb40fcals223985oam.0.-pod-prod-00-us; Tue, 09 May 2023 14:08:19 -0700 (PDT) X-Received: by 2002:a05:6830:3194:b0:6a5:d909:4851 with SMTP id p20-20020a056830319400b006a5d9094851mr1192675ots.1.1683666499463; Tue, 09 May 2023 14:08:19 -0700 (PDT) In-Reply-To: X-Original-Sender: Malcolm.Nixon-Re5JQEeQqe8AvxtiuMwx3w@public.gmane.org Precedence: list Mailing-list: list pandoc-discuss-/JYPxA39Uh5TLH3MbocFFw@public.gmane.org; contact pandoc-discuss+owners-/JYPxA39Uh5TLH3MbocFFw@public.gmane.org List-ID: X-Google-Group-Id: 1007024079513 List-Post: , List-Help: , List-Archive: , List-Unsubscribe: , Xref: news.gmane.io gmane.text.pandoc:32575 Archived-At: ------=_Part_1468_1691984999.1683666498854 Content-Type: multipart/alternative; boundary="----=_Part_1469_1163524395.1683666498854" ------=_Part_1469_1163524395.1683666498854 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Yes, PDF/A (when combined with a digital signature such as PAdES) looks to= =20 be ideal in creating long-term tamper-resistant artifacts such as release= =20 notes or test reports in CI pipelines. I found the PDF/A documentation and tried giving it a shot; however it=20 looks like it only works with the ConTeXt engine, and the pandoc docker=20 images only come with LaTeX. I might have to take a diversion and look into docker ;) Many thanks, - Malcolm On Tuesday, May 9, 2023 at 6:52:19=E2=80=AFAM UTC-4 Stephan Meijer wrote: > With digitally signed, do you mean PDF/A? > > Pandoc has some info about it on their FAQ:=20 > https://pandoc.org/faqs.html#how-can-i-produce-pdfa-with-pandoc > > Hope I was of any help. > > Stephan > > On Tuesday, 2 May 2023 at 00:42:57 UTC+2 Malcolm Nixon wrote: > >> Greetings all, >> >> I'm looking to use Pandoc to generate digitally-signed PDFs from a CI=20 >> workflow - specifically the digital signature would be evidence that the= =20 >> document hasn't been tampered with. >> >> While the underlying Miktek PDF generator has a "digsig" package, it=20 >> looks like Pandoc doesn't have any command-line options for triggering t= he=20 >> signing of the output. >> >> Am I missing something in the documentation (such as some means of=20 >> specifying custom miktek extensions).=20 >> >> Many thanks, >> - Malcolm >> > --=20 You received this message because you are subscribed to the Google Groups "= pandoc-discuss" group. To unsubscribe from this group and stop receiving emails from it, send an e= mail to pandoc-discuss+unsubscribe-/JYPxA39Uh5TLH3MbocFF+G/Ez6ZCGd0@public.gmane.org To view this discussion on the web visit https://groups.google.com/d/msgid/= pandoc-discuss/73c2358c-ef08-411f-94e7-0d55e14b29b7n%40googlegroups.com. ------=_Part_1469_1163524395.1683666498854 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Yes, PDF/A (when combined with a digital signature such as PAdES) looks to = be ideal in creating long-term tamper-resistant artifacts such as release n= otes or test reports in CI pipelines.

I found the PDF/A document= ation and tried giving it a shot; however it looks like it only works with = the ConTeXt engine, and the pandoc docker images only come with LaTeX.
=
I might have to take a diversion and look into docker ;)

Many thanks,

=C2=A0 = =C2=A0 - Malcolm

On Tuesday, May 9, 2023 at 6:52:19=E2=80=AFA= M UTC-4 Stephan Meijer wrote:
With digitally signed, do you mean PDF/A?

Pandoc has some info about it on their FAQ:=C2=A0https://pandoc.org/faqs.html#how-can-i-produce-pdfa-with-pandoc=

Hope I was of any help.

= Stephan

On Tuesday, 2 May 2023 at 00:42:57 UTC+2 Malcolm Nixon wrote:
Greetings all,

=
I'm looking to use Pandoc to generate digitally-signed PDFs = from a CI workflow - specifically the digital signature would be evidence t= hat the document hasn't been tampered with.

Wh= ile the underlying Miktek PDF generator has a "digsig" package, i= t looks like Pandoc doesn't have any command-line options for triggerin= g the signing of the output.

Am I missing somethin= g in the documentation (such as some means of specifying custom miktek exte= nsions).=C2=A0

Many thanks,
=C2=A0- Malc= olm

--
You received this message because you are subscribed to the Google Groups &= quot;pandoc-discuss" group.
To unsubscribe from this group and stop receiving emails from it, send an e= mail to pand= oc-discuss+unsubscribe-/JYPxA39Uh5TLH3MbocFFw@public.gmane.org.
To view this discussion on the web visit https://groups.google.com/d= /msgid/pandoc-discuss/73c2358c-ef08-411f-94e7-0d55e14b29b7n%40googlegroups.= com.
------=_Part_1469_1163524395.1683666498854-- ------=_Part_1468_1691984999.1683666498854--