You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@santuario.apache.org by mu...@apache.org on 2008/02/25 23:13:26 UTC
svn commit: r631017 [9/9] - in /xml/security/trunk/data/org/w3c/www/interop:
./ c14n11/ c14n11/appendixa/ xmldsig/ xmldsig/c14n11/ xmldsig/dname/
xmldsig/dname/certs/ xmldsig/xpointer/
Added: xml/security/trunk/data/org/w3c/www/interop/xmldsig/xpointer/xpointer-6-IBM.xml
URL: http://svn.apache.org/viewvc/xml/security/trunk/data/org/w3c/www/interop/xmldsig/xpointer/xpointer-6-IBM.xml?rev=631017&view=auto
==============================================================================
--- xml/security/trunk/data/org/w3c/www/interop/xmldsig/xpointer/xpointer-6-IBM.xml (added)
+++ xml/security/trunk/data/org/w3c/www/interop/xmldsig/xpointer/xpointer-6-IBM.xml Mon Feb 25 14:12:52 2008
@@ -0,0 +1,21 @@
+<?xml version="1.0" encoding="UTF-8"?><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#"><ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2006/12/xml-c14n11"/><ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#hmac-sha1"/><ds:Reference URI="#e1ID"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2006/12/xml-c14n11#WithComments"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>QzSt7/7+s4+cJGNpj8pVU2IbjDw=</ds:DigestValue></ds:Reference><ds:Reference URI="#e2ID"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2006/12/xml-c14n11#WithComments"/></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>ILMqiWwMD4Z+UoK9eHzHySUV2J0=</ds:DigestValue></ds:Reference><ds:Reference URI="#e3ID"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2006/12/xml-c14n11#WithComments"/></ds:Transforms><ds:DigestMethod Algorithm="ht
tp://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>S3uolXuC41S7/Qk5E9BYRY1bkos=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>AYsqS/3gJ3jlrfa9PGJFZ387Dkg=</ds:SignatureValue><ds:Object><ietf:c14n11XmlPointerDoc1 xmlns:ietf="http://www.ietf.org" xmlns:w3c="http://www.w3.org">
+ <!-- This is a xml document for checking behaviour of tools with regards to comments when using scheme-based xpointers in the ds:Reference's URI attribute -->
+ <ietf:e1 xml:id="e1ID">
+ <!-- This is a comment for ietf:e1 element -->
+ <ietf:e11>
+ <!-- This is a comment for ietf:e11 element -->
+ <ietf:e111/>
+ </ietf:e11>
+ <ietf:e12 at="2">
+ <!-- This is a comment for ietf:e12 element -->
+ <ietf:e121/>
+ </ietf:e12>
+ </ietf:e1>
+ <ietf:e2 xml:id="e2ID">
+ <!-- This is a comment for ietf:e2 element -->
+ <ietf:e21/>
+ </ietf:e2>
+ <ietf:e3 xml:id="e3ID">
+ <ietf:e31 at="3"/>
+ </ietf:e3>
+</ietf:c14n11XmlPointerDoc1></ds:Object></ds:Signature>
\ No newline at end of file
Added: xml/security/trunk/data/org/w3c/www/interop/xmldsig/xpointer/xpointer-6-ORCL.xml
URL: http://svn.apache.org/viewvc/xml/security/trunk/data/org/w3c/www/interop/xmldsig/xpointer/xpointer-6-ORCL.xml?rev=631017&view=auto
==============================================================================
--- xml/security/trunk/data/org/w3c/www/interop/xmldsig/xpointer/xpointer-6-ORCL.xml (added)
+++ xml/security/trunk/data/org/w3c/www/interop/xmldsig/xpointer/xpointer-6-ORCL.xml Mon Feb 25 14:12:52 2008
@@ -0,0 +1,21 @@
+<?xml version="1.0" encoding="UTF-8"?><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2006/12/xml-c14n11"/><SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#hmac-sha1"/><Reference URI="#e1ID"><Transforms><Transform Algorithm="http://www.w3.org/2006/12/xml-c14n11#WithComments"/></Transforms><DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><DigestValue>3K+K4MbR2EW7l/ry59XockKqt4g=</DigestValue></Reference><Reference URI="#e2ID"><Transforms><Transform Algorithm="http://www.w3.org/2006/12/xml-c14n11#WithComments"/></Transforms><DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><DigestValue>hnKFjGFr/jwLCCTckZpaclOwe28=</DigestValue></Reference><Reference URI="#e3ID"><Transforms><Transform Algorithm="http://www.w3.org/2006/12/xml-c14n11#WithComments"/></Transforms><DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><DigestValue>RUUBiUeFf8uRqTlpCyutkXDqnJ
4=</DigestValue></Reference></SignedInfo><dsig:SignatureValue xmlns:dsig="http://www.w3.org/2000/09/xmldsig#">XzEJQ+whhHUYlqiCEt8XFxC8wpk=</dsig:SignatureValue><Object><ietf:c14n11XmlPointerDoc1 xmlns:ietf="http://www.ietf.org" xmlns:w3c="http://www.w3.org">
+ <!-- This is a xml document for checking behaviour of tools with regards to comments when using scheme-based xpointers in the ds:Reference's URI attribute -->
+ <ietf:e1 xml:id="e1ID">
+ <!-- This is a comment for ietf:e1 element -->
+ <ietf:e11>
+ <!-- This is a comment for ietf:e11 element -->
+ <ietf:e111/>
+ </ietf:e11>
+ <ietf:e12 at="2">
+ <!-- This is a comment for ietf:e12 element -->
+ <ietf:e121/>
+ </ietf:e12>
+ </ietf:e1>
+ <ietf:e2 xml:id="e2ID">
+ <!-- This is a comment for ietf:e2 element -->
+ <ietf:e21/>
+ </ietf:e2>
+ <ietf:e3 xml:id="e3ID">
+ <ietf:e31 at="3"/>
+ </ietf:e3>
+</ietf:c14n11XmlPointerDoc1></Object></Signature>
\ No newline at end of file
Added: xml/security/trunk/data/org/w3c/www/interop/xmldsig/xpointer/xpointer-6-SUN.xml
URL: http://svn.apache.org/viewvc/xml/security/trunk/data/org/w3c/www/interop/xmldsig/xpointer/xpointer-6-SUN.xml?rev=631017&view=auto
==============================================================================
--- xml/security/trunk/data/org/w3c/www/interop/xmldsig/xpointer/xpointer-6-SUN.xml (added)
+++ xml/security/trunk/data/org/w3c/www/interop/xmldsig/xpointer/xpointer-6-SUN.xml Mon Feb 25 14:12:52 2008
@@ -0,0 +1,21 @@
+<?xml version="1.0" encoding="UTF-8"?><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2006/12/xml-c14n11"/><SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#hmac-sha1"/><Reference URI="#e1ID"><Transforms><Transform Algorithm="http://www.w3.org/2006/12/xml-c14n11#WithComments"/></Transforms><DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><DigestValue>3K+K4MbR2EW7l/ry59XockKqt4g=</DigestValue></Reference><Reference URI="#e2ID"><Transforms><Transform Algorithm="http://www.w3.org/2006/12/xml-c14n11#WithComments"/></Transforms><DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><DigestValue>hnKFjGFr/jwLCCTckZpaclOwe28=</DigestValue></Reference><Reference URI="#e3ID"><Transforms><Transform Algorithm="http://www.w3.org/2006/12/xml-c14n11#WithComments"/></Transforms><DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><DigestValue>RUUBiUeFf8uRqTlpCyutkXDqnJ
4=</DigestValue></Reference></SignedInfo><SignatureValue>XzEJQ+whhHUYlqiCEt8XFxC8wpk=</SignatureValue><Object><ietf:c14n11XmlPointerDoc1 xmlns:ietf="http://www.ietf.org" xmlns:w3c="http://www.w3.org">
+ <!-- This is a xml document for checking behaviour of tools with regards to comments when using scheme-based xpointers in the ds:Reference's URI attribute -->
+ <ietf:e1 xml:id="e1ID">
+ <!-- This is a comment for ietf:e1 element -->
+ <ietf:e11>
+ <!-- This is a comment for ietf:e11 element -->
+ <ietf:e111/>
+ </ietf:e11>
+ <ietf:e12 at="2">
+ <!-- This is a comment for ietf:e12 element -->
+ <ietf:e121/>
+ </ietf:e12>
+ </ietf:e1>
+ <ietf:e2 xml:id="e2ID">
+ <!-- This is a comment for ietf:e2 element -->
+ <ietf:e21/>
+ </ietf:e2>
+ <ietf:e3 xml:id="e3ID">
+ <ietf:e31 at="3"/>
+ </ietf:e3>
+</ietf:c14n11XmlPointerDoc1></Object></Signature>
\ No newline at end of file
Added: xml/security/trunk/data/org/w3c/www/interop/xmldsig/xpointer/xpointer-6-UPC.xml
URL: http://svn.apache.org/viewvc/xml/security/trunk/data/org/w3c/www/interop/xmldsig/xpointer/xpointer-6-UPC.xml?rev=631017&view=auto
==============================================================================
--- xml/security/trunk/data/org/w3c/www/interop/xmldsig/xpointer/xpointer-6-UPC.xml (added)
+++ xml/security/trunk/data/org/w3c/www/interop/xmldsig/xpointer/xpointer-6-UPC.xml Mon Feb 25 14:12:52 2008
@@ -0,0 +1,21 @@
+<Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2006/12/xml-c14n11" /><SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#hmac-sha1" /><Reference URI="#e1ID"><Transforms><Transform Algorithm="http://www.w3.org/2006/12/xml-c14n11#WithComments" /></Transforms><DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1" /><DigestValue>3K+K4MbR2EW7l/ry59XockKqt4g=</DigestValue></Reference><Reference URI="#e2ID"><Transforms><Transform Algorithm="http://www.w3.org/2006/12/xml-c14n11#WithComments" /></Transforms><DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1" /><DigestValue>hnKFjGFr/jwLCCTckZpaclOwe28=</DigestValue></Reference><Reference URI="#e3ID"><Transforms><Transform Algorithm="http://www.w3.org/2006/12/xml-c14n11#WithComments" /></Transforms><DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1" /><DigestValue>RUUBiUeFf8uRqTlpCyutkXDqnJ4=</DigestValue></Reference></
SignedInfo><SignatureValue>XzEJQ+whhHUYlqiCEt8XFxC8wpk=</SignatureValue><Object><ietf:c14n11XmlPointerDoc1 xmlns:ietf="http://www.ietf.org" xmlns:w3c="http://www.w3.org">
+ <!-- This is a xml document for checking behaviour of tools with regards to comments when using scheme-based xpointers in the ds:Reference's URI attribute -->
+ <ietf:e1 xml:id="e1ID">
+ <!-- This is a comment for ietf:e1 element -->
+ <ietf:e11>
+ <!-- This is a comment for ietf:e11 element -->
+ <ietf:e111 />
+ </ietf:e11>
+ <ietf:e12 at="2">
+ <!-- This is a comment for ietf:e12 element -->
+ <ietf:e121 />
+ </ietf:e12>
+ </ietf:e1>
+ <ietf:e2 xml:id="e2ID">
+ <!-- This is a comment for ietf:e2 element -->
+ <ietf:e21 />
+ </ietf:e2>
+ <ietf:e3 xml:id="e3ID">
+ <ietf:e31 at="3" />
+ </ietf:e3>
+</ietf:c14n11XmlPointerDoc1></Object></Signature>
\ No newline at end of file
Added: xml/security/trunk/data/org/w3c/www/interop/xmldsig/xpointer/xpointer-6-firsturi.pointervalue
URL: http://svn.apache.org/viewvc/xml/security/trunk/data/org/w3c/www/interop/xmldsig/xpointer/xpointer-6-firsturi.pointervalue?rev=631017&view=auto
==============================================================================
--- xml/security/trunk/data/org/w3c/www/interop/xmldsig/xpointer/xpointer-6-firsturi.pointervalue (added)
+++ xml/security/trunk/data/org/w3c/www/interop/xmldsig/xpointer/xpointer-6-firsturi.pointervalue Mon Feb 25 14:12:52 2008
@@ -0,0 +1 @@
+#e1ID
\ No newline at end of file
Added: xml/security/trunk/data/org/w3c/www/interop/xmldsig/xpointer/xpointer-6-seconduri.pointervalue
URL: http://svn.apache.org/viewvc/xml/security/trunk/data/org/w3c/www/interop/xmldsig/xpointer/xpointer-6-seconduri.pointervalue?rev=631017&view=auto
==============================================================================
--- xml/security/trunk/data/org/w3c/www/interop/xmldsig/xpointer/xpointer-6-seconduri.pointervalue (added)
+++ xml/security/trunk/data/org/w3c/www/interop/xmldsig/xpointer/xpointer-6-seconduri.pointervalue Mon Feb 25 14:12:52 2008
@@ -0,0 +1 @@
+#e2ID
\ No newline at end of file
Added: xml/security/trunk/data/org/w3c/www/interop/xmldsig/xpointer/xpointer-6-template.xml
URL: http://svn.apache.org/viewvc/xml/security/trunk/data/org/w3c/www/interop/xmldsig/xpointer/xpointer-6-template.xml?rev=631017&view=auto
==============================================================================
--- xml/security/trunk/data/org/w3c/www/interop/xmldsig/xpointer/xpointer-6-template.xml (added)
+++ xml/security/trunk/data/org/w3c/www/interop/xmldsig/xpointer/xpointer-6-template.xml Mon Feb 25 14:12:52 2008
@@ -0,0 +1,3 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!-- enveloping input.xml -->
+<Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2006/12/xml-c14n11"/><SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#hmac-sha1"/><Reference URI="#e1ID"><Transforms><Transform Algorithm="http://www.w3.org/2006/12/xml-c14n11#WithComments"/></Transforms><DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><DigestValue></DigestValue></Reference><Reference URI="#e2ID"><Transforms><Transform Algorithm="http://www.w3.org/2006/12/xml-c14n11#WithComments"/></Transforms><DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><DigestValue></DigestValue></Reference><Reference URI="#e3ID"><Transforms><Transform Algorithm="http://www.w3.org/2006/12/xml-c14n11#WithComments"/></Transforms><DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><DigestValue></DigestValue></Reference></SignedInfo><SignatureValue></SignatureValue><Object></Object></Signature>
\ No newline at end of file
Added: xml/security/trunk/data/org/w3c/www/interop/xmldsig/xpointer/xpointer-6-thirduri.pointervalue
URL: http://svn.apache.org/viewvc/xml/security/trunk/data/org/w3c/www/interop/xmldsig/xpointer/xpointer-6-thirduri.pointervalue?rev=631017&view=auto
==============================================================================
--- xml/security/trunk/data/org/w3c/www/interop/xmldsig/xpointer/xpointer-6-thirduri.pointervalue (added)
+++ xml/security/trunk/data/org/w3c/www/interop/xmldsig/xpointer/xpointer-6-thirduri.pointervalue Mon Feb 25 14:12:52 2008
@@ -0,0 +1 @@
+#e3ID
\ No newline at end of file
Added: xml/security/trunk/data/org/w3c/www/interop/xmldsig/xpointer/xpointer-optional-1.pointervalue
URL: http://svn.apache.org/viewvc/xml/security/trunk/data/org/w3c/www/interop/xmldsig/xpointer/xpointer-optional-1.pointervalue?rev=631017&view=auto
==============================================================================
--- xml/security/trunk/data/org/w3c/www/interop/xmldsig/xpointer/xpointer-optional-1.pointervalue (added)
+++ xml/security/trunk/data/org/w3c/www/interop/xmldsig/xpointer/xpointer-optional-1.pointervalue Mon Feb 25 14:12:52 2008
@@ -0,0 +1 @@
+#e3ID
\ No newline at end of file
Added: xml/security/trunk/data/org/w3c/www/interop/xmldsig/xpointer/xpointerscheme-1-IAIK-ref0.derefURI
URL: http://svn.apache.org/viewvc/xml/security/trunk/data/org/w3c/www/interop/xmldsig/xpointer/xpointerscheme-1-IAIK-ref0.derefURI?rev=631017&view=auto
==============================================================================
--- xml/security/trunk/data/org/w3c/www/interop/xmldsig/xpointer/xpointerscheme-1-IAIK-ref0.derefURI (added)
+++ xml/security/trunk/data/org/w3c/www/interop/xmldsig/xpointer/xpointerscheme-1-IAIK-ref0.derefURI Mon Feb 25 14:12:52 2008
@@ -0,0 +1,23 @@
+------------------------------ NodeSetData -------------------------------
+Node 1 : [ietf:e12: null]
+Node 2 : at="2"
+Node 3 : xmlns="http://www.w3.org/2000/09/xmldsig#"
+Node 4 : xmlns:ietf="http://www.ietf.org"
+Node 5 : xmlns:w3c="http://www.w3.org"
+Node 6 : [#text:
+ ]
+Node 7 : [#comment: This is a comment for ietf:e12 element ]
+Node 8 : [#text:
+ ]
+Node 9 : [ietf:e121: null]
+Node 10 : xmlns="http://www.w3.org/2000/09/xmldsig#"
+Node 11 : xmlns:ietf="http://www.ietf.org"
+Node 12 : xmlns:w3c="http://www.w3.org"
+Node 13 : [#text:
+ ]
+Node 14 : [ietf:e31: null]
+Node 15 : at="3"
+Node 16 : xmlns="http://www.w3.org/2000/09/xmldsig#"
+Node 17 : xmlns:ietf="http://www.ietf.org"
+Node 18 : xmlns:w3c="http://www.w3.org"
+--------------------------------------------------------------------------
Added: xml/security/trunk/data/org/w3c/www/interop/xmldsig/xpointer/xpointerscheme-1-IAIK-ref0.digestinput
URL: http://svn.apache.org/viewvc/xml/security/trunk/data/org/w3c/www/interop/xmldsig/xpointer/xpointerscheme-1-IAIK-ref0.digestinput?rev=631017&view=auto
==============================================================================
--- xml/security/trunk/data/org/w3c/www/interop/xmldsig/xpointer/xpointerscheme-1-IAIK-ref0.digestinput (added)
+++ xml/security/trunk/data/org/w3c/www/interop/xmldsig/xpointer/xpointerscheme-1-IAIK-ref0.digestinput Mon Feb 25 14:12:52 2008
@@ -0,0 +1,4 @@
+<ietf:e12 xmlns="http://www.w3.org/2000/09/xmldsig#" xmlns:ietf="http://www.ietf.org" xmlns:w3c="http://www.w3.org" at="2">
+ <!-- This is a comment for ietf:e12 element -->
+ <ietf:e121></ietf:e121>
+ </ietf:e12><ietf:e31 xmlns="http://www.w3.org/2000/09/xmldsig#" xmlns:ietf="http://www.ietf.org" xmlns:w3c="http://www.w3.org" at="3"></ietf:e31>
\ No newline at end of file
Added: xml/security/trunk/data/org/w3c/www/interop/xmldsig/xpointer/xpointerscheme-1-IAIK-ref1.derefURI
URL: http://svn.apache.org/viewvc/xml/security/trunk/data/org/w3c/www/interop/xmldsig/xpointer/xpointerscheme-1-IAIK-ref1.derefURI?rev=631017&view=auto
==============================================================================
--- xml/security/trunk/data/org/w3c/www/interop/xmldsig/xpointer/xpointerscheme-1-IAIK-ref1.derefURI (added)
+++ xml/security/trunk/data/org/w3c/www/interop/xmldsig/xpointer/xpointerscheme-1-IAIK-ref1.derefURI Mon Feb 25 14:12:52 2008
@@ -0,0 +1,18 @@
+------------------------------ NodeSetData -------------------------------
+Node 1 : [ietf:e12: null]
+Node 2 : at="2"
+Node 3 : xmlns="http://www.w3.org/2000/09/xmldsig#"
+Node 4 : xmlns:ietf="http://www.ietf.org"
+Node 5 : xmlns:w3c="http://www.w3.org"
+Node 6 : [#text:
+ ]
+Node 7 : [#comment: This is a comment for ietf:e12 element ]
+Node 8 : [#text:
+ ]
+Node 9 : [ietf:e121: null]
+Node 10 : xmlns="http://www.w3.org/2000/09/xmldsig#"
+Node 11 : xmlns:ietf="http://www.ietf.org"
+Node 12 : xmlns:w3c="http://www.w3.org"
+Node 13 : [#text:
+ ]
+--------------------------------------------------------------------------
Added: xml/security/trunk/data/org/w3c/www/interop/xmldsig/xpointer/xpointerscheme-1-IAIK-ref1.digestinput
URL: http://svn.apache.org/viewvc/xml/security/trunk/data/org/w3c/www/interop/xmldsig/xpointer/xpointerscheme-1-IAIK-ref1.digestinput?rev=631017&view=auto
==============================================================================
--- xml/security/trunk/data/org/w3c/www/interop/xmldsig/xpointer/xpointerscheme-1-IAIK-ref1.digestinput (added)
+++ xml/security/trunk/data/org/w3c/www/interop/xmldsig/xpointer/xpointerscheme-1-IAIK-ref1.digestinput Mon Feb 25 14:12:52 2008
@@ -0,0 +1,4 @@
+<ietf:e12 xmlns="http://www.w3.org/2000/09/xmldsig#" xmlns:ietf="http://www.ietf.org" xmlns:w3c="http://www.w3.org" at="2">
+ <!-- This is a comment for ietf:e12 element -->
+ <ietf:e121></ietf:e121>
+ </ietf:e12>
\ No newline at end of file
Added: xml/security/trunk/data/org/w3c/www/interop/xmldsig/xpointer/xpointerscheme-1-IAIK.xml
URL: http://svn.apache.org/viewvc/xml/security/trunk/data/org/w3c/www/interop/xmldsig/xpointer/xpointerscheme-1-IAIK.xml?rev=631017&view=auto
==============================================================================
--- xml/security/trunk/data/org/w3c/www/interop/xmldsig/xpointer/xpointerscheme-1-IAIK.xml (added)
+++ xml/security/trunk/data/org/w3c/www/interop/xmldsig/xpointer/xpointerscheme-1-IAIK.xml Mon Feb 25 14:12:52 2008
@@ -0,0 +1,22 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2006/12/xml-c14n11"/><SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#hmac-sha1"/><Reference URI="#xpointer(//*%5B@at%20and%20@at!='azAZ09-._~!$&()*+,;=/?:@'%5D)"><Transforms><Transform Algorithm="http://www.w3.org/2006/12/xml-c14n11#WithComments"/></Transforms><DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><DigestValue>AOuxEKTqVNLNvLkAFFVd1QFYr7s=</DigestValue></Reference><Reference URI="#xpointer(%2F%2F*%5B%40at%3D%272%27%5D)"><Transforms><Transform Algorithm="http://www.w3.org/2006/12/xml-c14n11#WithComments"/></Transforms><DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><DigestValue>YWc1VxKiDWAI7HQBCcHSHsP0E5o=</DigestValue></Reference></SignedInfo><SignatureValue>4afkf6kC6+FSOrBchj8mRUuCNNo=</SignatureValue><Object><ietf:c14n11XmlPointerDoc1 xmlns="http://www.w3.org/2000/09/xmldsig#" xmlns:ietf="http:
//www.ietf.org" xmlns:w3c="http://www.w3.org">
+ <!-- This is a xml document for checking behaviour of tools with regards to comments when using scheme-based xpointers in the ds:Reference's URI attribute -->
+ <ietf:e1 xml:id="e1ID" xmlns="http://www.w3.org/2000/09/xmldsig#" xmlns:ietf="http://www.ietf.org" xmlns:w3c="http://www.w3.org">
+ <!-- This is a comment for ietf:e1 element -->
+ <ietf:e11 xmlns="http://www.w3.org/2000/09/xmldsig#" xmlns:ietf="http://www.ietf.org" xmlns:w3c="http://www.w3.org">
+ <!-- This is a comment for ietf:e11 element -->
+ <ietf:e111 xmlns="http://www.w3.org/2000/09/xmldsig#" xmlns:ietf="http://www.ietf.org" xmlns:w3c="http://www.w3.org"/>
+ </ietf:e11>
+ <ietf:e12 at="2" xmlns="http://www.w3.org/2000/09/xmldsig#" xmlns:ietf="http://www.ietf.org" xmlns:w3c="http://www.w3.org">
+ <!-- This is a comment for ietf:e12 element -->
+ <ietf:e121 xmlns="http://www.w3.org/2000/09/xmldsig#" xmlns:ietf="http://www.ietf.org" xmlns:w3c="http://www.w3.org"/>
+ </ietf:e12>
+ </ietf:e1>
+ <ietf:e2 xml:id="e2ID" xmlns="http://www.w3.org/2000/09/xmldsig#" xmlns:ietf="http://www.ietf.org" xmlns:w3c="http://www.w3.org">
+ <!-- This is a comment for ietf:e2 element -->
+ <ietf:e21 xmlns="http://www.w3.org/2000/09/xmldsig#" xmlns:ietf="http://www.ietf.org" xmlns:w3c="http://www.w3.org"/>
+ </ietf:e2>
+ <ietf:e3 xml:id="e3ID" xmlns="http://www.w3.org/2000/09/xmldsig#" xmlns:ietf="http://www.ietf.org" xmlns:w3c="http://www.w3.org">
+ <ietf:e31 at="3" xmlns="http://www.w3.org/2000/09/xmldsig#" xmlns:ietf="http://www.ietf.org" xmlns:w3c="http://www.w3.org"/>
+ </ietf:e3>
+</ietf:c14n11XmlPointerDoc1></Object></Signature>
\ No newline at end of file
Added: xml/security/trunk/data/org/w3c/www/interop/xmldsig/xpointer/xpointerscheme-1-template.xml
URL: http://svn.apache.org/viewvc/xml/security/trunk/data/org/w3c/www/interop/xmldsig/xpointer/xpointerscheme-1-template.xml?rev=631017&view=auto
==============================================================================
--- xml/security/trunk/data/org/w3c/www/interop/xmldsig/xpointer/xpointerscheme-1-template.xml (added)
+++ xml/security/trunk/data/org/w3c/www/interop/xmldsig/xpointer/xpointerscheme-1-template.xml Mon Feb 25 14:12:52 2008
@@ -0,0 +1,3 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!-- enveloping input.xml -->
+<Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2006/12/xml-c14n11"/><SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#hmac-sha1"/><Reference URI="#xpointer(//*%5B@at%20and%20@at!='azAZ09-._~!$&()*+,;=/?:@'%5D)"><Transforms><Transform Algorithm="http://www.w3.org/2006/12/xml-c14n11#WithComments"/></Transforms><DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><DigestValue></DigestValue></Reference><Reference URI="#xpointer(%2F%2F*%5B%40at%3D%272%27%5D)"><Transforms><Transform Algorithm="http://www.w3.org/2006/12/xml-c14n11#WithComments"/></Transforms><DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><DigestValue></DigestValue></Reference></SignedInfo><SignatureValue></SignatureValue><Object></Object></Signature>
\ No newline at end of file
Added: xml/security/trunk/data/org/w3c/www/interop/xmldsig/xpointer/xpointerscheme-2-negative-template.xml
URL: http://svn.apache.org/viewvc/xml/security/trunk/data/org/w3c/www/interop/xmldsig/xpointer/xpointerscheme-2-negative-template.xml?rev=631017&view=auto
==============================================================================
--- xml/security/trunk/data/org/w3c/www/interop/xmldsig/xpointer/xpointerscheme-2-negative-template.xml (added)
+++ xml/security/trunk/data/org/w3c/www/interop/xmldsig/xpointer/xpointerscheme-2-negative-template.xml Mon Feb 25 14:12:52 2008
@@ -0,0 +1,3 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!-- enveloping input.xml -->
+<Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2006/12/xml-c14n11"/><SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#hmac-sha1"/><Reference URI="#xpointer(//*[@at%20and%20@at!='#[]?-._~!$&()*+,;=@:'])"><Transforms><Transform Algorithm="http://www.w3.org/2006/12/xml-c14n11#WithComments"/></Transforms><DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><DigestValue></DigestValue></Reference><Reference URI="#xpointer(%2F%2F*%5B%40at%3D%272%27%5D)"><Transforms><Transform Algorithm="http://www.w3.org/2006/12/xml-c14n11#WithComments"/></Transforms><DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><DigestValue></DigestValue></Reference><Reference URI="#xpointer(//*[@at])"><Transforms><Transform Algorithm="http://www.w3.org/2006/12/xml-c14n11#WithComments"/></Transforms><DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><DigestValue></DigestValue></Re
ference></SignedInfo><SignatureValue></SignatureValue><Object></Object></Signature>
\ No newline at end of file
Added: xml/security/trunk/data/org/w3c/www/interop/xmldsig/xpointer/xpointerscheme-Readme-RFC2396_RFC2732-diff-RFC3986.txt
URL: http://svn.apache.org/viewvc/xml/security/trunk/data/org/w3c/www/interop/xmldsig/xpointer/xpointerscheme-Readme-RFC2396_RFC2732-diff-RFC3986.txt?rev=631017&view=auto
==============================================================================
--- xml/security/trunk/data/org/w3c/www/interop/xmldsig/xpointer/xpointerscheme-Readme-RFC2396_RFC2732-diff-RFC3986.txt (added)
+++ xml/security/trunk/data/org/w3c/www/interop/xmldsig/xpointer/xpointerscheme-Readme-RFC2396_RFC2732-diff-RFC3986.txt Mon Feb 25 14:12:52 2008
@@ -0,0 +1,185 @@
+Discussion on RFC 2396 + RFC 2732 vs. RFC 3986.
+
+======================================================================
+XMLDSIG 2002 4.3.3.1
+======================================================================
+> The URI attribute identifies a data object using a URI-Reference, as
+> specified by RFC2396 [URI]. The set of allowed characters for URI
+> attributes is the same as for XML, namely [Unicode]. However, some
+> Unicode characters are disallowed from URI references including all
+> non-ASCII characters and the excluded characters listed in RFC2396
+> [URI, section 2.4]. However, the number sign (#), percent sign (%),
+> and square bracket characters re-allowed in RFC 2732 [URI-Literal]
+> are permitted.
+
+
+RFC 2396
+========
+
+fragment = *uric
+uric = reserved | unreserved | escaped
+reserved = ";" | "/" | "?" | ":" | "@" | "&" | "=" | "+" |
+ "$" | ","
+unreserved = alphanum | mark
+mark = "-" | "_" | "." | "!" | "~" | "*" | "'" |
+ "(" | ")"
+
+
+-->
+
+fragment = *(
+ ";" | "/" | "?" | ":" | "@" | "&" | "=" | "+" |
+ "$" | ","
+ alphanum |
+ "-" | "_" | "." | "!" | "~" | "*" | "'" |
+ "(" | ")"
+ )
+
+-->
+
+a..zA..Z0..9-._~!$&'()*+,;=/?:@
+
+
+XMLDSIG 2002 allowed square brackets([])
as in RFC 2732.
+
+
+RFC 2732
+========
+
+> This document incudes an update to the generic syntax for Uniform
+> Resource Identifiers defined in RFC 2396 [URL]. It defines a syntax
+> for IPv6 addresses and allows the use of "[" and "]" within a URI
+> explicitly for this reserved purpose.
+
+ reserved = ";" | "/" | "?" | ":" | "@" | "&" | "=" | "+" |
+ "$" | "," | "[" | "]"
+
+-->
+
+fragment = *(
+ ";" | "/" | "?" | ":" | "@" | "&" | "=" | "+" |
+ "$" | "," | "[" | "]"
+ alphanum |
+ "-" | "_" | "." | "!" | "~" | "*" | "'" |
+ "(" | ")"
+ )
+
+-->
+
+a..zA..Z0..9-._~!$&'()*+,;=/?:@[]
+
+
+Although the grammar was changed in RFC 2732 in a way that allowed
+"[" | "]" in the fragment the prose in RFC 2732 is saying:
+
+> It defines a syntax
+> for IPv6 addresses and allows the use of "[" and "]" within a URI
+> explicitly for this reserved purpose.
+
+
+That indicates that this overrules the grammar wich is also consistent
+with the current RFC 3986 grammar.
+
+
+XMLDSIG 2002 allowed (#), percent sign (%)
+===========================================
+Here the only valid interpretation is is that (#), percent sign (%)
+are allowed (in their non-percent encoded form) to sperate the fragment
+and to initiate a percent encoding
respectively
+because RFC 2396
+ says
+the following:
+
+> The character "#" is excluded
+> because it is used to delimit a URI from a fragment identifier in URI
+> references (Section 4). The percent character "%" is excluded because
+> it is used for the encoding of escaped characters.
+
+Wich is also consistent with RFC 3986 and the latest draft XMLDSIG 2007.
+
+
++========+ The interpretation above makes the mention of number sign (#)
+| | and percent sign (%) in 4.3.3.1 redundant.
+| BEWARE | Some implementations may have wrongly interpreted 4.3.3.1
+| | to allow number sign (#) and percent sign (%) in in their
+| | non-percent encoded form in the fragment, wich however
+| | contradicts the grammar in RFC 2396 and the prose in
++========+ RFC 2732 and is inconsistent with RFC 3986.
+
+If such a misinterpretation caused the production of signatures
+containing an xpointer like the following
+
+#xpointer(//*[@authenticate='true']) (cf. EBICS-Standard in Germany)
+
+it does not comply to the grammar in RFC 3986 and the interpretation
+of RFC 2732 above does not allow square brackets in the fragment.
+
+Correct would be the following
+
+#xpointer(//*%5B@authenticate='true'%5D)
+
+
+As however square brackets wrongly appear to be allowed in fragments
+according to RFC 2732 grammar, but prohibited to the prose in RFC 2732
+we may want to allow implementations to verify such signatures and
+advocate against the creation of new signatures that fail to escape the
+gen-delims characters in RFC 3986 (unless they really delimit the
+components of the URI).
+
+
+The text in the current draft correctly follows RFC 3986, but maybe we
+would like to add a note pointing to this mail.
+
+======================================================================
+XMLDSIG 2007 4.3.3.1
+======================================================================
+
+RFC 3986
+
+fragment = *( pchar / "/" / "?" )
+pchar = unreserved / pct-encoded / sub-delims / ":" / "@"
+unreserved = ALPHA / DIGIT / "-" / "." / "_" / "~"
+sub-delims = "!" / "$" / "&" / "'" / "(" / ")"
+ / "*" / "+" / "," / ";" / "="
+
+-->
+
+fragment = *( pct-encoded / ALPHA / DIGIT / "-" / "." / "_" / "~"
+ / "!" / "$" / "&" / "'" / "(" / ")"
+ / "*" / "+" / "," / ";" / "="
+ / "/" / "?" )
+
+-->
+
+a..zA..Z0..9-._~!$&'()*+,;=/?:@
+
+
+==>
+
+The allowed characters are equal usinf the interpretation in this mail.
+
+RFC 2396 fragment chars are : a..zA..Z0..9-._~!$&'()*+,;=/?:@
+RFC 3986 fragment chars are : a..zA..Z0..9-._~!$&'()*+,;=/?:@
+
+
+regards
+
+Konrad Lanz
+
+P.S: Non percent encoded unicode caracters that can live in URI
+references inside XML are disjoint from the set of characters in
+RFC 2396 and RFC 3986 grammar and hence do not need to be discussed
+here further.
+
+--
+Konrad Lanz, IAIK/SIC - Graz University of Technology
+Inffeldgasse 16a, 8010 Graz, Austria
+Tel: +43 316 873 5547
+Fax: +43 316 873 5520
+https://www.iaik.tugraz.at/aboutus/people/lanz
+http://jce.iaik.tugraz.at
+
+Certificate chain (including the EuroPKI root certificate):
+https://europki.iaik.at/ca/europki-at/cert_download.htm
+
+