Valid Certificate Produced for Positive Covid Test Results
Closed this issue · 5 comments
Describe the bug
When generating a DGC, one option is to input the Positive Result of a Covid Test.
Hence, the person was tested Positive for Covid.
I am able to proceed to produce the DGC, and get a Green and Valid verification.
Expected behaviour
Digital Green certificate should not be issued to anyone with a Positive Covid Test Result.
Steps to reproduce the issue
See Screenshot
Possible Fix
Implement Validation as to which values in the value sets should produce a DGC and which should not.
@psavva Thanks for the hint. Currently is the assumption that this can be issued, but the verifier apps will report "invalid" if you scan a certificate issued with "detected" value.
The verifier app on Android that I have at least tested passed validation
@psavva In IOS it's already working. In Android is this feature not yet working. eu-digital-green-certificates/dgca-verifier-app-android#32
This was not working as of when I raised this ticket.
The ticket was widly discussed. The final decission is that the positive test can be issued (signed) and it is task of validation app to revoke it (show red).
Consider that the issuence-service (this module) do not have insight into certificate data. It signs only hashed data. All certificate data never leave web front-end, they are not transfered to issuance-service. So this functonality can not be modified in dgca-issuance-service but only in dgca-issuance-web. The issuance only says something about data integrity but not provide information about if the certificate itself is valid. The validation itself can be much more complex. For example some test can be considered as invalid because the test compound was found defect later.