From f3a3d2c92ce1688626b2a423bb6a83da0d0578e4 Mon Sep 17 00:00:00 2001 From: Manu Sporny Date: Sun, 23 Oct 2022 16:32:15 -0400 Subject: [PATCH] Check expectedProofPurpose before checking signature. --- index.html | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/index.html b/index.html index 5592fa69..e44ed8a7 100644 --- a/index.html +++ b/index.html @@ -1735,6 +1735,11 @@

Verify Proof

MUST be raised.
  • +If the proof.proofPurpose value does not match +options.expectedProofPurpose, a +`MISMATCHED_PROOF_PURPOSE_ERROR` MUST be raised. +
  • +
  • Let unsecuredDocument be a copy of securedDocument with the `proof` value removed.
  • @@ -1762,11 +1767,6 @@

    Verify Proof

    parameters provided as inputs to the algorithm.
  • -If the proof.proofPurpose value does not match -options.proofPurpose, a `MISMATCHED_PROOF_PURPOSE_ERROR` -MUST be raised. -
  • -
  • If the proof.created is set and it deviates more than options.acceptableCreatedTimeDeviationInSeconds seconds, a `CREATED_TIME_DEVIATION_ERROR` MUST be raised.