[jira] [Resolved] (SANTUARIO-261) incorrect digest of document that mixes enveloping and detached signatures

["sean.mullan (JIRA)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/SANTUARIO-261?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

sean.mullan resolved SANTUARIO-261.
-----------------------------------

    Resolution: Not A Problem

This is not a bug in the Santuario Java library. However, it is a bug in JDK 6, because it bundles an older version of Santuario and it does not have the bug fix. The bug has also been fixed in JDK 7. This is probably not a serious enough issue to justify fixing it in JDK 6, thus I encourage you to migrate to JDK 7 or use a more recent Apache Santuario library with JDK 6 - see my blog entry for how to do that: http://blogs.oracle.com/mullan/entry/using_more_recent_apache_xml

> incorrect digest of document that mixes enveloping and detached signatures
> --------------------------------------------------------------------------
>
>                 Key: SANTUARIO-261
>                 URL: https://issues.apache.org/jira/browse/SANTUARIO-261
>             Project: Santuario
>          Issue Type: Bug
>          Components: Java
>         Environment: Tested in Windows, with the most recent Java version.
>            Reporter: Luis Bernardo
>            Assignee: sean.mullan
>
> The issue is described here: http://forums.oracle.com/forums/thread.jspa?threadID=2148599&tstart=0
> You can run the sample in the link above and then run the Validate program over the result.
> The problem is due to the fact that the digest calculated for the object is incorrect as the logging seems to indicate:
> FINER: Pre-digested input:
> Jan 5, 2011 11:42:52 PM org.jcp.xml.dsig.internal.DigesterOutputStream write
> FINER: <Object xmlns="http://www.w3.org/2000/09/xmldsig#" Id="object"><Manifest><Reference URI="http://www.w3.org/TR/xml-stylesheet"><DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"></DigestMethod><DigestValue></DigestValue></Reference></Manifest></Object>
> The digest element of the reference is missing from the object. Hence the digest of the object will be incorrect and fail validation. However in the final document the the digest of the reference is present and is correct.

--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira