Smart card support

[Henri Muurimaa <he...@itmill.com>]

Hello all,

Sorry if this is a FAQ, but are there info on how to use external 
encryption processors (ie. smart cards) with the XML security package? 
When signing, an obvious problem is that XMLSecurity.sign() wants the 
private key, but most (all?) smart card implementations never give out 
the private key as they perform the encryption process themselves.

Any thougths?

-- 
Henri Muurimaa

Re: Smart card support

[Marek <ma...@wp.pl>]

Henri Muurimaa wrote:


> Sorry if this is a FAQ, but are there info on how to use external
> encryption processors (ie. smart cards) with the XML security package?
> When signing, an obvious problem is that XMLSecurity.sign() wants the
> private key, but most (all?) smart card implementations never give out
> the private key as they perform the encryption process themselves.

Hi,

The XMLSecurity class is final so you can not extend it. All you can do is
to extend the SignatureElementProxy class. Your class should have the
methods
similar to XMLSecurity class. You have to change the sign() method so that
it uses
the smart card. The signedInfoOctets must be signed on a smart card. That's
all ;-)

Good luck,

Marek