Module cades 

CAdES attribute rules of ETSI EN 319 122-1 V1.3.1 §§5.2-5.5 that narrow the generic CMS and ESS schemas.

The generic readers accept what RFC 5652 and RFC 5035 accept; this module reports where a CAdES signature uses that freedom against the profile: an attribute in the wrong set, a single-valued attribute with another value count, a content-describing attribute inside a countersignature, ESS policies and an implied signature policy. Which attributes a level requires, and every verdict, stay with the caller.

Enums

Role

The SignerInfo being checked, since rules differ by where it sits.

Functions

profile_faults

Reports every CAdES profile violation of one SignerInfo, in rule order, with original locations.