Contributors mailing list archives
Re: XAdES in Odooby
Thanks for your interest.
I've analyzed the complete ETSI documentation and I'm designing it
not to be a special need implementation, but a generic ETSI Xades implementation.
It shall support both, legacy and current Xades signatures (there are virtually no libraries supporting current 2016 Xades signatures).
It shall support B-B, B-L, B-LT, B-LTA and the E-* (extended) signatures as required by EU regulations.
I'm not yet sure how to deal with signature augmentation. Within the specified B-* this seems easy, however with e-* signatures it very much depends on the signature policy adopted.
What can be signed shall be verified as well.
I was given access to the ETSI conformance testing tool a few days ago, so I plan to pipe it through their conformance suite once ready.
That's the plan, execution solely depends on the community's capacity to fund this effort, as it's 100% open sourced.
El dom., 20 oct. 2019, 6:41 a.m., Daniel Reis <firstname.lastname@example.org> escribió:
Thank you, this is interesting.We want to position Odoo as an EU regulation compliant open source software.Can you describe some use cases where you plan robust this feature?DanielNo dia 18/10/2019, às 22:12, David Arnold <email@example.com> escreveu:Hi All,After evaluating a couple of solutions, I decided to work on a PR to incorporateXAdES signing into signxml library, which seems to be one of the better knownxml signature libraries and is used in sime odoo EDI implementations (eg. PE).Please find the link below:Please touch ground if you would like to sponsor one of the marked items, as I'llonly proceed to implement the MVP necessary for my own purpose.Nevertheless, it is designed to produce, both, fully conformant and interoperableXAdES signatures as per the defined ETSI base line and extended signature levels.See references: https://github.com/xoe-labs/signxml/tree/master/signxml/xadesBest Regards,David A.