beginner question

[Fr...@student.fh-nuernberg.de]

Hello, all

I'm quite new to the Apache XML Security Suite and I have a small
question. I was wondering if there is a sample-app (perhaps
in the samples, but couldn't find it) to sign an arbitrary 
xml-file just from the commandline.
The XMLSec Library (from aleksey.com) has such a utility. Has there 
already been any effort on something like this for
the Apache XML Security Suite?
I have to do an lecture on the Apache XML Security Suite in a few days
and need this for live-demonstration (no, the hardcoded examples reachable
with ant are unfortunately not enough).
So, if theres' nothing like that available until now, I would
probably try to create it. Would there further be a chance, to get
it in the Suity (so I could tell my professor all i used was
already in the Suite ;)

Kind regards,
Frank

Re: beginner question

[Karel Wouters <Ka...@esat.kuleuven.ac.be>]

Frank,

if you implement it yourself, it might be good to create something that
does exactly the same as the tool from the XMLSec library from Aleksey.

best regards,

Karel.

On Wed, 13 Nov 2002, Christian Geuer-Pollmann wrote:

> Well, the problem is that XML Signature allows so many different kinds of
> 'flavours' that a single command line id only just another example... If
> you use PGP and create a detached signature, there's only one way how PGP
> can do this. So for PGP, a command line tool has a specific purpose.
>
> For XML Signature, you must ask:
>
>  - what is signed
>  - which transforms are used
>  - which key is used
>  - which part of the key material is included in KeyInfo
>  - where do I store the signature
>
> So if you answer these questions, it's quite easy to write a command line
> app exactly for this thingy (a 10 minutes job).
>
> Regards,
> Christian
>
> --On Mittwoch, 13. November 2002 08:33 +0100
> Frank.Seidel@student.fh-nuernberg.de wrote:
>
> > Hello, all
> >
> > I'm quite new to the Apache XML Security Suite and I have a small
> > question. I was wondering if there is a sample-app (perhaps
> > in the samples, but couldn't find it) to sign an arbitrary
> > xml-file just from the commandline.
> > The XMLSec Library (from aleksey.com) has such a utility. Has there
> > already been any effort on something like this for
> > the Apache XML Security Suite?
> > I have to do an lecture on the Apache XML Security Suite in a few days
> > and need this for live-demonstration (no, the hardcoded examples reachable
> > with ant are unfortunately not enough).
> > So, if theres' nothing like that available until now, I would
> > probably try to create it. Would there further be a chance, to get
> > it in the Suity (so I could tell my professor all i used was
> > already in the Suite ;)
> >
> > Kind regards,
> > Frank
>
>

Re: beginner question

[Christian Geuer-Pollmann <ge...@nue.et-inf.uni-siegen.de>]

Well, the problem is that XML Signature allows so many different kinds of 
'flavours' that a single command line id only just another example... If 
you use PGP and create a detached signature, there's only one way how PGP 
can do this. So for PGP, a command line tool has a specific purpose.

For XML Signature, you must ask:

 - what is signed
 - which transforms are used
 - which key is used
 - which part of the key material is included in KeyInfo
 - where do I store the signature

So if you answer these questions, it's quite easy to write a command line 
app exactly for this thingy (a 10 minutes job).

Regards,
Christian

--On Mittwoch, 13. November 2002 08:33 +0100 
Frank.Seidel@student.fh-nuernberg.de wrote:

> Hello, all
>
> I'm quite new to the Apache XML Security Suite and I have a small
> question. I was wondering if there is a sample-app (perhaps
> in the samples, but couldn't find it) to sign an arbitrary
> xml-file just from the commandline.
> The XMLSec Library (from aleksey.com) has such a utility. Has there
> already been any effort on something like this for
> the Apache XML Security Suite?
> I have to do an lecture on the Apache XML Security Suite in a few days
> and need this for live-demonstration (no, the hardcoded examples reachable
> with ant are unfortunately not enough).
> So, if theres' nothing like that available until now, I would
> probably try to create it. Would there further be a chance, to get
> it in the Suity (so I could tell my professor all i used was
> already in the Suite ;)
>
> Kind regards,
> Frank