OASIS Mailing List ArchivesView the OASIS mailing list archive below
or browse/search using MarkMail.


Help: OASIS Mailing Lists Help | MarkMail Help

office message

[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]

Subject: RE: Directories in Zip packages - was RE: XAdES support in ODF


the ZIP appnote  (any version, at least since 4.50) says

" external file attributes: (4 bytes)

          The mapping of the external attributes is
          host-system dependent (see 'version made by').  For
          MS-DOS, the low order byte is the MS-DOS directory
          attribute byte.  If input came from standard input, this
          field is set to zero.
file name: (Variable)

          The name of the file, with optional relative path.
          The path stored should not contain a drive or
          device letter, or a leading slash.  All slashes
          should be forward slashes '/' as opposed to
          backwards slashes '\' for compatibility with Amiga
          and UNIX file systems etc.

(Winzip probably 'translates' this for viewing purposes)

But the real questions are:

a) is adding (empty) directories, for whatever reason, allowed per ODF 1.2 spec
(since it requires a somewhat special attribute)

b) if so, should it be signed (I would say yes)

c) in that case, should the ODF spec text "sign every file" be changed in "every entry" 
(or similar)

Best regards


From: Dennis E. Hamilton [dennis.hamilton@acm.org]
Sent: Sunday, September 26, 2010 10:48 PM
To: Hanssens Bart; 'David LeBlanc'; office@lists.oasis-open.org
Cc: Cornelis Frank
Subject: Directories in Zip packages - was RE: XAdES support in ODF

For further amusement, the attachment is what PKZip for Windows version
12.50.0013 says about helloworld-signed.odt.

It seems that my (1-4) below have more evidence to deal with.

Re (1), PKWare prefers to show "/" as the segment separator.

Re (2), I have no idea at this point whether this is covered in the APPNOTE
or an extension

Re (3), the observation about no directory entries for Configurations2/,
Thumbnails/, etc., also applies to Configuration2//images as well as

Re (4), the "\" business may be answered.  I know where to find a reasonable
hex editor. Back soon.

 - Dennis

-----Original Message-----
From: Dennis E. Hamilton [mailto:dennis.hamilton@acm.org]
Sent: Sunday, September 26, 2010 13:39
To: 'Hanssens Bart'; 'David LeBlanc'; 'office@lists.oasis-open.org'
Cc: 'Cornelis Frank'
Subject: RE: [office] RE: XAdES support in ODF

I knew I had a command-line Zipper somewhere.  Here is what 7zip has to say
about that document:

7-Zip (A) 4.42  Copyright (c) 1999-2006 Igor Pavlov  2006-05-14
12:07:19.34 C:\MyProjects\java\ODMdev> 7za l helloworld-signed.odt
Listing archive: helloworld-signed.odt

   Date      Time    Attr         Size   Compressed  Name
------------------- ----- ------------ ------------  ------------
2010-09-24 16:49:42 .....           39           39  mimetype
2010-09-24 16:49:42 .....         3105          813  content.xml
2010-09-24 16:49:42 .....          532          243  manifest.rdf
2010-09-24 16:49:42 .....        10864         1993  styles.xml
2010-09-24 16:49:42 .....         1247         1247  meta.xml
2010-09-24 16:49:42 .....         1018          434
2010-09-24 16:49:42 .....            0            2
2010-09-24 16:49:42 D....            0            0
2010-09-24 16:49:42 D....            0            0  Configurations2\floater
2010-09-24 16:49:42 D....            0            0
2010-09-24 16:49:42 D....            0            0  Configurations2\menubar
2010-09-24 16:49:42 D....            0            0  Configurations2\toolbar
2010-09-24 16:49:42 D....            0            0
2010-09-24 16:49:42 D....            0            0
2010-09-24 16:49:42 .....         8773         1365  settings.xml
2010-09-24 16:49:42 .....         1989          344  META-INF\manifest.xml
2010-09-24 18:52:26 .....        30891        13945
------------------- ----- ------------ ------------  ------------
                                 58458        20425  17 files

Hmm, attributes.

So, two things to figure out here.

1. Is it really "\" and I must remember to use that all of the time (which
says something about the resolution of relative IRIs inside the package)?

2. What is this attribute business and whose extension of the APPNOTE is
that or is it really provided in the APPNOTE.

3. Finally, notice that there is *no* such entry for Thumbnails and META-INF
nor for Configurations2 nor Configurations2\accelerator either so one
wonders what the point is that there are Zip entries of any form for those
Configurations2\... goodies (and their having bogus manifest:media-type
values in the manifest.xml markup).

4. Finally still, I have no idea how much of the way these names are
expressed is being done by the utility versus what is in the file (e.g.,
WinZip showed "\" on the ends, 7-zip shows "D" in some sort of attribute
display).  I'm still looking for a decent hex editor.

I think, without fear of contradiction, however, that there is no way to
reflect those D-attribute thingies in the DSig, and we should not want there
to be.  An external signature on the entire package would include whatever
that is, but we're not going there, it seems to me.

And finally, it seems like OIC Appnote time, aye?

 - Dennis

-----Original Message-----
From: Dennis E. Hamilton [mailto:dennis.hamilton@acm.org]
Sent: Sunday, September 26, 2010 11:30
To: 'Hanssens Bart'; 'David LeBlanc'; office@lists.oasis-open.org
Cc: 'Cornelis Frank'
Subject: RE: [office] RE: XAdES support in ODF

So, please capture the output of the unzip -l helloword-signed.odt and send
me the text file, since I can't duplicate that on my equipment.

Oh wait, I got it.  There are [bogus?] entries in the global directory at
the end of the file that have no files in the Zip package itself.  They all
happen to have names ending in "\" according to WinZip, which I find passing
strange since I thought the separator in Zip is "/" so I am not sure how
much is literally the case or I have been using the wrong character all of
this time.

I've included a PNG of what WinZip says is in the file, in the order in
which the content appears in the file.

If I perform the Winzip integrity test on the file, here is the report I

No errors detected in compressed data of
Testing ...
testing: mimetype                 OK
testing: content.xml              OK
testing: manifest.rdf             OK
testing: styles.xml               OK
testing: meta.xml                 OK
testing: Thumbnails\thumbnail.png   OK
testing: Configurations2\accelerator\current.xml   OK
testing: Configurations2\progressbar\   OK
testing: Configurations2\floater\   OK
testing: Configurations2\popupmenu\   OK
testing: Configurations2\menubar\   OK
testing: Configurations2\toolbar\   OK
testing: Configurations2\images\Bitmaps\   OK
testing: Configurations2\statusbar\   OK
testing: settings.xml             OK
testing: META-INF\manifest.xml    OK
testing: META-INF\documentsignatures.xml   OK

I need to dig up a decent hex editor and see what is really going on in this
file.  I'll follow-up after I have done that.

-----Original Message-----
From: Hanssens Bart [mailto:Bart.Hanssens@fedict.be]
Sent: Sunday, September 26, 2010 02:30
To: dennis.hamilton@acm.org; 'David LeBlanc'; office@lists.oasis-open.org
Cc: Cornelis Frank
Subject: RE: [office] RE: XAdES support in ODF


I use command line unzip 6.0 (ubuntu) which is based upon info-zip's code.
(unzip -l hello.. just lists the entries in the packages, without unzipping
to the file system)

Or, use hexdump and look at the end of the zip :-)

Which makes sense, because one can also zip (outside ODF context)
empty directories, and they get stored as well (probably with some flag that
says "this might be a directory", then we must check if it is allowed to do
within ODF, because the ODF packaging is more restrictive about this)


[ ... ]

[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]