From 42b2f2d03c664277bb748ed6be7f25dce47f3c54 Mon Sep 17 00:00:00 2001 From: Paul Schaub Date: Tue, 24 Feb 2026 13:21:03 +0100 Subject: [PATCH 1/2] AbstractOpenPGPDocumentSignatureGenerator: Properly apply signature creation time from SignatureParameters This fixes OpenPGPMessageGenerator not applying custom signature creation times for message signatures --- .../openpgp/api/AbstractOpenPGPDocumentSignatureGenerator.java | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pg/src/main/java/org/bouncycastle/openpgp/api/AbstractOpenPGPDocumentSignatureGenerator.java b/pg/src/main/java/org/bouncycastle/openpgp/api/AbstractOpenPGPDocumentSignatureGenerator.java index 4111697472..241c8e1b2b 100644 --- a/pg/src/main/java/org/bouncycastle/openpgp/api/AbstractOpenPGPDocumentSignatureGenerator.java +++ b/pg/src/main/java/org/bouncycastle/openpgp/api/AbstractOpenPGPDocumentSignatureGenerator.java @@ -251,7 +251,7 @@ protected PGPSignatureGenerator initSignatureGenerator( } return Utils.getPgpSignatureGenerator(implementation, signingKey.getPGPPublicKey(), - unlockedKey.getPrivateKey(), parameters, null, null); + unlockedKey.getPrivateKey(), parameters, parameters.getSignatureCreationTime(), null); } private int getPreferredHashAlgorithm(OpenPGPCertificate.OpenPGPComponentKey key) From 977be7809320fc4bccc0aecacb0354614562ea05 Mon Sep 17 00:00:00 2001 From: Paul Schaub Date: Wed, 25 Feb 2026 13:24:18 +0100 Subject: [PATCH 2/2] Properly set back-signature creation time from callback --- .../java/org/bouncycastle/openpgp/api/OpenPGPKeyEditor.java | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pg/src/main/java/org/bouncycastle/openpgp/api/OpenPGPKeyEditor.java b/pg/src/main/java/org/bouncycastle/openpgp/api/OpenPGPKeyEditor.java index 5a7801bad1..5fd33e7276 100644 --- a/pg/src/main/java/org/bouncycastle/openpgp/api/OpenPGPKeyEditor.java +++ b/pg/src/main/java/org/bouncycastle/openpgp/api/OpenPGPKeyEditor.java @@ -262,7 +262,7 @@ public OpenPGPKeyEditor addSigningSubkey(PGPKeyPair signingSubkey, PGPPublicKey publicPrimaryKey = key.getPrimaryKey().getPGPPublicKey(); - final PGPSignature backSig = Utils.getBackSignature(signingSubkey, backSigParameters, publicPrimaryKey, implementation, null); + final PGPSignature backSig = Utils.getBackSignature(signingSubkey, backSigParameters, publicPrimaryKey, implementation, backSigParameters.getSignatureCreationTime()); updateKey(signingSubkey, bindingSigCallback, publicPrimaryKey, new Utils.HashedSubpacketsOperation() {