signxml icon indicating copy to clipboard operation
signxml copied to clipboard

XADES sign has always_add_key_value: bool = True

Open msetina opened this issue 11 months ago • 0 comments

XMLSigner describes that always_add_key_value should be false for security issues, but in XAdESSigner the default is true. Is there a reason for that? The case is that if we provide X509 certificate, the signed document has duplicate information and verifier requests to use ignore_ambiguous_key_info to disable KeyValue check.

msetina avatar Mar 19 '24 15:03 msetina