You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@santuario.apache.org by ebxml ebxml <eb...@yahoo.com.au> on 2002/11/26 13:32:40 UTC
enveloped signature support ?
i was going through the code of ebxml
registry/repository implementation by Farrukh Najmi of
Sun Micro, in the source code it is written that
"Due to the bug in the Apache security lib, it does
not allow us to sign whole message and make
"enveloped-signature" transform."
is it true that xmlsec suite doesnot support enveloped
signature
http://www.yahoo.promo.com.au/hint/ - Yahoo! Hint Dropper
- Avoid getting hideous gifts this Christmas with Yahoo! Hint Dropper!
Re: enveloped signature support ?
Posted by ebxml ebxml <eb...@yahoo.com.au>.
yes, that is correct i have implemented that few days
back.
but as i was going through the code of ebxml reg/rep
implementation by farrukh after seeing that comment, i
got doubt,
it was just clarification
thanks anyway
--- Christian Geuer-Pollmann
<ge...@nue.et-inf.uni-siegen.de> wrote: >
> Sorry, but this is demonstrated 100 times throughout
> the examples. Nothin's
> more easy:
>
> Make a Transforms object which has a single
> enveloped-signature, set URI=""
> or URI="#xpointer(/)" and sign.
>
> Christian
>
> --On Dienstag, 26. November 2002 23:50 +1100 ebxml
> ebxml
> <eb...@yahoo.com.au> wrote:
>
> > i want to sign the entire xml document like below
> and
> > put the <ds:Signature> element
> > as child of SOAP:Envelope element
> >
> > <SOAP:Envelope....>
> > ...
> > <SOAP:Header....>
> > .....
> > .....
> > <ds:Signature>
> > .............
> > .............
> > </ds:Signature>
> > </SOAP:Header>
> > <SOAP:Body....>
> > ......
> > ......
> > </SOAP:Body>
> > </SOAP:Envelope>
> >
> > --- Christian Geuer-Pollmann
> > <ge...@nue.et-inf.uni-siegen.de> wrote: >
> >> ?!? This sounds curious. I'm not aware of any
> "bug"
> >> which prevents an
> >> enveloped-signature. At the moment, I say this
> >> statement is plain wrong. I
> >> am aware that the library is *SLOW* (because of
> the
> >> current c14n
> >> implementation). But you can sign *anything*
> which
> >> you can sign using the
> >> XML Signature specification.
> >>
> >> Maybe you could specify mere explicitly what you
> >> refer to, i.e. what is the
> >> input data, where do you put the signature to and
> >> what are you going to
> >> sign.
> >>
> >> Christian
> >>
> >> --On Dienstag, 26. November 2002 23:32 +1100
> ebxml
> >> ebxml
> >> <eb...@yahoo.com.au> wrote:
> >>
> >> > i was going through the code of ebxml
> >> > registry/repository implementation by Farrukh
> >> Najmi of
> >> > Sun Micro, in the source code it is written
> that
> >> >
> >> > "Due to the bug in the Apache security lib, it
> >> does
> >> > not allow us to sign whole message and make
> >> > "enveloped-signature" transform."
> >> >
> >> > is it true that xmlsec suite doesnot support
> >> enveloped
> >> > signature
> >>
> >
> > http://www.yahoo.promo.com.au/hint/ - Yahoo! Hint
> Dropper
> > - Avoid getting hideous gifts this Christmas with
> Yahoo! Hint Dropper!
>
>
http://www.yahoo.promo.com.au/hint/ - Yahoo! Hint Dropper
- Avoid getting hideous gifts this Christmas with Yahoo! Hint Dropper!
Re: enveloped signature support ?
Posted by Christian Geuer-Pollmann <ge...@nue.et-inf.uni-siegen.de>.
Sorry, but this is demonstrated 100 times throughout the examples. Nothin's
more easy:
Make a Transforms object which has a single enveloped-signature, set URI=""
or URI="#xpointer(/)" and sign.
Christian
--On Dienstag, 26. November 2002 23:50 +1100 ebxml ebxml
<eb...@yahoo.com.au> wrote:
> i want to sign the entire xml document like below and
> put the <ds:Signature> element
> as child of SOAP:Envelope element
>
> <SOAP:Envelope....>
> ...
> <SOAP:Header....>
> .....
> .....
> <ds:Signature>
> .............
> .............
> </ds:Signature>
> </SOAP:Header>
> <SOAP:Body....>
> ......
> ......
> </SOAP:Body>
> </SOAP:Envelope>
>
> --- Christian Geuer-Pollmann
> <ge...@nue.et-inf.uni-siegen.de> wrote: >
>> ?!? This sounds curious. I'm not aware of any "bug"
>> which prevents an
>> enveloped-signature. At the moment, I say this
>> statement is plain wrong. I
>> am aware that the library is *SLOW* (because of the
>> current c14n
>> implementation). But you can sign *anything* which
>> you can sign using the
>> XML Signature specification.
>>
>> Maybe you could specify mere explicitly what you
>> refer to, i.e. what is the
>> input data, where do you put the signature to and
>> what are you going to
>> sign.
>>
>> Christian
>>
>> --On Dienstag, 26. November 2002 23:32 +1100 ebxml
>> ebxml
>> <eb...@yahoo.com.au> wrote:
>>
>> > i was going through the code of ebxml
>> > registry/repository implementation by Farrukh
>> Najmi of
>> > Sun Micro, in the source code it is written that
>> >
>> > "Due to the bug in the Apache security lib, it
>> does
>> > not allow us to sign whole message and make
>> > "enveloped-signature" transform."
>> >
>> > is it true that xmlsec suite doesnot support
>> enveloped
>> > signature
>>
>
> http://www.yahoo.promo.com.au/hint/ - Yahoo! Hint Dropper
> - Avoid getting hideous gifts this Christmas with Yahoo! Hint Dropper!
Re: enveloped signature support ?
Posted by ebxml ebxml <eb...@yahoo.com.au>.
i want to sign the entire xml document like below and
put the <ds:Signature> element
as child of SOAP:Envelope element
<SOAP:Envelope....>
...
<SOAP:Header....>
.....
.....
<ds:Signature>
.............
.............
</ds:Signature>
</SOAP:Header>
<SOAP:Body....>
......
......
</SOAP:Body>
</SOAP:Envelope>
--- Christian Geuer-Pollmann
<ge...@nue.et-inf.uni-siegen.de> wrote: >
> ?!? This sounds curious. I'm not aware of any "bug"
> which prevents an
> enveloped-signature. At the moment, I say this
> statement is plain wrong. I
> am aware that the library is *SLOW* (because of the
> current c14n
> implementation). But you can sign *anything* which
> you can sign using the
> XML Signature specification.
>
> Maybe you could specify mere explicitly what you
> refer to, i.e. what is the
> input data, where do you put the signature to and
> what are you going to
> sign.
>
> Christian
>
> --On Dienstag, 26. November 2002 23:32 +1100 ebxml
> ebxml
> <eb...@yahoo.com.au> wrote:
>
> > i was going through the code of ebxml
> > registry/repository implementation by Farrukh
> Najmi of
> > Sun Micro, in the source code it is written that
> >
> > "Due to the bug in the Apache security lib, it
> does
> > not allow us to sign whole message and make
> > "enveloped-signature" transform."
> >
> > is it true that xmlsec suite doesnot support
> enveloped
> > signature
>
http://www.yahoo.promo.com.au/hint/ - Yahoo! Hint Dropper
- Avoid getting hideous gifts this Christmas with Yahoo! Hint Dropper!
Re: enveloped signature support ?
Posted by Christian Geuer-Pollmann <ge...@nue.et-inf.uni-siegen.de>.
?!? This sounds curious. I'm not aware of any "bug" which prevents an
enveloped-signature. At the moment, I say this statement is plain wrong. I
am aware that the library is *SLOW* (because of the current c14n
implementation). But you can sign *anything* which you can sign using the
XML Signature specification.
Maybe you could specify mere explicitly what you refer to, i.e. what is the
input data, where do you put the signature to and what are you going to
sign.
Christian
--On Dienstag, 26. November 2002 23:32 +1100 ebxml ebxml
<eb...@yahoo.com.au> wrote:
> i was going through the code of ebxml
> registry/repository implementation by Farrukh Najmi of
> Sun Micro, in the source code it is written that
>
> "Due to the bug in the Apache security lib, it does
> not allow us to sign whole message and make
> "enveloped-signature" transform."
>
> is it true that xmlsec suite doesnot support enveloped
> signature