c2pa-org / public-testfiles

A collection of test files with which to test C2PA implementations.
5 stars 5 forks source link

Nikon test file is invalid #8

Open christianpaquin opened 3 months ago

christianpaquin commented 3 months ago

The nikon-20221019-building.jpeg file is invalid when tested with the c2patool:

 "validation_status": [
    {
      "code": "signingCredential.expired",
      "url": "Cose_Sign1",
      "explanation": "certificate expired"
    },
    {
      "code": "claimSignature.mismatch",
      "url": "self#jumbf=/c2pa/urn:uuid:cfcf3edf-245e-4ba9-80d8-07b4ed4dffaf/c2pa.signature",
      "explanation": "claim signature is not valid"
    },
    {
      "code": "assertion.hashedURI.match",
      "url": "self#jumbf=c2pa.assertions/c2pa.thumbnail.claim.jpeg",
      "explanation": "hashed uri matched: self#jumbf=c2pa.assertions/c2pa.thumbnail.claim.jpeg"
    },
    {
      "code": "assertion.hashedURI.match",
      "url": "self#jumbf=c2pa.assertions/stds.schema-org.CreativeWork",
      "explanation": "hashed uri matched: self#jumbf=c2pa.assertions/stds.schema-org.CreativeWork"
    },
    {
      "code": "assertion.hashedURI.match",
      "url": "self#jumbf=c2pa.assertions/stds.exif",
      "explanation": "hashed uri matched: self#jumbf=c2pa.assertions/stds.exif"
    },
    {
      "code": "assertion.hashedURI.match",
      "url": "self#jumbf=c2pa.assertions/c2pa.hash.data",
      "explanation": "hashed uri matched: self#jumbf=c2pa.assertions/c2pa.hash.data"
    },
    {
      "code": "assertion.dataHash.match",
      "url": "self#jumbf=/c2pa/urn:uuid:cfcf3edf-245e-4ba9-80d8-07b4ed4dffaf/c2pa.assertions/c2pa.hash.data",
      "explanation": "data hash valid"
    }
  ]

Is that on purpose? If so, it should be explained; if not, it should be updated.