Can you use SOAP with Attachments? Or hashing yourself and then sign that hash?
C14n can be memory intensive if it's implemented recursively (I haven't seen the ASF code, sorry, just quoting from my own experience implementing it once) > -----Original Message----- > From: Yves Langisch [mailto:[EMAIL PROTECTED] > Sent: Thursday, March 24, 2005 11:53 AM > To: [EMAIL PROTECTED] > Cc: [email protected]; Granqvist, Hans > Subject: RE: Signing huge SOAP requests > > > Not at all! > > We really have huge data to sign. And obviously the in-memory > DOM-representation itself is not the problem. With > appropriate VM-params I'm able to parse a 100MB file into a > DOM-document. The problems start while signing. The memory > demand is much higher than during parsing and I'm able to > sign "only" a 10MB SOAP request. > > Are there any streaming/event based (SAX, StAX) security > libraries which are able to handle such huge requests > (performance has not top priority)? > > Yves > > -----Original Message----- > From: Davanum Srinivas [mailto:[EMAIL PROTECTED] > Sent: Donnerstag, 24. M�rz 2005 13:55 > To: Yves Langisch > Cc: [email protected] > Subject: Re: Signing huge SOAP requests > > You kidding me? that's huge!. problem is that the whole thing > needs to be in DOM as xml-security (AND the w3c specs) works > on DOM and not streaming/sax stuff. > > -- dims > > On Thu, 24 Mar 2005 09:27:50 +0100, Yves Langisch > <[EMAIL PROTECTED]> wrote: > > All, > > > > Is there anyone having experiences (memory requirements, > performance, > > ...) with signing huge SOAP requests (w/o attachments, body > is about > > 100MB) with WSS4J? > > > > Thanks > > Yves > > > > > > > -- > Davanum Srinivas - http://webservices.apache.org/~dims/ > > > >
