You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@santuario.apache.org by David Wall <da...@yozons.com> on 2011/03/16 17:56:15 UTC

SignatureMethod http://www.w3.org/2001/04/xmldsig-more#rsa-sha512

I am using Java 6 with its bundled XML Digital Signature library, and 
while I noted that there's a DigestMethod.SHA512, there is not 
SignatureMethod.RSA_SHA512, and I'm limited to the older 
SignatureMethod.RSA_SHA1.

Is this supported somehow that I don't understand?  Does the Apache 
Santuario support it in a standard way?  I want to be sure our digital 
signatures are easily portable to other validators especially.

Thanks,
David

Re: SignatureMethod http://www.w3.org/2001/04/xmldsig-more#rsa-sha512

Posted by David Wall <da...@yozons.com>.
Thanks, Sean.  That works great, including an upgrade to 4096-bit RSA 
keypairs.

David


On 3/16/2011 10:24 AM, Sean Mullan wrote:
> On 03/16/2011 12:56 PM, David Wall wrote:
>> I am using Java 6 with its bundled XML Digital Signature library, and
>> while I noted that there's a DigestMethod.SHA512, there is not
>> SignatureMethod.RSA_SHA512, and I'm limited to the older
>> SignatureMethod.RSA_SHA1.
>>
>> Is this supported somehow that I don't understand?
>
> Yes, it is supported, but you have to specify the URL String as there 
> is no constant defined in the API yet. Ex:
>
> "http://www.w3.org/2001/04/xmldsig-more#rsa-sha512"
>
> --Sean
>
>> Does the Apache
>> Santuario support it in a standard way? I want to be sure our digital
>> signatures are easily portable to other validators especially.
>>
>> Thanks,
>> David
>>
>

Re: SignatureMethod http://www.w3.org/2001/04/xmldsig-more#rsa-sha512

Posted by Sean Mullan <se...@oracle.com>.
On 03/16/2011 12:56 PM, David Wall wrote:
> I am using Java 6 with its bundled XML Digital Signature library, and
> while I noted that there's a DigestMethod.SHA512, there is not
> SignatureMethod.RSA_SHA512, and I'm limited to the older
> SignatureMethod.RSA_SHA1.
>
> Is this supported somehow that I don't understand?

Yes, it is supported, but you have to specify the URL String as there is 
no constant defined in the API yet. Ex:

"http://www.w3.org/2001/04/xmldsig-more#rsa-sha512"

--Sean

> Does the Apache
> Santuario support it in a standard way? I want to be sure our digital
> signatures are easily portable to other validators especially.
>
> Thanks,
> David
>