You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@santuario.apache.org by bu...@apache.org on 2006/10/05 15:29:00 UTC
DO NOT REPLY [Bug 40684] New: - Allow relaxing namespace requirement for signature element
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG�
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://issues.apache.org/bugzilla/show_bug.cgi?id=40684>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND�
INSERTED IN THE BUG DATABASE.
http://issues.apache.org/bugzilla/show_bug.cgi?id=40684
Summary: Allow relaxing namespace requirement for signature
element
Product: Security
Version: Java 1.3
Platform: Other
OS/Version: other
Status: NEW
Severity: enhancement
Priority: P3
Component: Signature
AssignedTo: security-dev@xml.apache.org
ReportedBy: bob@directdocs.com
Given the following XML
<TEST>
<SUB_TEST>test</SUBTEST>
<Signature Id="_1">
�
</Signature>
</TEST>
signature verification fails because it is missing
xmlns="http://www.w3.org/2000/09/xmldsig#"
which is enforced by the classes ElementProxy and SignatureElementProxy:
public abstract class ElementProxy {
...
public void guaranteeThatElementInCorrectSpace()
throws XMLSecurityException {
{
String localnameSHOULDBE = this.getBaseLocalName();
String namespaceSHOULDBE = this.getBaseNamespace();
...
}
}
public abstract class SignatureElementProxy {
...
public String getBaseNamespace()
{
return Constants.SignatureSpecNS;
}
...
}
}
--
Configure bugmail: http://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
DO NOT REPLY [Bug 40684] - Allow relaxing namespace requirement for signature element
Posted by bu...@apache.org.
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG�
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://issues.apache.org/bugzilla/show_bug.cgi?id=40684>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND�
INSERTED IN THE BUG DATABASE.
http://issues.apache.org/bugzilla/show_bug.cgi?id=40684
sean.mullan@sun.com changed:
What |Removed |Added
----------------------------------------------------------------------------
Status|NEW |RESOLVED
Resolution| |WONTFIX
------- Additional Comments From sean.mullan@sun.com 2007-10-05 07:01 -------
Closing this bug as WONTFIX.
Relaxing this requirement would make the implementation non-compliant with the
XML Signature Recommendation.
--
Configure bugmail: http://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.