(Bug) TSA Timestamp doesn't work with when running bentopdf with HTTPS
Author: felipewnpCreated Jul 6, 2026Updated Sep 13, 2026
Labelsbug
Description
Hello all!
I've found a problem where the TSA signing doesn't work if you are accessing bentopdf with HTTPS, because all endpoints are HTTP:
Related to #576
Steps to Reproduce
- Run bentopdf with HTTPS
- Try to TSA Sign a PDF
Console Logs
main-C0556oD9.js:27 i18next is made possible by our own product, Locize — consider powering your project with managed localization (AI, CDN, integrations): https://locize.com
main-C0556oD9.js:57 Please share our tool and share the love!
timestamp-pdf-CjqQbVcF.js:1 Timestamp error: Error: This TSA endpoint uses HTTP (http://timestamp.digicert.com). The browser blocks insecure requests from this HTTPS page. Either choose a TSA with an HTTPS endpoint or configure VITE_CORS_PROXY_URL at build time so the request can be relayed through your proxy.
at kC (digital-sign-pdf-C_6H4n2X.js:109:6093)
at HTMLButtonElement.w (timestamp-pdf-CjqQbVcF.js:1:3108)
w @ timestamp-pdf-CjqQbVcF.js:1
timestamp-pdf-CjqQbVcF.js:1 Timestamp error: Error: This TSA endpoint uses HTTP (http://timestamp.digicert.com). The browser blocks insecure requests from this HTTPS page. Either choose a TSA with an HTTPS endpoint or configure VITE_CORS_PROXY_URL at build time so the request can be relayed through your proxy.
at kC (digital-sign-pdf-C_6H4n2X.js:109:6093)
at HTMLButtonElement.w (timestamp-pdf-CjqQbVcF.js:1:3108)
w @ timestamp-pdf-CjqQbVcF.js:1Sample PDF or File
Any pdf.
Browser
Chrome
Browser Version
149
Operating System
Windows
BentoPDF Version
2.8.6
Additional Context
No response
Pre-submission Checklist
- I have included console logs from the browser DevTools
- I have attached a sample file or described how to reproduce the issue
- I have searched existing issues to ensure this is not a duplicate
Source: alam00000/bentopdf