[CAMEL-13009] Error in generated XAdES 1.1.1 signature

• Type: Bug
• Status: Closed
• Priority: Minor
• Resolution: Fixed
• Affects Version/s: 2.23.0
• Fix Version/s: 2.23.1, 2.24.0, 3.0.0
• Component/s: camel-xmlsecurity
• Labels: XAdES
• Estimated Complexity: Novice
• Assignee: Andrea Cosentino
• Reporter: Konrad Jan Botor
• Created: 15/Dec/18 18:09
• Updated: 17/Dec/18 19:12
• Resolved: 17/Dec/18 07:55

Description

XAdES XSD file defines, among the others, type 

DigestAlgAndValueType

In XAdES 1.1.1 this is defined as:

<xsd:complexType name="DigestAlgAndValueType">
  <xsd:sequence>
    <xsd:element name="DigestMethod" type="ds:DigestMethodType"/>
    <xsd:element name="DigestValue" type="ds:DigestValueType"/>
  </xsd:sequence>
</xsd:complexType>

and in later versions as:

<xsd:complexType name="DigestAlgAndValueType">
  <xsd:sequence>
    <xsd:element ref="ds:DigestMethod"/>
    <xsd:element ref="ds:DigestValue"/>
  </xsd:sequence>
</xsd:complexType>

Apache Camel always generates elements of this type according to the second definition, regardless of selected namespace. This may cause XAdES 1.1.1 signature validation to fail.

Issue Links

• links to: GitHub Pull Request #2677