Re: keeping cert inside ldap

2004-02-16 Thread John Moore
I to would be interested in other peoples opinions. We are looking at doing something similiar (although for non-technical reasons we propose to use an SQL database to hold the certificates instead of LDAP) Our current thoughts are as follows: In our application, we will only deal with "known

keeping cert inside ldap

2004-02-16 Thread trebor iksrazal
We have successfully deployed an app with apache xml-security/java and axis, using xml signatures and encryption. Thanks! We are adding LDAP into the architecture to support more users. The goal is easier cert management, saving bandwidth and ACL. We understand somewhat how to do a truststore via

Re: Java xmlsec still contains base64 bug

2004-02-16 Thread Davanum Srinivas
+1 (non-binding) :) --- Axl Mattheus <[EMAIL PROTECTED]> wrote: > Erwin van der Koogh wrote: > > >> With the talk of a release, I'd note that the Java Base64 encoder in the > >> utility class is still adding an extra linefeed when the encoded data > >> ends > >> up exactly on a line wrap boundar

Re: Java xmlsec still contains base64 bug

2004-02-16 Thread Axl Mattheus
Erwin van der Koogh wrote: With the talk of a release, I'd note that the Java Base64 encoder in the utility class is still adding an extra linefeed when the encoded data ends up exactly on a line wrap boundary (e.g. last line of 72 chars if wrap length is 72). This is treated as invalid by the X

Re: [C++] Possible bug in XSECCannon.cpp

2004-02-16 Thread Berin Lautenbach
John, Yup. This one is already fixed in CVS (exactly your fix below :>). One of the reasons we need to get a new version out. With thanks! Cheers, Berin John Moore wrote: While testing, my program started failing. I traced it to the following code snippet from XSECCannon::outputBuff

Re: [SOLVED]Veryfing tempered data

2004-02-16 Thread Akeru
I solved my issue in such a simple way I am a bit ashamed : I thought signature.checkSignatureValue() would throw me an exception if the checking failed, but it is not the case since a boolean is returned, so a simple if() did the job I hope I did not waste too much of your time, thank you for

Re: Veryfing tempered data

2004-02-16 Thread Akeru
Milan Tomic wrote : > You haven't told us which libraries (and version) are you using: > C++ or Java? Also, some code samples would help. Oops, sorry, I'm using Java libraries version 1.0.4, here is how the verfication is done : public void verifySignature(String message) throws Exception { Do

RE: Veryfing tempered data

2004-02-16 Thread Milan Tomic
You haven't told us which libraries (and version) are you using: C++ or Java? Also, some code samples would help. If you are using C++ library: there was a bug which limited node's value size to 16K. If you are using 1.00 version of libraries you can download those files from cvs to fix a