Open
Description
c2patool 0.10.2: it no longer displays the "validation_status" block. For example (https://fotoforensics.com/analysis.php?id=9319b3d54148ccb21a6dd3947cfae4766f8ae4f4.394694&fmt=orig): c2patool 0.7.0 through 0.9.10 with -d includes a "validation_status" summary, showing which claims and assertions are validated.
"validation_status": [
{
"code": "claimSignature.validated",
"url": "self#jumbf=/c2pa/urn:uuid:6e9825b9-c208-4d07-9727-fc99fc466d19/c2pa.signature",
"explanation": "claim signature valid"
},
{
"code": "assertion.hashedURI.match",
"url": "self#jumbf=/c2pa/urn:uuid:6e9825b9-c208-4d07-9727-fc99fc466d19/c2pa.assertions/c2pa.thumbnail.ingredient.jpeg",
"explanation": "hashed uri matched: self#jumbf=c2pa.assertions/c2pa.thumbnail.ingredient.jpeg"
},
{
"code": "assertion.hashedURI.match",
"url": "self#jumbf=/c2pa/urn:uuid:6e9825b9-c208-4d07-9727-fc99fc466d19/c2pa.assertions/c2pa.ingredient",
"explanation": "hashed uri matched: self#jumbf=c2pa.assertions/c2pa.ingredient"
},
{
"code": "assertion.hashedURI.match",
"url": "self#jumbf=/c2pa/urn:uuid:6e9825b9-c208-4d07-9727-fc99fc466d19/c2pa.assertions/c2pa.hash.data",
"explanation": "hashed uri matched: self#jumbf=c2pa.assertions/c2pa.hash.data"
},
{
"code": "assertion.dataHash.match",
"url": "self#jumbf=/c2pa/urn:uuid:6e9825b9-c208-4d07-9727-fc99fc466d19/c2pa.assertions/c2pa.hash.data",
"explanation": "data hash valid"
},
{
"code": "claimSignature.validated",
"url": "self#jumbf=/c2pa/urn:uuid:7b02591b-8d92-4381-8759-d585dcf5df55/c2pa.signature",
"explanation": "claim signature valid"
},
{
"code": "assertion.hashedURI.match",
"url": "self#jumbf=/c2pa/urn:uuid:7b02591b-8d92-4381-8759-d585dcf5df55/c2pa.assertions/c2pa.actions",
"explanation": "hashed uri matched: self#jumbf=c2pa.assertions/c2pa.actions"
},
{
"code": "assertion.hashedURI.match",
"url": "self#jumbf=/c2pa/urn:uuid:7b02591b-8d92-4381-8759-d585dcf5df55/c2pa.assertions/c2pa.hash.data",
"explanation": "hashed uri matched: self#jumbf=c2pa.assertions/c2pa.hash.data"
}
]
But 0.10.x omits this validation_status information, so the caller cannot determine if the file is actually valid.