首先订正,没有XAdES-L ,只有 XAdES-X-L
https://en.wikipedia.org/wiki/XAdES
- XAdES (also named XAdES-BES for "Basic Electronic Signature"), basic form just satisfying Directive legal requirements for advanced signature;
- XAdES-T (timestamp), adding timestamp field to protect against repudiation;
- XAdES-C (complete), adding references to verification data (certificates and revocation lists) to the signed documents to allow off-line verification and verification in future (but does not store the actual data);
- XAdES-X (extended), adding timestamps on the references introduced by XAdES-C to protect against possible compromise of certificates in chain in future;
- XAdES-X-L (extended long-term), adding actual certificates and revocation lists to the signed document to allow verification in future even if their original source is not available;
- XAdES-A (archival), adding possibility for periodical timestamping (e.g. each year) of the archived document to prevent compromise caused by weakening signature during long-time storage period.
XAdES 文档
http://www.etsi.org/deliver/etsi_ts%5C101900_101999%5C101903%5C01.04.02_60%5Cts_101903v010402p.pdf
XAdES 语法
http://uri.etsi.org/01903/v1.4.1/XAdES01903v141-201601.xsd
xmldsig 语法
https://www.w3.org/TR/2002/REC-xmldsig-core-20020212/xmldsig-core-schema.xsd#
"?" denotes zero or one occurrence; (0/1)
"+" denotes one or more occurrences;(1/N)
"*" denotes zero or more occurrences.(0/N)
最简 -X-L 示例:
<?xml version="1.0" encoding="utf-8"?> <ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#"> <ds:SignedInfo> <ds:CanonicalizationMethod/> <ds:SignatureMethod/> <ds:Reference> <ds:DigestMethod/> <ds:DigestValue/> </ds:Reference> </ds:SignedInfo> <ds:SignatureValue/> <ds:Object> <QualifyingProperties> <SignedProperties> <SignedSignatureProperties></SignedSignatureProperties> <SignedDataObjectProperties></SignedDataObjectProperties> </SignedProperties> <UnsignedProperties> <UnsignedSignatureProperties>(CompleteCertificateRefs) (CompleteRevocationRefs) (CertificatesValues) (RevocationValues)</UnsignedSignatureProperties> </UnsignedProperties> </QualifyingProperties> </ds:Object> </ds:Signature>
最简 -BES 示例:
<?xml version="1.0" encoding="utf-8"?> <ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#"> <ds:SignedInfo> <ds:CanonicalizationMethod/> <ds:SignatureMethod/> <ds:Reference> <ds:DigestMethod/> <ds:DigestValue/> </ds:Reference> </ds:SignedInfo> <ds:SignatureValue/> <ds:Object> <QualifyingProperties> <SignedProperties> <SignedSignatureProperties></SignedSignatureProperties> <SignedDataObjectProperties></SignedDataObjectProperties> </SignedProperties> <UnsignedProperties> <UnsignedSignatureProperties></UnsignedSignatureProperties> </UnsignedProperties> </QualifyingProperties> </ds:Object> </ds:Signature>
标签:adding,verification,xsd,org,XAdES,xmldsig From: https://www.cnblogs.com/zno2/p/6430065.html