From 94790aeb1f487431b548a0bf6115422c177365e5 Mon Sep 17 00:00:00 2001
From: Paul van Brouwershaven <paul@vanbrouwershaven.com>
Date: Mon, 10 Mar 2025 20:52:02 +0100
Subject: [PATCH] Move certificate check

---
 sign/sign.go | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/sign/sign.go b/sign/sign.go
index 40f20d1..694c460 100644
--- a/sign/sign.go
+++ b/sign/sign.go
@@ -169,10 +169,6 @@ func Sign(input io.ReadSeeker, output io.Writer, rdr *pdf.Reader, size int64, si
 }
 
 func (context *SignContext) SignPDF() error {
-	if context.SignData.Certificate == nil {
-		return fmt.Errorf("certificate is required")
-	}
-
 	// set defaults
 	if context.SignData.Signature.CertType == 0 {
 		context.SignData.Signature.CertType = 1
@@ -208,6 +204,10 @@ func (context *SignContext) SignPDF() error {
 
 	// If not a timestamp signature
 	if context.SignData.Signature.CertType != TimeStampSignature {
+		if context.SignData.Certificate == nil {
+			return fmt.Errorf("certificate is required")
+		}
+
 		switch context.SignData.Certificate.SignatureAlgorithm.String() {
 		case "SHA1-RSA":
 		case "ECDSA-SHA1":