[Libreoffice-bugs] [Bug 135604] Invalid multiple XAdES Digital Signature in LibreOffice 7.0

[bugzilla-daemon at bugs.documentfoundation.org]

https://bugs.documentfoundation.org/show_bug.cgi?id=135604

--- Comment #5 from Andrii Melashchenko <javatask at gmail.com> ---
My assumption was proven by DSS team: their comment 

The problem is that both signatures in your file contain references to
SignedProperties with the same Id "idSignedProperties". Conversely, the element
with the Id "idSignedProperties" itself is present in the file two times. This
is not valid XML structure and an identifier cannot be duplicated in a file.
Because of this the DSS validation correctly fails with the result
SIGNED_DATA_NOT_FOUND (unable to determine the referenced object).



By default DSS creates a unique deterministic identifier for each signed
element, including SignedProperties. This allows avoiding of conflicts between
references. In the attachment you can find an example of a valid double-signed
ODT document created with DSS.

I hope this clarifies.


Best regards,

Aleksandr.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.freedesktop.org/archives/libreoffice-bugs/attachments/20200811/2d8f912a/attachment.htm>