FW: Important Bug in Verify Request Basic Processing

["Nick Pope" <pope@secstan.com>]

Forwarding bug reported by Konrad.



-----Original Message-----
From: Konrad Lanz [mailto:Konrad.Lanz@labs.cio.gv.at] 
Sent: 11 July 2006 12:07
To: Nick Pope; Juan Carlos Cruellas
Subject: Important Bug in Verify Request Basic Processing

Dear all,

first of all I found a major bug in the basic processing of the verify 
request, references created in the SignRequest with omitted RefURI 
and/or RefType do not mach in the Verify Request.

This is however easily fixed.

4.3 step 2. d. should be removed.

and the text in lines 1480 - 1481 should be changed to:

For each <ds:Reference> in the <ds:Signature>, the server finds the 
input document with matching RefURI and RefType values (omitted 
attributes match omitted attributes).

best regards
Konrad