Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

{CheckIfMssgImpIsAsInSpec} error for XAdES-B-LTA signatures with XPATH #32

Open
realmoieen opened this issue May 30, 2022 · 0 comments
Open

Comments

@realmoieen
Copy link

I've signed an xml part and created an LTA signature but the ETSI tool does not validates the file and give following error.

image

The message imprint I used in ArchiveTimeStamp token for contribution of UnsignedSignatureProperties/ArchiveTimeStamp[4]/EncapsulatedTimeStamp[1] is
<xades:SignedProperties xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:xades="http://uri.etsi.org/01903/v1.3.2#" Id="SignedProperties_13177"> <xades:SignedSignatureProperties> <xades:SigningTime>2022-05-30T17:09:11+05:00</xades:SigningTime> <xades:SigningCertificateV2> <xades:Cert> <xades:CertDigest> <ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/> <ds:DigestValue>n4PUjHWA7/1ep3mPLZ/9ETIWk42kwFoRhiwXW1zf11s=</ds:DigestValue> </xades:CertDigest> <xades:IssuerSerialV2>MIGMMHSkcjBwMQswCQYDVQQGEwJHQjEZMBcGA1UEChMQQXNjZXJ0aWEgTGltaXRl ZDEnMCUGA1UECxMeQXNjZXJ0aWEgU29mdHdhcmUgRGlzdHJpYnV0aW9uMR0wGwYD VQQDExRBRFNTIFNhbXBsZXMgVGVzdCBDQQIUGTIC2GmVfd3dLRLSNrVFH4TY/os=</xades:IssuerSerialV2> </xades:Cert> </xades:SigningCertificateV2> <xades:SignatureProductionPlaceV2> <xades:City>Egham</xades:City> <xades:StateOrProvince>Surrey</xades:StateOrProvince> <xades:PostalCode>1784</xades:PostalCode> <xades:CountryName>England</xades:CountryName> </xades:SignatureProductionPlaceV2> <xades:SignerRoleV2> <xades:ClaimedRoles> <xades:ClaimedRole>Admin</xades:ClaimedRole> </xades:ClaimedRoles> </xades:SignerRoleV2> </xades:SignedSignatureProperties> <xades:SignedDataObjectProperties> <xades:DataObjectFormat ObjectReference="#SignedDataObject_13177"> <xades:Description>text/xml</xades:Description> <xades:MimeType>text/xml</xades:MimeType> </xades:DataObjectFormat> <xades:CommitmentTypeIndication> <xades:CommitmentTypeId> <xades:Identifier>http://uri.etsi.org/01903/v1.2.2#ProofOfSender</xades:Identifier> </xades:CommitmentTypeId> <xades:ObjectReference>#SignedDataObject_13177</xades:ObjectReference> <xades:CommitmentTypeQualifiers> <xades:CommitmentTypeQualifier>sample commitment type qualifier value</xades:CommitmentTypeQualifier> </xades:CommitmentTypeQualifiers> </xades:CommitmentTypeIndication> </xades:SignedDataObjectProperties> </xades:SignedProperties> <order Id="ABC"> <product>apples</product> <quantity>50</quantity> <price>10.20</price> </order> <order Id="DEF"> <product>bananas</product> <quantity>30</quantity> <price>20.10</price> </order> <order Id="test"> <product>bananas</product> <quantity>30</quantity> <price>20.10</price> </order>

and the ETSI XAdES CC tool computes the message imprints value on following data
<xades:SignedProperties xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:xades="http://uri.etsi.org/01903/v1.3.2#" Id="SignedProperties_13177"><xades:SignedSignatureProperties><xades:SigningTime>2022-05-30T17:09:11+05:00</xades:SigningTime><xades:SigningCertificateV2><xades:Cert><xades:CertDigest><ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></ds:DigestMethod><ds:DigestValue>n4PUjHWA7/1ep3mPLZ/9ETIWk42kwFoRhiwXW1zf11s=</ds:DigestValue></xades:CertDigest><xades:IssuerSerialV2>MIGMMHSkcjBwMQswCQYDVQQGEwJHQjEZMBcGA1UEChMQQXNjZXJ0aWEgTGltaXRl ZDEnMCUGA1UECxMeQXNjZXJ0aWEgU29mdHdhcmUgRGlzdHJpYnV0aW9uMR0wGwYD VQQDExRBRFNTIFNhbXBsZXMgVGVzdCBDQQIUGTIC2GmVfd3dLRLSNrVFH4TY/os=</xades:IssuerSerialV2></xades:Cert></xades:SigningCertificateV2><xades:SignatureProductionPlaceV2><xades:City>Egham</xades:City><xades:StateOrProvince>Surrey</xades:StateOrProvince><xades:PostalCode>1784</xades:PostalCode><xades:CountryName>England</xades:CountryName></xades:SignatureProductionPlaceV2><xades:SignerRoleV2><xades:ClaimedRoles><xades:ClaimedRole>Admin</xades:ClaimedRole></xades:ClaimedRoles></xades:SignerRoleV2></xades:SignedSignatureProperties><xades:SignedDataObjectProperties><xades:DataObjectFormat ObjectReference="#SignedDataObject_13177"><xades:Description>text/xml</xades:Description><xades:MimeType>text/xml</xades:MimeType></xades:DataObjectFormat><xades:CommitmentTypeIndication><xades:CommitmentTypeId><xades:Identifier>http://uri.etsi.org/01903/v1.2.2#ProofOfSender</xades:Identifier></xades:CommitmentTypeId><xades:ObjectReference>#SignedDataObject_13177</xades:ObjectReference><xades:CommitmentTypeQualifiers><xades:CommitmentTypeQualifier>sample commitment type qualifier value</xades:CommitmentTypeQualifier></xades:CommitmentTypeQualifiers></xades:CommitmentTypeIndication></xades:SignedDataObjectProperties></xades:SignedProperties><myRoot> <order Id="ABC"> <product>apples</product> <quantity>50</quantity> <price>10.20</price> </order> <order Id="DEF"> <product>bananas</product> <quantity>30</quantity> <price>20.10</price> </order> <order Id="test"> <product>bananas</product> <quantity>30</quantity> <price>20.10</price> </order> <cart Id="test1"> <product>bananas</product> <quantity>30</quantity> <price>20.10</price> </cart> <cart Id="test2"> <product>bananas</product> <quantity>30</quantity> <price>20.10</price> </cart> <uz> <product>bananas</product> <quantity>30</quantity> <price>20.10</price> </uz> <uz1> <product>bananas</product> <quantity>30</quantity> <price>20.10</price> </uz1> </myRoot>

It seems XAdES CC computing message imprint on xades:SignedProperties with whole document which causing the issue.

signed file.
xades_b_lta_http_server.zip

@realmoieen realmoieen changed the title {CheckIfMssgImpIsAsInSpec} error for XAdES-B-LTA signatures with XML Part {CheckIfMssgImpIsAsInSpec} error for XAdES-B-LTA signatures with XPATH May 30, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant