[Libreoffice-bugs] [Bug 119309] New: AdES Digital Signatures

[bugzilla-daemon at bugs.documentfoundation.org]

https://bugs.documentfoundation.org/show_bug.cgi?id=119309

            Bug ID: 119309
           Summary: AdES Digital Signatures
           Product: LibreOffice
           Version: 6.1.0.3 release
          Hardware: All
                OS: All
            Status: UNCONFIRMED
          Severity: normal
          Priority: medium
         Component: Writer
          Assignee: libreoffice-bugs at lists.freedesktop.org
          Reporter: javatask at gmail.com

Description:
EU has developed the opensource tool https://github.com/esig/dss to verify
different Digital Signatures including ASiC-E type = ODT container.
But while trying to use LibreOffice to created signed AdES document, DSS tool
can't verify ODT signature.
Details - https://ec.europa.eu/cefdigital/tracker/browse/DSS-1473

Way to reproduce
1 Sign odt with libreoffice
2 Use online tool https://ec.europa.eu/cefdigital/DSS/webapp-demo/validation to
validate odt object (simply upload under Signed file)

According to recommendations, we must add
type="http://uri.etsi.org/01903#SignedProperties" to ds:Reffernce object


Steps to Reproduce:
1 Sign odt with libreoffice
2 Use online tool https://ec.europa.eu/cefdigital/DSS/webapp-demo/validation to
validate odt object (simply upload under Signed file)


Actual Results:
invalid XAdES signature

Expected Results:
XAdES signature according ETSI EN 319 132-1 V1.1.1 (2016-04) + packed as ASiC
ETSI EN 319 162-1 V1.1.1 (2016-04)


Reproducible: Always


User Profile Reset: Yes


OpenGL enabled: Yes

Additional Info:

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.freedesktop.org/archives/libreoffice-bugs/attachments/20180816/250c22da/attachment.html>