I am working with Apache Poi 5.1.0, I sign an .docx Document, and the signature is valid.
I add this code:
RevocationData revocationData = new RevocationData();
revocationData.addCRL(crl1);
.
.
.
revocationData.addCRL(crlN);
revocationData.addOCSP(ocspResp.getEncoded());
RevocationDataService revocationDataService = revocationChain -> revocationData;
signatureConfig.setRevocationDataService(revocationDataService);
Where revocationData contains a OCSPResp and all CRL files including the CRL for the TSP Chain.
But when validating the signature it tells me that it needs the revocation information from the timestamp certificate chain.
I appreciate any help.