You are viewing a plain text version of this content. The canonical link for it is here.
Posted to c-dev@xerces.apache.org by Monica Lau <ml...@yahoo.com> on 2004/09/29 02:55:55 UTC
XML Signature Questions
Hi,
I'm a newbie on XML signatures. I've been reading up on it, and I have two questions below that I hope Xerces/XML folks can help me out with:
(1) In the DOM creation, does Xerces support creating the <signature> element? Is there special API to create this element or is this treated as regular element creations using the standard "createElement()" API?
(2) This is probably a stupid question, but I really need to ask: Do we invoke the signature generation algorithms manually (ie, DSA, SHA-1, etc.) to generate the signature or does Xerces automatically invoke these algorithms in the DOM creation? I don't believe Xerces or any other XML parser automatically invoke the algorithms to generate the signatures, right? The <... Algorithm> elements (ie, <SignatureMethod Algorithm="..." />) are essentially used to tell the recipient what algorithms were used to generate the signature (hence, describing the data).
Thanks for your help in advance! Much appreciated.
Regards,
Monica
---------------------------------
Do you Yahoo!?
vote.yahoo.com - Register online to vote today!
Re: XML Signature Questions
Posted by Simon Kitching <si...@ecnetwork.co.nz>.
On Wed, 2004-09-29 at 12:55, Monica Lau wrote:
> Hi,
>
> I'm a newbie on XML signatures. I've been reading up on it, and I
> have two questions below that I hope Xerces/XML folks can help me out
> with:
>
> (1) In the DOM creation, does Xerces support creating the <signature>
> element? Is there special API to create this element or is this
> treated as regular element creations using the standard
> "createElement()" API?
>
> (2) This is probably a stupid question, but I really need to ask: Do
> we invoke the signature generation algorithms manually (ie, DSA,
> SHA-1, etc.) to generate the signature or does Xerces automatically
> invoke these algorithms in the DOM creation? I don't believe Xerces
> or any other XML parser automatically invoke the algorithms to
> generate the signatures, right? The <... Algorithm> elements (ie,
> <SignatureMethod Algorithm="..." />) are essentially used to tell the
> recipient what algorithms were used to generate the signature (hence,
> describing the data).
I'm not aware of Xerces providing any xml signature support.
I'm pretty sure you have to implement this yourself, then add the
signature info to the document using standard createElement() calls.
Regards,
Simon
---------------------------------------------------------------------
To unsubscribe, e-mail: xerces-c-dev-unsubscribe@xml.apache.org
For additional commands, e-mail: xerces-c-dev-help@xml.apache.org
Re: XML Signature Questions
Posted by Vitaly Prapirny <ma...@mebius.net>.
Hi,
Monica Lau wrote:
> I'm a newbie on XML signatures. I've been reading up on it, and I have
> two questions below that I hope Xerces/XML folks can help me out with:
You could look at XML Security Apache project, especially C++ part
( http://xml.apache.org/security/c/index.html )
Good luck !
---------------------------------------------------------------------
To unsubscribe, e-mail: xerces-c-dev-unsubscribe@xml.apache.org
For additional commands, e-mail: xerces-c-dev-help@xml.apache.org
RE: XML Signature Questions
Posted by Monica Lau <ml...@yahoo.com>.
Hi,
Thanks for all your responses -- that was really helpful! The XSec library is just what I need. I also found a very useful article on XML signatures:
http://www.devshed.com/c/a/Security/Safeguarding-the-Identity-and-Integrity-of-XML-Messages/1
Thanks again,
Monica
Matthias Niggemeier <m...@thias.de> wrote:
Hi,
Xerces itself has no support for signatures.
Have a look at http://xml.apache.org/security/
thats the lib you need.
Regards
Matthias
> -----Original Message-----
> From: Monica Lau [mailto:mllau2004@yahoo.com]
> Sent: Wednesday, September 29, 2004 2:56 AM
> To: xerces-c-dev@xml.apache.org
> Subject: XML Signature Questions
>
>
> Hi,
>
> I'm a newbie on XML signatures. I've been reading up on it,
> and I have two questions below that I hope Xerces/XML folks
> can help me out with:
>
> (1) In the DOM creation, does Xerces support creating the
> element? Is there special API to create this
> element or is this treated as regular element creations using
> the standard "createElement()" API?
>
> (2) This is probably a stupid question, but I really need to
> ask: Do we invoke the signature generation algorithms
> manually (ie, DSA, SHA-1, etc.) to generate the signature or
> does Xerces automatically invoke these algorithms in the DOM
> creation? I don't believe Xerces or any other XML parser
> automatically invoke the algorithms to generate the
> signatures, right? The <... Algorithm> elements (ie,
> ) are essentially used to
> tell the recipient what algorithms were used to generate the
> signature (hence, describing the data).
>
> Thanks for your help in advance! Much appreciated.
>
> Regards,
> Monica
>
>
>
> _____
>
> Do you Yahoo!?
> vote.yahoo.com - Register online to vote today!
>
> ATTACHMENT part 2 application/x-pkcs7-signature name=smime.p7s
---------------------------------
Do you Yahoo!?
Yahoo! Mail - 50x more storage than other providers!
RE: XML Signature Questions
Posted by Matthias Niggemeier <m...@thias.de>.
Hi,
Xerces itself has no support for signatures.
Have a look at http://xml.apache.org/security/
thats the lib you need.
Regards
Matthias
> -----Original Message-----
> From: Monica Lau [mailto:mllau2004@yahoo.com]
> Sent: Wednesday, September 29, 2004 2:56 AM
> To: xerces-c-dev@xml.apache.org
> Subject: XML Signature Questions
>
>
> Hi,
>
> I'm a newbie on XML signatures. I've been reading up on it,
> and I have two questions below that I hope Xerces/XML folks
> can help me out with:
>
> (1) In the DOM creation, does Xerces support creating the
> <signature> element? Is there special API to create this
> element or is this treated as regular element creations using
> the standard "createElement()" API?
>
> (2) This is probably a stupid question, but I really need to
> ask: Do we invoke the signature generation algorithms
> manually (ie, DSA, SHA-1, etc.) to generate the signature or
> does Xerces automatically invoke these algorithms in the DOM
> creation? I don't believe Xerces or any other XML parser
> automatically invoke the algorithms to generate the
> signatures, right? The <... Algorithm> elements (ie,
> <SignatureMethod Algorithm="..." />) are essentially used to
> tell the recipient what algorithms were used to generate the
> signature (hence, describing the data).
>
> Thanks for your help in advance! Much appreciated.
>
> Regards,
> Monica
>
>
>
> _____
>
> Do you Yahoo!?
> vote.yahoo.com - Register online to vote today!
>