search

lovele0107 / signatures-conformance-checker

7 stars 0 forks source link

CAdES: LTA error only in countersignatures #8

Open dfdiego opened 3 years ago

dfdiego commented 3 years ago

Hello,

When I validate an LTA countersignature, the validator says:

Location-{CodeTest}:content/signedData/signerInfos/signerInfo[1]/unsignedAttrs/attribute[1]/attrValues/counterSignature[1]/unsignedAttrs/attribute[2]/attrValues/archiveTimeStampV3[1]/content/signedData/signerInfos/signerInfo[1]/unsignedAttrs/attribute[1]/attrValues/atsHashIndex[1]/unsignedAttrsHashIndex/unsignedAttrHashIndex[1]-{CheckIfIsDigestOfUnsignedAttrsValuesInstances}
--
The unsigned attribute digest with value: ecaf70d4b377814b79cb9b1c17cce3b35e847422b2a429926807880dd46f7ae2 not found among the digest values computed on unsigned attribute values in SignedData.

The unsignedAttrHashIndex value is referring to a Signature Time Stamp.

This error appears only on countersignatures of LTA type, while for the same signature type (LTA) in first signature or parallel signatures, the error doesn't appear, despite the fact the hash in the index being calculated in the same way.

jccruellas commented 3 years ago

Good afternoon dfdiego, Sorry for not reacting before. Could you please upload the file (I guess is a CAdES file?) so that I can run my local copy of CAdESCC and check what is going on? Actually, this local version is an updated version of the one deployed at the ETSI Portal, and I plan to update it pretty soon...likely this week

Regards Juan Carlos.