Hi Andreas,
the SignedReferenceType seems to be somewhat similar to the currently discussed
proposal for the enhanced SignaturePtr which aims at meeting the ETSI requirements
for signature validation and preservation and hence we might think about creating
a combined structure, which is able to be used in the different use cases
(i.e. for signature creation and verification).
BR,
dh
ÂÂ <xs:element name="SignaturePtr" type="dss2:SignaturePtrType"/>
ÂÂ <xs:complexType name="SignaturePtrType">
ÂÂÂÂÂ <xs:sequence>
ÂÂÂÂÂÂÂÂ <xs:element name="NsPrefixMapping"
ÂÂÂÂÂÂÂÂ ÂÂ type="dsb:NsPrefixMappingType" minOccurs="0"
ÂÂÂÂÂÂÂÂ ÂÂ maxOccurs="unbounded" />
ÂÂÂÂÂÂÂÂ <xs:element ref="ds-rw:Reference" maxOccurs="1" minOccurs="0" />
ÂÂÂÂÂ </xs:sequence>
ÂÂÂÂÂ <xs:attribute name="WhichDocument" type="xs:anyURI" use="required"/>
ÂÂÂÂÂ <xs:attribute name="XPath" type="xs:string" use="optional"/>
ÂÂ </xs:complexType>
Von: dss-x@lists.oasis-open.org <dss-x@lists.oasis-open.org> Im Auftrag von Andreas Kuehne
Gesendet: Freitag, 11. Januar 2019 14:22
An: dss-x <dss-x@lists.oasis-open.org>
Betreff: [dss-x] DSSX-26: Manifest creation
Hi again,
surprisingly another flaw is hidden in our stack of open issues:
There is a single mentioning that InputDocuments may contain elements that may be referenced by a XMLDSig manifest. But I cannot find an way to supply the references to be used for the creation of the manifest. A layman's approach would be to include an element into SignedReference to hint that this reference should be located within the manifest. Using the SignedReference to create an element that is NOT a SignedReference sounds wierd but even a manifest item is a reference and it is signed ...
<xs:complexType name="SignedReferenceType">
 <xs:sequence>
ÂÂÂ <xs:element name="Transforms" type="ds-rw:TransformsType" minOccurs="0"/>
 </xs:sequence>
 <xs:attribute name="WhichDocument" type="xs:IDREF" use="required"/>
 <xs:attribute name="RefURI" type="xs:anyURI" use="optional"/>
 <xs:attribute name="RefId" type="xs:string" use="optional"/>
<xs:attribute name="InManifest" type="xs:boolean" use="optional" default="false"/>
</xs:complexType>
Any opinions?
Greetings,
Andreas
--
Andreas KÃhne
phone: +49 177 293 24 97
mailto: kuehne@trustable.de
Trustable Ltd. Niederlassung Deutschland Gartenheimstr. 39C - 30659 Hannover Amtsgericht Hannover HRB 212612
Director Andreas KÃhne
Company UK Company No: 5218868 Registered in England and Wales