https://bugs.freedesktop.org/show_bug.cgi?id=60700

--- Comment #10 from Aron Szabo <[email protected]> ---
Beyond the matter whether it is nice or not, 0 byte-sized files mean a blocking
problem at applying digital signature technology according to the related
standards.

The ODF v1.2 says, that "Document signatures shall contain a <ds:Reference>
element for each file within the package [...]". For interoperability reasons
it is also highly recommended to use "ASiC-E with XAdES/CAdES" format of ETSI
TS 102 918 standard which requires the signature to cover all the elements of
the package. But in case of having 0 byte-sized files in the
files-to-be-hashed-and-signed set, a strict CEN CWA 14170 requirement can not
be met which says, that it is a threat, if a "signature is generated to a
'null' document".

Possible solutions for this issue are: e.g. simply deleting 0 byte-sized files
from the package, or inserting some "dont-care" content into them such as XML
comments, or an XML root element.

-- 
You are receiving this mail because:
You are the assignee for the bug.
_______________________________________________
Libreoffice-bugs mailing list
[email protected]
http://lists.freedesktop.org/mailman/listinfo/libreoffice-bugs

Reply via email to