Implementation of the widget signing spec

Hi all,

I would like to let you know that we finished the implementation of the widget signing spec within our open sourced signing server. As an implementaion of the OASIS DSS spec we focus on server side signature creation. The server side processing of signing process offers some advantages ( access control, central management of keys, audit logs, ... ). The signature creation can be performed by doing a web service call ( e.g. from a build file ). If such a setup is applicable for the widget generation ( what I consider to be tue ), I would offer to create a widget profile for the DSS-X TC.

Another topic of interest may be the centralized verification. Was this topic considered, yet ? This could minimize the number of OCSP calls and easy the burden of certificate management on the client ...

Is there a test CA setup available, yet ? If yes, we would like to offer our widget signing service to the community.


Greetings

Andreas

--
Andreas Kühne phone: +49 177 293 24 97 mailto: kuehne@trustable.de

Trustable Ltd. Niederlassung Deutschland Ströverstr. 18 - 59427 Unna Amtsgericht Hamm HRB 5868

Directors Andreas Kühne Heiko Veit

Company UK Company No: 5218868 Registered in England and Wales