You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@santuario.apache.org by Miroslav Nachev <mi...@space-comm.com> on 2007/04/06 16:46:57 UTC
Re: Apache XMl Signature patch for timestamp
Dear Rodolphe,
Did you report this as feature or enhancement in XML Security project?
http://issues.apache.org/bugzilla/enter_bug.cgi
If you do that, this can be included in the next release of JDK and then
it will be not necessary to patch Apache XML Signature library. Also in
this case JDK implementation can be used.
Regards,
Miro.
Rodolphe Cardon wrote:
> For example, the AllDataObjectsTimeStamp element contains a timestamp
> of the referenced data. This referenced data may be a ds:Object (ds
> reprensent the XMLDSIG namespace). This Object must be first
> marshalled before timestamp calculation. With the Apache XML
> Signature, the marshalling is done when calling the
> XMLSignature.sign() method (see DOMXMLSignature.java in Apache XML
> Signature). It's necessary to marshal the signature before the signature.
>
>
>
> The procedure is :
>
> · marshal the signature
>
> · calculate the DataObjectsTimestamp
>
> · generate the reference hahs and sign the SignedInfo/ /element.
>
> Rodolphe
>
> ----- Original Message -----
> *From:* Miroslav Nachev <ma...@space-comm.com>
> *To:* dev@xades.dev.java.net <ma...@xades.dev.java.net>
> *Sent:* Friday, April 06, 2007 1:53 PM
> *Subject:* Re: Organization
>
> Dear Rodolphe,
>
> Can you explain why you do this patch for Timestamps calculations?
>
>
> Regards,
> Miro.
>
> Rodolphe Cardon wrote:
>> Hello everybody,
>>
>> Before to implement other things, it would be useful to document
>> the functions with /** */ and to create API documentation with
>> javadoc.
>> Note that full implementation for xades require a (small)
>> modification in Apache XMLSIG to calculates timestamps over the
>> qualified information. I think you can't use the integrated
>> package in JDK6. You must include the modified version as an
>> additional library (like in rcardon.free.fr/websign project).
>>
>> Rodolphe
>>
>>
>> ----- Original Message -----
>> *From:* Miroslav Nachev <ma...@space-comm.com>
>> *To:* dev@xades.dev.java.net <ma...@xades.dev.java.net>
>> *Sent:* Tuesday, April 03, 2007 11:28 AM
>> *Subject:* Re: Organization
>>
>> Hi,
>>
>>> What do you think about that?,
>> I am agree with that. Just to note that we have to add GUI
>> Demos (JNLP) also, not only JUnit Tests. From my practice
>> this is very important.
>> Some of the demos can be fully working program. Rodolphe,
>> what do you think about that? Do you have any experience with
>> Swing and SwingX?
>>
>>> Another think we have to talk about is the project management support,
>>> I mean the svn server, mailing lists, project page.
>>>
>> I think that http://xades.dev.java.net/ is the best place for
>> that. There is Bug Tracker, Features, and everything that we
>> need. Also we can use the Web there without limits. Just to
>> note that the JDK7, JDK6 and other big projects are hosted on
>> the same place. We have FULL control for everything - Web,
>> SVN, MailingList, etc.
>>
>>> Are they going to be hosted on dev.xades.java.net?
>>> If we want to have a project web page I think it would be
>>> a good idea to choose a project name and register .org domain
>>> name. I suggest JXAdES as a project name.
>> We can support 2 webs, one in http://xades.dev.java.net/
>> where we will use all kind of services including Web Hosting,
>> and another alternative which will be used just for Web
>> Hosting like www.jxades.org. This domain is registered
>> already. Please give me some Web Server details to redirect
>> this domain to your university server?
>> This new domain can be used for more profitable services like
>> extra orders, support, etc. In the future we can establish a
>> new company. What do you think about this idea?
>>
>>
>> Miro.
>>
>> Paul Santapau wrote:
>>> Hi all,
>>>
>>> Really good good news, congratulations Miroslav.
>>> I think now it is the time to checkout the code
>>> (I have already done :-)), and become its best friend.
>>>
>>> So we can recover the tasks and organization thread and
>>> discuss about the tasks to be done.
>>>
>>> I think that the prioritary ones are (on desc priority order):
>>>
>>> 1. Code refactoring: with net.java.xades.* as the main package
>>>
>>> 2. Intensive code testing implementation with JUnit, so we can set
>>> up the rule of not upload anything to the svn although the
>>> affected code has passed each individual test.
>>>
>>> 3. Set up the project web page, something as http://qooxdoo.org/
>>> project as Ricardo suggested.
>>>
>>> 4. Code documentation with javadoc and some samples.
>>>
>>> 5. Plan the first "rc" release.
>>>
>>> What do you think about that?, of course we can do some of those tasks
>>> at the same time.
>>>
>>> Another think we have to talk about is the project management support,
>>> I mean the svn server, mailing lists, project page.
>>>
>>> Are they going to be hosted on dev.xades.java.net?
>>> If we want to have a project web page I think it would be
>>> a good idea to choose a project name and register .org domain
>>> name. I suggest JXAdES as a project name.
>>>
>>> I have a 24X7X365 available machine at university, If you want, the
>>> project could be hosted there.
>>>
>>> Regards.
>>> Paúl.
>>>
>>> El Lunes 02 Abril 2007 13:12, Miroslav Nachev escribió:
>>>
>>>> Dear Friends,
>>>>
>>>> You can find the source code (whole NetBeans projects) at the
>>>> Subversion
>>>>
>>>> as follow:
>>>> |svn checkout https://xades.dev.java.net/svn/xades/CosmosUtils
>>>>
>>>> --username yourname
>>>>
>>>> ||svn checkout https://xades.dev.java.net/svn/xades/CosmosSecurity
>>>>
>>>> --username yourname|
>>>>
>>>>
>>>> Regards,
>>>> Miro.
>>>>
>>>
>>> ---------------------------------------------------------------------
>>> To unsubscribe, e-mail: dev-unsubscribe@xades.dev.java.net
>>> For additional commands, e-mail: dev-help@xades.dev.java.net
>>>
>>>
>>>
>>
>> ------------------------------------------------------------------------
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: dev-unsubscribe@xades.dev.java.net
>> For additional commands, e-mail: dev-help@xades.dev.java.net
>>
>
> ------------------------------------------------------------------------
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscribe@xades.dev.java.net
> For additional commands, e-mail: dev-help@xades.dev.java.net
>