ETSI TS 119 164-2-2016 Electronic Signatures and Infrastructures (ESI) Associated Signature Containers (ASiC) - Testing Conformance and Interoperability Part 2 Test suites for test.pdf

1、 ETSI TS 119 164-2 V2.1.1 (2016-06) Electronic Signatures and Infrastructures (ESI); Associated Signature Containers (ASiC) - Testing Conformance and Interoperability; Part 2: Test suites for testing interoperability of ASiC baseline containers TECHNICAL SPECIFICATION ETSI ETSI TS 119 164-2 V2.1.1 (

2、2016-06)2 Reference RTS/ESI-0019164-2 Keywords ASiC, e-commerce, electronic signature, interoperability, security, testing ETSI 650 Route des Lucioles F-06921 Sophia Antipolis Cedex - FRANCE Tel.: +33 4 92 94 42 00 Fax: +33 4 93 65 47 16 Siret N 348 623 562 00017 - NAF 742 C Association but non lucr

3、atif enregistre la Sous-Prfecture de Grasse (06) N 7803/88 Important notice The present document can be downloaded from: http:/www.etsi.org/standards-search The present document may be made available in electronic versions and/or in print. The content of any electronic and/or print versions of the p

4、resent document shall not be modified without the prior written authorization of ETSI. In case of any existing or perceived difference in contents between such versions and/or in print, the only prevailing document is the print of the Portable Document Format (PDF) version kept on a specific network

5、 drive within ETSI Secretariat. Users of the present document should be aware that the document may be subject to revision or change of status. Information on the current status of this and other ETSI documents is available at https:/portal.etsi.org/TB/ETSIDeliverableStatus.aspx If you find errors i

6、n the present document, please send your comment to one of the following services: https:/portal.etsi.org/People/CommiteeSupportStaff.aspx Copyright Notification No part may be reproduced or utilized in any form or by any means, electronic or mechanical, including photocopying and microfilm except a

7、s authorized by written permission of ETSI. The content of the PDF version shall not be modified without the written authorization of ETSI. The copyright and the foregoing restriction extend to reproduction in all media. European Telecommunications Standards Institute 2016. All rights reserved. DECT

8、TM, PLUGTESTSTM, UMTSTMand the ETSI logo are Trade Marks of ETSI registered for the benefit of its Members. 3GPPTM and LTE are Trade Marks of ETSI registered for the benefit of its Members and of the 3GPP Organizational Partners. GSM and the GSM logo are Trade Marks registered and owned by the GSM A

9、ssociation. ETSI ETSI TS 119 164-2 V2.1.1 (2016-06)3 Contents Intellectual Property Rights 4g3Foreword . 4g3Modal verbs terminology 4g31 Scope 5g32 References 5g32.1 Normative references . 5g32.2 Informative references 6g33 Definitions and abbreviations . 6g33.1 Definitions 6g33.2 Abbreviations . 6g

10、34 ASiC baseline container interoperability test specification overview 6g35 Test suite for testing interoperability of ASiC-S baseline containers 7g35.1 Introduction to testing ASiC-S baseline containers 7g35.2 Test cases common to all ASiC-S forms and levels . 7g35.3 Test cases for ASiC-S baseline

11、 containers with CAdES signatures . 8g35.3.1 Positive test cases . 8g35.3.2 Negative test cases for ASiC-S baseline containers with CAdES signatures . 8g35.4 Test cases for ASiC-S baseline containers with XAdES signatures . 9g35.4.1 Positive test cases . 9g35.4.2 Negative test cases for ASiC-S basel

12、ine containers with XAdES signatures . 9g36 Test suite for testing interoperability of ASiC-E baseline containers 10g36.1 Introduction to testing ASiC-E baseline containers 10g36.2 Test cases common to all ASiC-E forms and levels . 10g36.3 Test cases for ASiC-E baseline containers with XAdES signatu

13、res . 11g36.3.1 Positive test cases . 11g36.3.2 Negative test cases for ASiC-E baseline containers with XAdES signatures . 12g37 Test-suite for augmentation of ASiC baseline containers 12g3Annex A (informative): Bibliography . 13g3History 14g3ETSI ETSI TS 119 164-2 V2.1.1 (2016-06)4 Intellectual Pro

14、perty Rights IPRs essential or potentially essential to the present document may have been declared to ETSI. The information pertaining to these essential IPRs, if any, is publicly available for ETSI members and non-members, and can be found in ETSI SR 000 314: “Intellectual Property Rights (IPRs);

15、Essential, or potentially Essential, IPRs notified to ETSI in respect of ETSI standards“, which is available from the ETSI Secretariat. Latest updates are available on the ETSI Web server (https:/ipr.etsi.org/). Pursuant to the ETSI IPR Policy, no investigation, including IPR searches, has been carr

16、ied out by ETSI. No guarantee can be given as to the existence of other IPRs not referenced in ETSI SR 000 314 (or the updates on the ETSI Web server) which are, or may be, or may become, essential to the present document. Foreword This Technical Specification (TS) has been produced by ETSI Technica

17、l Committee Electronic Signatures and Infrastructures (ESI). The present document is part 2 of a multi-part deliverable covering Associated Signature Containers (ASiC) - Testing Conformance and Interoperability. Full details of the entire series can be found in part 1 i.2. Modal verbs terminology In

18、 the present document “shall“, “shall not“, “should“, “should not“, “may“, “need not“, “will“, “will not“, “can“ and “cannot“ are to be interpreted as described in clause 3.2 of the ETSI Drafting Rules (Verbal forms for the expression of provisions). “must“ and “must not“ are NOT allowed in ETSI del

19、iverables except when used in direct citation. ETSI ETSI TS 119 164-2 V2.1.1 (2016-06)5 1 Scope The present document defines a number of test suites to assess the interoperability between implementations claiming conformance to ASiC baseline containers as specified in ETSI EN 319 162-1 1. The test s

20、uites are defined with four different layers reflecting the four different levels of ASiC baseline containers. Tests suite addressing interoperability between applications claiming B-B level conformance. Tests suite addressing interoperability between applications claiming B-T level conformance. Tes

21、ts suite addressing interoperability between applications claiming B-LT level conformance. Tests suite addressing interoperability between applications claiming B-LTA level conformance. Test suites also cover augmentation of ASiC baseline containers and negative test cases. These test suites are agn

22、ostic of the PKI infrastructure. Any PKI infrastructure can be used including the one based on EU Member States Trusted Lists. 2 References 2.1 Normative references References are either specific (identified by date of publication and/or edition number or version number) or non-specific. For specifi

23、c references, only the cited version applies. For non-specific references, the latest version of the referenced document (including any amendments) applies. Referenced documents which are not found to be publicly available in the expected location might be found at http:/docbox.etsi.org/Reference. N

24、OTE: While any hyperlinks included in this clause were valid at the time of publication ETSI cannot guarantee their long term validity. The following referenced documents are necessary for the application of the present document. 1 ETSI EN 319 162-1: “Electronic Signatures and Infrastructures (ESI);

25、 Associated Signature Containers (ASiC); Part 1: Building blocks and ASiC baseline containers“. 2 ETSI EN 319 122-1: “Electronic Signatures and Infrastructures (ESI); CAdES digital signatures; Part 1: Building blocks and CAdES baseline signatures“. 3 ETSI EN 319 132-1: “Electronic Signatures and Inf

26、rastructures (ESI); XAdES digital signatures; Part 1: Building blocks and XAdES baseline signatures“. 4 ETSI TS 119 124-2: “Electronic Signatures and Infrastructures (ESI); CAdES digital signatures - Testing Conformance and Interoperability; Part 2: Test suites for testing interoperability of CAdES

27、baseline signatures“. 5 ETSI TS 119 134-2: “Electronic Signatures and Infrastructures (ESI); XAdES digital signatures - Testing Conformance and Interoperability; Part 2: Test suites for testing interoperability of XAdES baseline signatures“. 6 ISO/IEC 21320-1: “Information technology - Document Cont

28、ainer File - Part 1: Core“. ETSI ETSI TS 119 164-2 V2.1.1 (2016-06)6 2.2 Informative references References are either specific (identified by date of publication and/or edition number or version number) or non-specific. For specific references, only the cited version applies. For non-specific refere

29、nces, the latest version of the referenced document (including any amendments) applies. NOTE: While any hyperlinks included in this clause were valid at the time of publication, ETSI cannot guarantee their long term validity. The following referenced documents are not necessary for the application o

30、f the present document but they assist the user with regard to a particular subject area. i.1 ETSI TR 119 001: “Electronic Signatures and Infrastructures (ESI); The framework for standardization of signatures; Definitions and abbreviations“. i.2 ETSI TR 119 164-1: “Electronic Signatures and Infrastr

31、uctures (ESI); Associated Signature Containers (ASiC) - Testing Conformance and Interoperability; Part 1: Overview“. i.3 ETSI EN 319 102-1: “Electronic Signatures and Infrastructures (ESI); Procedures for Creation and Validation of AdES Digital Signatures; Part 1: Creation and Validation“. i.4 ETSI

32、EN 319 122-1: “Electronic Signatures and Infrastructures (ESI); CAdES digital signatures; Part 1: Building blocks and CAdES baseline signatures“. i.5 ETSI EN 319 132-1: “Electronic Signatures and Infrastructures (ESI); XAdES digital signatures; Part 1: Building blocks and XAdES baseline signatures“.

33、 3 Definitions and abbreviations 3.1 Definitions For the purposes of the present document, the terms and definitions given in ETSI TR 119 001 i.1 and the following apply: negative test case: test case either for a container including signature(s) that are not CAdES baseline signatures i.4 or XAdES b

34、aseline signatures i.5, or for a signature whose validation according to ETSI EN 319 102-1 i.3 would not result in TOTAL_PASSED 3.2 Abbreviations For the purposes of the present document, the abbreviations given in ETSI TR 119 001 i.1 and the following apply: BCS Baseline Container Structure BSC Bas

35、eline Syntactical Conformance STV Signature Time-stamp token Value TC Test Case 4 ASiC baseline container interoperability test specification overview This clause describes the overall approach used to specify test suites for ASiC baseline containers interoperability testing. ETSI EN 319 162-1 1 def

36、ines different forms and, for each, four levels of ASiC baseline containers. ETSI ETSI TS 119 164-2 V2.1.1 (2016-06)7 The test suites are defined with different forms and layers reflecting the ASiC baseline containers specified in 1 and, for the signature test suites, reference to the appropriate CA

37、dES test suites ETSI TS 119 124-2 4 and XAdES test suites ETSI TS 119 134-2 5 is made: Testing ASiC-S and ASiC-E containers interoperability between applications claiming B-B level conformance. Testing ASiC-S and ASiC-E containers interoperability between applications claiming B-T level conformance.

38、 Testing ASiC-S and ASiC-E containers interoperability between applications claiming B-LT level conformance. Testing ASiC-S and ASiC-E containers interoperability between applications claiming B-LTA level conformance. Testing augmentation of ASiC containers from B-T level to B-LTA level. Negative te

39、st cases for ASiC-S and ASiC-E baseline containers: - ASiC B-B level containers test cases. - ASiC B-T level containers test cases. - ASiC B-LTA level containers test cases. 5 Test suite for testing interoperability of ASiC-S baseline containers 5.1 Introduction to testing ASiC-S baseline containers

40、 In clause 5 all the ASiC-S test cases necessary for testing conformance to each baseline level are specified. In clause 5.2 the test cases common to all ASiC-S forms and levels are specified. In clauses 5.3 and 5.4 the test cases for each level are specified. 5.2 Test cases common to all ASiC-S for

41、ms and levels The test cases common to all ASiC-S baseline containers are specified in Table 1. Table 1: Test cases common to all ASiC-S baseline containers TC ID Description Pass criteria Interop. Level ASiC-S/BCS/1 This test case tests if the container ZIP format is correct. The container content

42、shall comply with ISO/IEC 21320-1 6 and be successfully extracted. Baseline Container Structure ASiC-S/BCS/2 Verify if the container format is identifiable. The container extension shall be “.asics“. Baseline Container Structure ASiC-S/BCS/3 mimetype is set appropriately. Prerequisites: ASiC-S/BCS/1

43、 and ASiC-S/BCS/2 passed; mimetype is present. mimetype value shall comply with ASiC 1, clauses 4.3.3.1, point 2) b) and A.1. Baseline Container Structure ASiC-S/BCS/4 This test case tests that a signature is present in the container. A META-INF folder in the root folder shall be present and contain

44、 one signature.p7s file (ASiC 1, clause 4.3.3.2 item 3b) or signatures.xml file (ASiC 1, clause 4.3.3.2, item 3c). Baseline Container Structure ASiC-S/BCS/5 Presence of the signed file. A single file, in addition to the optional mimetype, shall be present in the root folder. Baseline Container Struc

45、ture ETSI ETSI TS 119 164-2 V2.1.1 (2016-06)8 5.3 Test cases for ASiC-S baseline containers with CAdES signatures 5.3.1 Positive test cases The test cases for ASiC-S with CAdES containers shall be as specified in Table 2. The test cases specified in clause 5.1 and the presence of signature.p7s file

46、ASiC 1, clause 4.3.3.2 item 3b) are a prerequisite. Table 2: Test cases for all ASiC-S baseline container levels with CAdES signatures TC ID Description Pass criteria ASiC-S/CBB This group of test cases tests a set of ASiC-S container including each a signature created according to all the CAdES/BB/

47、* test cases defined in the Test suites for testing interoperability of CAdES baseline signatures ETSI TS 119 124-2 4, clause 5. All the CAdES/BB/* test cases in ASiC-S/CBB shall be passed according to the criteria specified in ETSI TS 119 124-2 4, clause 5. ASiC-S/CBT This group of test cases tests

48、 a set of ASiC-S container including each a signature created according to all the CAdES/BT/* test cases defined in the Test suites for testing interoperability of CAdES baseline signatures ETSI TS 119 124-2 4, clause 6. All the CAdES/BT/* test cases in ASiC-S/CBT shall be passed according to the cr

49、iteria specified in ETSI TS 119 124-2 4, clause 6. ASiC-S/CBLT This group of test cases tests a set of ASiC-S container including each a signature created according to all the CAdES/BLT/* test cases defined in the Test suites for testing interoperability of CAdES baseline signatures ETSI TS 119 124-2 4, clause 7. All the CAdES/BLT/* test cases in ASiC-S/CBLT shall be passed according to the criteria specified in ETSI TS 119 124-2 4, clause 7. ASiC-S/CBLTA This group of test cases tes