Now that the list exists, ... -----Original Message----- From: Dennis E. Hamilton [mailto:[email protected]] Sent: Wednesday, August 10, 2011 08:42 To: 'Biao Han' Subject: RE: Status of the Simple Java API for ODF and ODFDOM - 08/10/2011
Nicely done. Thanks for being so visible. Another thing you can do is set up an ODFtoolkit blog at Apache. Ideally, the mailing lists will appear soon. Two Questions: 1. My impression is that the signatures from OO.o are correct. They do specify namespaces, but use default namespace declarations instead of prefixes. In what way is the signature document incorrect? Also, what versions of OpenOffice.org/LibreOffice are you checking signatures against? I have signatures from LibreOffice 3.4 that do not appear to duplicate X.509 certificates and that seem to use namespaces correctly, although dsig namespace is declared with default xmlns declaration. 2. Does ODFDOM fail because of namespace being declared as default or because of something to do with canonicalization? If the XML Digital Signature specification requires default namespace, it may be that ODF specification is incorrect. Have you found expert appraisal of what XML Digital Signature requires? - Dennis -----Original Message----- From: Biao Han [mailto:[email protected]] Sent: Wednesday, August 10, 2011 08:14 To: [email protected]; [email protected]; [email protected] Cc: [email protected] Subject: Status of the Simple Java API for ODF and ODFDOM - 08/10/2011 [ ... ] ODFDOM 1. Working on data signature. There are two issues caused by OpenOffice block the process. (1) OpenOffice.org generate a Namespace unaware signature document. ODFDOM loads it fails. (2) OpenOffice.org creates multiple X509Certificates instead of the correct certification chain under ds:KeyInfo. see also: https://bugs.freedesktop.org/show_bug.cgi?id=39657 (ds namespace in LibreOffice) http://openoffice.org/bugzilla/show_bug.cgi?id=107864 (ds namespace in OOo) http://openoffice.org/bugzilla/show_bug.cgi?id=66276 (multiple X509Certificate in OOo) http://openoffice.org/bugzilla/show_bug.cgi?id=108286 We have to supply two modes to fix it. One follows ODF specification, the other follows Open Office. The question is which is the default? [ ... ] Regards Biao Han (Devin) SOA Standards Growth, Emerging Technology Institute(ETI), IBM China Software Development Laboratory Tel:(86-10)82450541 Email: [email protected] Address: 3/F Ring Building, No.28 Building, Zhong Guan Cun Software Park, No. 8 Dong Bei Wang West Road, ShangDi, Haidian District, Beijing, P.R.C.100193
