You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
I don't know about quirks in other countries, but Polish law requires that the
CRL or OCSP response been created at least an hour after the signature has been
created, German law only requires that the CA certificate was valid when user
certificate was issued (so the user cert can have longer validity than CA).
What steps will reproduce the problem?
1. Sign and Timestamp the document
2. Download CRLs and add to document (extend to XAdES-C)
3. Perform full validation
What is the expected output? What do you see instead?
The validation should fail, as the CRL was issued before the signature was made
or just few seconds after.
Please provide any additional information below.
While the additional validation could be simulated using
CustomSignatureVerifier, I don't think this is a good solution for extended
forms (XAdES-X, -X-L, -A). It also won't work for German locale.
Related: issue 18.
Original issue reported on code.google.com by [email protected] on 25 Sep 2012 at 1:04
The text was updated successfully, but these errors were encountered:
Original issue reported on code.google.com by
[email protected]
on 25 Sep 2012 at 1:04The text was updated successfully, but these errors were encountered: