You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@santuario.apache.org by "Colm O hEigeartaigh (JIRA)" <ji...@apache.org> on 2012/07/04 12:40:34 UTC
[jira] [Created] (SANTUARIO-317) Streaming signature reference does
not support no Transforms element
Colm O hEigeartaigh created SANTUARIO-317:
---------------------------------------------
Summary: Streaming signature reference does not support no Transforms element
Key: SANTUARIO-317
URL: https://issues.apache.org/jira/browse/SANTUARIO-317
Project: Santuario
Issue Type: Improvement
Reporter: Colm O hEigeartaigh
Assignee: Colm O hEigeartaigh
Fix For: Java 2.0.0
The streaming signature reference does not support no Transforms element, .e.g:
<Reference URI="#object">
<DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1" />
<DigestValue>7/XTsHaBSOnJ/jXD5v0zL6VKYsk=</DigestValue>
</Reference>
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Updated] (SANTUARIO-317) Streaming signature reference does
not support no Transforms element
Posted by "Colm O hEigeartaigh (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/SANTUARIO-317?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Colm O hEigeartaigh updated SANTUARIO-317:
------------------------------------------
Component/s: Java
> Streaming signature reference does not support no Transforms element
> --------------------------------------------------------------------
>
> Key: SANTUARIO-317
> URL: https://issues.apache.org/jira/browse/SANTUARIO-317
> Project: Santuario
> Issue Type: Improvement
> Components: Java
> Reporter: Colm O hEigeartaigh
> Assignee: Colm O hEigeartaigh
> Fix For: Java 2.0.0
>
>
> The streaming signature reference does not support no Transforms element, .e.g:
> <Reference URI="#object">
> <DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1" />
> <DigestValue>7/XTsHaBSOnJ/jXD5v0zL6VKYsk=</DigestValue>
> </Reference>
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Commented] (SANTUARIO-317) Streaming signature reference
does not support no Transforms element
Posted by "Marc Giger (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/SANTUARIO-317?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13413102#comment-13413102 ]
Marc Giger commented on SANTUARIO-317:
--------------------------------------
Resolved in r1359240. Will mark this issue as resolved. Please reopen if something is missing or wrong.
> Streaming signature reference does not support no Transforms element
> --------------------------------------------------------------------
>
> Key: SANTUARIO-317
> URL: https://issues.apache.org/jira/browse/SANTUARIO-317
> Project: Santuario
> Issue Type: Improvement
> Reporter: Colm O hEigeartaigh
> Assignee: Colm O hEigeartaigh
> Fix For: Java 2.0.0
>
>
> The streaming signature reference does not support no Transforms element, .e.g:
> <Reference URI="#object">
> <DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1" />
> <DigestValue>7/XTsHaBSOnJ/jXD5v0zL6VKYsk=</DigestValue>
> </Reference>
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Resolved] (SANTUARIO-317) Streaming signature reference
does not support no Transforms element
Posted by "Marc Giger (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/SANTUARIO-317?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Marc Giger resolved SANTUARIO-317.
----------------------------------
Resolution: Fixed
> Streaming signature reference does not support no Transforms element
> --------------------------------------------------------------------
>
> Key: SANTUARIO-317
> URL: https://issues.apache.org/jira/browse/SANTUARIO-317
> Project: Santuario
> Issue Type: Improvement
> Reporter: Colm O hEigeartaigh
> Assignee: Colm O hEigeartaigh
> Fix For: Java 2.0.0
>
>
> The streaming signature reference does not support no Transforms element, .e.g:
> <Reference URI="#object">
> <DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1" />
> <DigestValue>7/XTsHaBSOnJ/jXD5v0zL6VKYsk=</DigestValue>
> </Reference>
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Commented] (SANTUARIO-317) Streaming signature reference
does not support no Transforms element
Posted by "Marc Giger (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/SANTUARIO-317?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13409588#comment-13409588 ]
Marc Giger commented on SANTUARIO-317:
--------------------------------------
The question here is do we have to apply a canonicalization or not.
The spec (http://www.w3.org/TR/xmldsig-core/) says the following in chapter 2.1.1:
"If no Transforms element is present, the resource's content is digested directly"
But after a little bit googling the following parts from the spec seems to be relevant:
Chapter 4.3.3.5:
"If the result of the URI dereference and application of Transforms is an XPath node-set (or sufficiently functional replacement implemented by the application) then it must be converted as described in the Reference Processing Model (section 4.3.3.2). If the result of URI dereference and application of transforms is an octet stream, then no conversion occurs (comments might be present if the Canonical XML with Comments was specified in the Transforms)."
Chapter 4.3.3.2:
"If the data object is a node-set and the next transform requires octets, the signature application MUST attempt to convert the node-set to an octet stream using Canonical XML [XML-C14N]."
So we have to apply C14N 1.0 Omit Comments.
This is what the DOM Code does. Additionally tested with C# with the same result.
> Streaming signature reference does not support no Transforms element
> --------------------------------------------------------------------
>
> Key: SANTUARIO-317
> URL: https://issues.apache.org/jira/browse/SANTUARIO-317
> Project: Santuario
> Issue Type: Improvement
> Reporter: Colm O hEigeartaigh
> Assignee: Colm O hEigeartaigh
> Fix For: Java 2.0.0
>
>
> The streaming signature reference does not support no Transforms element, .e.g:
> <Reference URI="#object">
> <DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1" />
> <DigestValue>7/XTsHaBSOnJ/jXD5v0zL6VKYsk=</DigestValue>
> </Reference>
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Commented] (SANTUARIO-317) Streaming signature reference
does not support no Transforms element
Posted by "Colm O hEigeartaigh (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/SANTUARIO-317?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13410217#comment-13410217 ]
Colm O hEigeartaigh commented on SANTUARIO-317:
-----------------------------------------------
Looks good to me.
Colm.
> Streaming signature reference does not support no Transforms element
> --------------------------------------------------------------------
>
> Key: SANTUARIO-317
> URL: https://issues.apache.org/jira/browse/SANTUARIO-317
> Project: Santuario
> Issue Type: Improvement
> Reporter: Colm O hEigeartaigh
> Assignee: Colm O hEigeartaigh
> Fix For: Java 2.0.0
>
>
> The streaming signature reference does not support no Transforms element, .e.g:
> <Reference URI="#object">
> <DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1" />
> <DigestValue>7/XTsHaBSOnJ/jXD5v0zL6VKYsk=</DigestValue>
> </Reference>
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira