LTV Support

Release note

New Features

AIS supports the concept of long-term signature validation (LTV). LTV enables the successful verification of a signature, when the CA will have no obligations to publish revocation information anymore. To achieve long-term validation, all revocation information for signature validation has to be embedded in the signed document or stored with the detached signature.

To support LTV the option AddRevocationInformation has been included in the API.

The element may be added to the signature request to include revocation information (RI) in the signature response. The attribute ‘type’ supports the following values.

TYPE    DESCRIPTION
CAdES   RI will be embedded as an unsigned attribute with OID 1.2.840.113549.1.9.16.2.24
PAdES   For CMS Signatures: RI will be embedded in the signature as a signed attribute with OID 1.2.840.113583.1.1.8
      For Timestamps: RI will be provided in the response as Base64 encoded OCSP responses or CRLs  within the <OptionalOutputs>-Element
BOTH    Both types (CAdES,PAdES) will be requested

For further information please refer to the attached “Reference Guide All-in Signing Service” (5.1.5.4 Add Revocation Information).

Depreciated Features

The option “AddRevocationInformation” makes the option “Add OCSP Response” redundant. Therefore the option “Add OCSP Response” will be depreciated by 31. January 2015.

refs #6 and refs #7

1.0.2

Update README.md

Minor Update

Contains minor bug fixes