save checkpoint

This commit is contained in:
master
2026-02-14 09:11:48 +02:00
parent 9ca2de05df
commit e9aeadc040
1512 changed files with 30863 additions and 4728 deletions

View File

@@ -0,0 +1,39 @@
# eIDAS Qualified Timestamp Support
## Module
__Libraries
## Status
VERIFIED
## Description
Full eIDAS qualified timestamp signing and verification provider with TSP client integration.
## Implementation Details
- **EidasCryptoProvider**: `src/__Libraries/StellaOps.Cryptography.Plugin.EIDAS/EidasCryptoProvider.cs` -- main eIDAS crypto plugin
- **EidasSigner**: `src/__Libraries/StellaOps.Cryptography.Plugin.EIDAS/EidasSigner.cs` -- signing implementation with `.Export.cs` for key export
- **LocalEidasProvider**: `src/__Libraries/StellaOps.Cryptography.Plugin.EIDAS/LocalEidasProvider.cs` -- local eIDAS operations: `.Signing.cs` (local signing), `.Verification.cs` (local verification)
- **TrustServiceProviderClient**: `src/__Libraries/StellaOps.Cryptography.Plugin.EIDAS/TrustServiceProviderClient.cs` -- TSP client for qualified timestamps: `.Signing.cs` (request timestamp from TSA), `.Verification.cs` (verify qualified timestamps against EU Trust List)
- **TspResponses**: `src/__Libraries/StellaOps.Cryptography.Plugin.EIDAS/TspResponses.cs` -- TSP response models
- **Configuration**: `src/__Libraries/StellaOps.Cryptography.Plugin.EIDAS/` -- `EidasOptions.cs`, `EidasKeyConfig.cs`, `LocalSigningOptions.cs`, `TrustedListOptions.cs`, `TspOptions.cs`, `SignatureLevel.cs`
- **DI Registration**: `src/__Libraries/StellaOps.Cryptography.Plugin.EIDAS/ServiceCollectionExtensions.cs`
- **Tests**: `src/__Libraries/StellaOps.Cryptography.Plugin.EIDAS.Tests/`
- **Source**: Feature matrix scan
## E2E Test Plan
- [ ] Verify TSP client can request qualified timestamps from a TSA endpoint
- [ ] Test timestamp verification against EU Trust List entries
- [ ] Verify local signing with eIDAS-compliant key material
- [ ] Test local verification of eIDAS signatures
- [ ] Verify EidasOptions configures TSA endpoint, key, and signature level correctly
- [ ] Test TrustServiceProviderClient handles TSP response parsing
- [ ] Verify qualified timestamp tokens contain correct OIDs
- [ ] Test DI registration via ServiceCollectionExtensions
## Verification
- **Verified**: 2026-02-13T20:30:00Z
- **Run**: run-001
- **Tier**: Tier 2d (Library/Internal)
- **Verdict**: PASS