You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@santuario.apache.org by bu...@apache.org on 2005/09/13 15:54:23 UTC
DO NOT REPLY [Bug 36640] New: -
Signature verification ignores the inclusive namespaces parameter of a excl c14n ds:CanonicalizationMethod
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG�
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://issues.apache.org/bugzilla/show_bug.cgi?id=36640>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND�
INSERTED IN THE BUG DATABASE.
http://issues.apache.org/bugzilla/show_bug.cgi?id=36640
Summary: Signature verification ignores the inclusive namespaces
parameter of a excl c14n ds:CanonicalizationMethod
Product: Security
Version: Java 1.2.1
Platform: All
OS/Version: All
Status: NEW
Severity: normal
Priority: P4
Component: Signature
AssignedTo: security-dev@xml.apache.org
ReportedBy: vmahajan@amberpoint.com
If a signature containing a ds:CanonicalizationMethod like the following is
passed to the xml-security library, the inclusive namespaces parameter is
ignored.
<ds:CanonicalizationMethod
Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#">
<InclusiveNamespaces
xmlns="http://www.w3.org/2001/10/xml-exc-c14n#"
PrefixList="enc ns0 xsd xsi"/>
</ds:CanonicalizationMethod>
Suggested patch has been attached.
--
Configure bugmail: http://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.