lovele0107 / signatures-conformance-checker

7 stars 0 forks source link

XAdESCC: invalid DataObjectFormat reference validation #28

Open Adomas13 opened 2 years ago

Adomas13 commented 2 years ago

XAdESCC reports an error if DataObjectFormat contains ObjectReference to Reference element if it is bare-name XPointer fragment - has the shape "#ReferenceElem_1", and do not report an error if ObjectReference contains only a plain "ReferenceElem_2".

From the: TS 101 903 V1.4.2 section 7.2.5: "The mandatory ObjectReference attribute MUST reference the ds:Reference element of the ds:Signature corresponding with the data object qualified by this property" It may be not clear, what does it mean "MUST reference". As we understand, it is the same as for QualifyingProperties Target attribute refers ds:Signature:

TS 101 903 V1.4.2 section 6.2: "The mandatory Target attribute MUST refer to the Id attribute of the corresponding ds:Signature. Its value MUST be an URI with a bare-name XPointer fragment."

Therefore, ObjectReference must contain "#ReferenceElem_1" and do not contain "ReferenceElem_2". See atached XML in the: signatures0.txt

XAdESCC performed according ETSI TS 101 903 v1.4.2