RE: XML Signature Questions

[Monica Lau <ml...@yahoo.com>]

Hi,
 
Thanks for all your responses -- that was really helpful!  The XSec library is just what I need.  I also found a very useful article on XML signatures:
 
http://www.devshed.com/c/a/Security/Safeguarding-the-Identity-and-Integrity-of-XML-Messages/1
 
Thanks again,
Monica


Matthias Niggemeier <m...@thias.de> wrote:
Hi,
Xerces itself has no support for signatures.
Have a look at http://xml.apache.org/security/
thats the lib you need.

Regards

Matthias

> -----Original Message-----
> From: Monica Lau [mailto:mllau2004@yahoo.com] 
> Sent: Wednesday, September 29, 2004 2:56 AM
> To: xerces-c-dev@xml.apache.org
> Subject: XML Signature Questions
> 
> 
> Hi,
> 
> I'm a newbie on XML signatures. I've been reading up on it, 
> and I have two questions below that I hope Xerces/XML folks 
> can help me out with:
> 
> (1) In the DOM creation, does Xerces support creating the 
> element? Is there special API to create this 
> element or is this treated as regular element creations using 
> the standard "createElement()" API?
> 
> (2) This is probably a stupid question, but I really need to 
> ask: Do we invoke the signature generation algorithms 
> manually (ie, DSA, SHA-1, etc.) to generate the signature or 
> does Xerces automatically invoke these algorithms in the DOM 
> creation? I don't believe Xerces or any other XML parser 
> automatically invoke the algorithms to generate the 
> signatures, right? The <... Algorithm> elements (ie, 
> ) are essentially used to 
> tell the recipient what algorithms were used to generate the 
> signature (hence, describing the data).
> 
> Thanks for your help in advance! Much appreciated.
> 
> Regards,
> Monica
> 
> 
> 
> _____ 
> 
> Do you Yahoo!?
> vote.yahoo.com - Register online to vote today!
> 


> ATTACHMENT part 2 application/x-pkcs7-signature name=smime.p7s

		
---------------------------------
Do you Yahoo!?
Yahoo! Mail - 50x more storage than other providers!