RE: [office] RE: XAdES support in ODF

[Hanssens Bart <Bart.Hanssens@fedict.be>]

Dennis,

I use command line unzip 6.0 (ubuntu) which is based upon info-zip's code.
(unzip -l hello.. just lists the entries in the packages, without unzipping
to the file system)

Or, use hexdump and look at the end of the zip :-)

Which makes sense, because one can also zip (outside ODF context)
empty directories, and they get stored as well (probably with some flag that
says "this might be a directory", then we must check if it is allowed to do so
within ODF, because the ODF packaging is more restrictive about this)

Bart

________________________________________
From: Dennis E. Hamilton [dennis.hamilton@acm.org]
Sent: Sunday, September 26, 2010 4:44 AM
To: Hanssens Bart; 'David LeBlanc'; office@lists.oasis-open.org
Cc: Cornelis Frank
Subject: RE: [office] RE: XAdES support in ODF

I don't believe there is such a Zip entry.  What tool are you using to look
at the Zip file?  (Do not use the built-in Windows shell that simulates
folders, or any Linux equivalent.  They may make a folder where there is
none in the Zip itself if there is a Zipped file that has that path as part
of its name.)

 - Dennis

-----Original Message-----
From: Hanssens Bart [mailto:Bart.Hanssens@fedict.be]
Sent: Saturday, September 25, 2010 16:26
To: dennis.hamilton@acm.org; 'David LeBlanc'; office@lists.oasis-open.org
Cc: Cornelis Frank
Subject: RE: [office] RE: XAdES support in ODF

Dennis,


uhm, perhaps I'm missing something here.

I'm not looking at the manifest at all, only at the zip.

There *is* a zip entry called "Configurations/menubar/".

Unzipping the .odt would map it to empty directories, but directories are
actually
also files (probably this is what you meant, David  ?), so indeed they
should also
be signed.


Best regards,

Bart


________________________________________
From: Dennis E. Hamilton [dennis.hamilton@acm.org]
Sent: Sunday, September 26, 2010 12:08 AM
To: Hanssens Bart; 'David LeBlanc'; office@lists.oasis-open.org
Cc: Cornelis Frank
Subject: RE: [office] RE: XAdES support in ODF

Bart, there is no Zip entry like "Configurations/menubar/".  The only way
for there to be a Zip entry is for there to be a Zip directory entry with
that name, and that means there would have to be a file in the package that
had that name.

There might be such a META-INF/manifest.xml <manifest:file-entry>, just as
there is for "/", but that isn't relevant to the signature procedure so long
as it isn't for a file in the Zip.

What am I missing?

 - Dennis

-----Original Message-----
From: Hanssens Bart [mailto:Bart.Hanssens@fedict.be]
Sent: Saturday, September 25, 2010 14:32
To: David LeBlanc; dennis.hamilton@acm.org; office@lists.oasis-open.org
Cc: Cornelis Frank
Subject: RE: [office] RE: XAdES support in ODF

[ ... ]

So that leaves us with zip entries like "Configurations/menubar/", if they
are to be signed, then it should
IMHO be reflected in the spec (I wouldn't call this "a file", and the spec
only says "shall contain a
<ds:Reference> element for each *file*" - 1.2cd05 part 1, but perhaps I'm
misinterpreting "file" in this
context)

[ ... ]