Authologic

Test Verifier Simplifications

Deviations from the production EUDI specification

Authologic verifier was configured to for testing purposes and the following simplifications were applied compared to a production-grade EUDI verifier compliant with the ARF 1.4 specification.

Issuer Trust & Certificates

Issuer certificate validation relaxed
When SD-JWT-VC signature verification fails due to an untrusted issuer certificate, the credential is still accepted after re-validation without signature checking. This allows testing with wallets that use self-signed or non-production certificates.
Security Validation
Trust sources are not validated
The issuer certificate is not validated against the keystores, which means that all X.509 certificate chains are accepted regardless of the issuing CA.
Security Validation
Certificate revocation checking disabled
PKIX certificate path validation runs with revocation checking disabled CRL and OCSP checks are skipped for both mso_mdoc and SD-JWT-VC certificate chains.
Validation

Credential Validation

Type metadata policy set to not-used
SD-JWT-VC type metadata resolution and validation policy is not used. The verifier does not fetch or validate the credential type metadata document from the issuer.
Validation
Digital Credentials API validation incomplete
The DC API response decoding and validation paths are not fully enabled.
Validation
Verifier X.509 Certificate (PEM)

The X.509 certificate used by this verifier for OpenID4VP requests (x509_san_dns client ID method). 

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Reader Certificate (PEM)

The reader certificate used by this verifier for Digital Credentials API (DC API) requests. 

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
← Back to Verifier