Hi,
In section 3.1.1 of ESS-06 it states :-
"If any of the SignerInfos included in a SignedData object include an
eSSSecurityLabel attribute, then all of the SignerInfos in that SignedData
object MUST include an eSSSecurityLabel attribute and the value of each
MUST be identical."
Is this true even if a signerInfo does not have any signed attributes?
For example, if the first SignerInfo does not have any signedAttrs and a
second SignerInfo is added which contains an eSSSecurityLabel, the first
SignerInfo must have an eSSSecurityLabel added, and therefore a contentType
and messageDigest atrribute, and the signature recalculated.
Bill
_____________________________________________________________________
William Ottaway, Tel: +44 (0)1684 894079
DERA Malvern, Fax: +44 (0)1684 896113
St. Andrews Road, email:
w(_dot_)ottaway(_at_)eris(_dot_)dera(_dot_)gov(_dot_)uk
Malvern,
Worcs, WR14 3PS
UK