Adobe crash when checking signature revocation - smart firewall

[marco_p]

when you open a pdf file with adobe reader with signatures to verify via “ocsp tipki it” the program crashes. if i disable norton smart firewall this does not happen. What parameters do i have to change to solve it?

[bjm]

@marco_p

when you open a pdf file with adobe reader with signatures to verify via “ocsp tipki it” the program crashes.

and adobe reader version is up-to-date? → v24.005.20320

https://www.axway.com/sites/default/files/datasheet_files/axway_datasheet_validation-authority_en.pdf

[marco_p]

yes latest version. in desperation I also uninstalled and reinstalled

[bjm]

Adobe Acrobat Reader free?
and Adobe Acrobat Reader free is set as your default viewer?

[marco_p]

yes

[bjm]

as test: installed Adobe Reader free → set default → call .pdf file → no crash my side

any Adobe Trials or other Adobe programs

@marco_p

when you open a pdf file with adobe reader with signatures to verify via “ocsp tipki it” the program crashes.

I’m not familiar with “signatures to verify” via ocsp.tipki.it

[marco_p]

pdf without signature all ok. For those with signature, reader proceeds to a signature check. If smart firewall is active the program blocks, if I disable it no problem

[marco_p]

Thanks anyway for your availability

[bjm]

@marco_p

pdf without signature all ok. For those with signature, reader proceeds to a signature check. If smart firewall is active the program blocks, if I disable it no problem

Oh okay…Thanks…and no prompt from Norton pointing to cause?
Security History → Smart Firewall?
and you’ve reset Norton Smart Firewall?

@marco_p

If smart firewall is active the program blocks, if I disable it no problem

meaning Norton blocks ocsp.tipki.it?

is ocsp.tipki.it an installed program/service or a website that’s accessed?

[marco_p]

no report from smart firewall
ocsp… is a website

[bjm]

@marco_p

no report from smart firewall
ocsp… is a website

Sorry, I’m not familiar.
website?
So, Norton crashes or Adobe reader crashes?
Can you use browser .pdf reader?
Does changing default browser change anything?

https://en.wikipedia.org/wiki/Online_Certificate_Status_Protocol

https://www.techtarget.com/searchsecurity/definition/OCSP

Lets ask @SoulAsylum

[marco_p]

adobe crash
use program adobe reader
don’t change anything

[bjm]

as test: added signature to .pdf document

[bjm]

as test: signed, initialed & email’d .pdf doc with request for signature → received → signed, saved and opened → with no crash
Sorry, I’m not reproducing your scenario.

[marco_p]

the file is not signed via adobe. the document is drawn up by a public administration and the electronic signature is affixed to the document via authorized companies. In Italy it works like this to give a legal and certain value to the document. Before the norton update everything worked perfectly. Now if smart firewall is enabled, adobe reader blocks, if smart firewall is disabled, everything works.

[bjm]

@marco_p

the file is not signed via adobe. the document is drawn up by a public administration and the electronic signature is affixed to the document via authorized companies. In Italy it works like this to give a legal and certain value to the document. Before the norton update everything worked perfectly. Now if smart firewall is enabled, adobe reader blocks, if smart firewall is disabled, everything works.

Okay…Thanks…Sorry, I’m not able to reproduce your scenario.
maybe, contact support and offer to send debug logs

So, Adobe reader crashes when trying to verify the signature via OCSP?

[marco_p]

yes

[bjm]

and you’ve reviewed Adobe → Preferences → Security? → Security (Enhanced)? → Signatures?
and you’ve tried excluding Adobe within Norton…as test?

https://helpx.adobe.com/acrobat/using/validating-digital-signatures.html

==================================================
Oh okay…so, signature is not verified within Adobe.
Adobe reader crashes when trying to verify the signature via OCSP and OCSP is an online resource.

Norton Smart Firewall does not report event… despite Norton Smart Firewall appears not happy with some OCSP traffic…because with Smart Firewall off = no crash.