On Samstag, 27. Februar 2021 23:13:05 CET Arjen de Korte wrote:
Citeren Jan Engelhardt <jengelh@inai.de>:
On Saturday 2021-02-27 07:34, Bernhard M. Wiedemann wrote:
I uploaded https://rb.zq1.de/compare.factory-20210227/ today
gfan: dvipdf manual.dvi manual.pdf
Generates <xmp:CreateDate>, <xmp:ModifyDate> and <xapMM:DocumentID>uu-id-..</xap>
Cause is ghostscript:/devices/vector/gdevpdfe.c not honoring SOURCE_BUILD_TIME or any of the other mechanisms.
That, and quite a few other places. I think I got most of them, so here we go: https://build.opensuse.org/request/show/875678
Using SOURCE_DATE_EPOCH and only SDE for the UUID is violating the PDF specification. While the current upstream implementation is not really good (using only the current timestamp with microsecond resolution), it has significantly more entropy than the SOURCE_DATE_EPOCH as set by the OBS, which only has day granularity. All PDFs built today would have the same UUID. The recommendation in PDF 32000-1 is to also use the contents of the document metadata dictionary, the filesize and the filename. Kind regards, Stefan -- Stefan Brüns / Bergstraße 21 / 52062 Aachen home: +49 241 53809034 mobile: +49 151 50412019