Skip to content

Release v0.3.0

Latest

Choose a tag to compare

@github-actions github-actions released this 04 Jan 13:10

Added

  • Multi-state validation results - VerificationResult now includes granular status beyond boolean isValid:
    • status: "VALID" | "INVALID" | "INDETERMINATE" | "UNSUPPORTED"
    • statusMessage: Human-readable explanation
    • limitations: Array describing platform/environment constraints
  • Platform limitation detection - Detect unsupported RSA key sizes (>4096 bits) in Safari/WebKit and return UNSUPPORTED status instead of failing as INVALID
  • Cross-browser testing - Added Safari/WebKit and Firefox to browser test suite locally

Fixed

  • C14N 1.1 canonicalization - Fixed bug where C14N 1.1 incorrectly added newlines between XML elements when the original had none. This caused signature verification to fail for compact XML.
  • INDETERMINATE for expired timestamps - Return INDETERMINATE status (instead of INVALID) when timestamp or certificate has expired but signature is otherwise valid
  • Legacy RSA DigestInfo verification - Fix signature verification for old documents signed with pre-Java 8 tools that produced non-standard DigestInfo format (missing NULL in AlgorithmIdentifier)