Skip to content

DocFence 0.42.0

Choose a tag to compare

@SybilGambleyyu SybilGambleyyu released this 04 Aug 07:59

Static package-signature coverage now requires the standard OPC relationship-transform sequence: one direct XMLDSIG Transforms list, only recognized relationship/C14N algorithms, exactly one relationship transform, and immediate C14N after it.

Both OPC C14N forms are accepted. Missing, misordered, duplicate-list, and unsupported transform sequences remain fail-closed aggregate unsupported references. This remains a static declaration audit, not XMLDSIG, certificate, or Office trust validation.