News

Changes in the verification of the validity of digital signatures in the List of Trusted Lists and their influences on e-services

26.08.2019

 Due to the changes in the address and file name of the List of Trusted Lists (LOTL), e-service providers as well as users of digidoc-tool, the C++ library libdigidocpp, and DigiDoc4j will have to make changes to ensure that the service would continue to be able to verify the validity of signatures, or take into consideration the implications of not doing so.

 

As for e-services, the changes will affect information systems that use the old LOTL address to verify the validity of digitally signed documents. These e-service providers will have to refer to the new address available at: https://ec.europa.eu/tools/lotl/eu-lotl.xml.

In the default configuration of the DigiDoc4 client, the file with the new LOTL URL will be updated automatically within 7 days and home users will not have to make any changes themselves. In workplace computers where updating the file is prohibited by the workplace, the version of the configuration file should be verified. The DigiDoc4 client configuration started using the new URL in version 94. The version of the configuration file can be verified using the DigiDoc4 Client. To do so, open DigiDoc4 Client, choose ‘Configuration’ in the top right corner and ‘Diagnostics’ from the left-hand menu. The version of the configuration can be found at the bottom of the diagnostics window, when you look for the parameter ‘SERIAL: 94’. If you appear to be using a version that is earlier than ‘SERIAL: 94’, the file should be updated.

If the configuration file has not been updated automatically to version 94, it can be updated manually in the DigiDoc4 client configuration by clicking on ‘Check for updates’ at the bottom.

Users of digidoc-tool will need to start using the new ID-card software version 19.8.0.1844 that includes the updated LOTL address. The new version of the software is available at www.id.ee, more specifically > https://installer.id.ee/media/win/Open-EID-19.8.0.1844_x86.exe.

For those using the libdigidocpp library, we recommend updating it to 3.14.0, as this version includes a new LOTL URL. The new version 3.14.0 is available at RIA’s GitHub: https://github.com/open-eid/libdigidocpp/releases.

Users of the DigiDoc4j library find instructions for configuring their LOTL address here: https://github.com/open-eid/digidoc4j/wiki/Questions-&-Answers.

In addition to this, those who wish to do so can soon start using the new version of the DigiDoc4j library with the new LOTL address. The new version will be public in the beginning of next week (the 35th week) and can be found in RIA’s GitHub: https://github.com/open-eid/digidoc4j/releases.

To continue verifying signature validity, we recommend making the changes by 28 August but not after 2019 end of the year. 

The Connecting Europe Facility (CEF) eSignature team of the European Commission informed RIA of the changes in the List of Trusted Lists on 13 August 2019 (link: https://ec.europa.eu/newsroom/cef/newsletter-specific-archive-issue.cfm?newsletter_service_id=1418&lang=default).

Additional information at id.ee or help at ria dot ee


ASK FOR HELP

If you didn't find an answer to your question, send it to our team.



  • See instructions
  • Please estimate your ability to use the computer, so that we can provide you with the best guidance

         

  • Verification failed

How can we improve the article and be more helpful?
Send Close