[c++] RE: CounterSignature or Multiple Signatures - is it possible?

2003-12-19 Thread Milan Tomic
Speaking of multiple signatures... How can I verify multiple signatures in my document? Can I use findDSIGNode() to do the job? I belive this function finds only first signature element and can't be used for finding next one. Best regards, Milan > -Original Message- > From: Seungwoo

[java] Large XML Files ( > 1 MB )

2003-12-19 Thread Milan Tomic
Title: [java] Large XML Files ( > 1 MB )     Signing large xml file (1,5 MB) took more than 300 MB RAM. Is there a way to make it consume less memory? Thank you.

Re: [java] Large XML Files ( > 1 MB )

2003-12-19 Thread Erwin van der Koogh
Signing large xml file (1,5 MB) took more than 300 MB RAM. Is there a way to make it consume less memory? Well.. there's a patch in CVS from a while back from Sean that improved performance a little bit, but no, at this time there's little we can do to make it consume less memory. The ent

Re: [java] Large XML Files ( > 1 MB )

2003-12-19 Thread Axl Mattheus
Erwin, We're testing it like mad. It seems good. It is my plan to check it in today if all goes well. Danke Herr Dittmann. ax/ Erwin van der Koogh wrote: Signing large xml file (1,5 MB) took more than 300 MB RAM. Is there a way to make it consume less memory? Well.. there's a patch

AW: [java] Large XML Files ( > 1 MB )

2003-12-19 Thread Dittmann Werner
Axl, all, would be nice if you can do so. Then I can get a fresh version from CVS. Do you plan to update other parts of the code? I saw some problems using the internal serializer class (the patch addresses only the TEXT node, not the others). If I can be of any help Regards, Werner > -

Re: AW: [java] Large XML Files ( > 1 MB )

2003-12-19 Thread Erwin van der Koogh
[snip]..I saw some problems using the internal serializer class (the patch addresses only the TEXT node, not the others). If I can be of any help It will be greatly appreciated ;-) But I guess the most important thing I to log them in bugzilla.. that way it 's not going to be forgotten. I am

Re: AW: [java] Large XML Files ( > 1 MB )

2003-12-19 Thread Axl Mattheus
Werner, Help would be nice. No, help would be much appreciated. I am currently occupied elsewhere. The more you do, the more you are allowed to do! Go for it. Thanks Ax/ Dittmann Werner wrote: Axl, all, would be nice if you can do so. Then I can get a fresh version from CVS. Do you plan

[java & c++] URI

2003-12-19 Thread Milan Tomic
Title: [java & c++] URI     Apache Java libraries allow URI "Id" attribute to be "Id" or "id". Apache C++ libraries allow only "Id". W3C recomends "Id". What is right? XML Signature Example: http://www.w3.org/2000/09/xmldsig#"> http://www.w3.org/TR/2001/REC-xml-c14n-20010315"> http://

Re: [java & c++] URI

2003-12-19 Thread Erwin van der Koogh
Apache Java libraries allow URI "Id" attribute to be "Id" or "id". Apache C++ libraries allow only "Id". W3C recomends "Id". What is right? [snip example..] Was this bug fixed? I am not entirely clear what you think is a bug? If the W3C RECOMENDS "Id" (and I haven't read the spec lately, so I

Re: [java & c++] URI

2003-12-19 Thread Berin Lautenbach
Milan, Anything can be an Id, but it needs to be defined as such within the DTD/Schema (type=ID). In the XML DSIG spec, anything that has an type="ID" attribute is called "Id", so references, objects, manifests etc should all have attributes called Id. But if the file is parsed in non-validat

Re: AW: [java] Large XML Files ( > 1 MB )

2003-12-19 Thread Davanum Srinivas
Axl, Security committers, Werner has pending patch (http://nagoya.apache.org/eyebrowse/[EMAIL PROTECTED]&msgNo=1679). Hint: grow the team :) -- dims --- Axl Mattheus <[EMAIL PROTECTED]> wrote: - Werner, Help would be nice. No, help would be much appreciated

Re: AW: [java] Large XML Files ( > 1 MB )

2003-12-19 Thread Erwin van der Koogh
Hi Dims, Werner has pending patch (http://nagoya.apache.org/eyebrowse/[EMAIL PROTECTED] che.org&msgNo=1679). We are well aware that there is a pending patch. Axl said he was working on testing it and I am sure Berin will glance over it when he has time. I don't have the encryption expertise and

Re: AW: [java] Large XML Files ( > 1 MB )

2003-12-19 Thread Axl Mattheus
Dims, all, I tested the patch. It looks good. I am going to check it in now. Erwin van der Koogh wrote: Hi Dims, Werner has pending patch (http://nagoya.apache.org/eyebrowse/[EMAIL PROTECTED] che.org&msgNo=1679). We are well aware that there is a pending patch. Axl said he was working on t

AW: AW: [java] Large XML Files ( > 1 MB )

2003-12-19 Thread Dittmann Werner
Dims, thanks for the honour :-). However, I spend most of my free cycles to WSS4J and the associated Axis handler, documentation etc. So I'm not quite sure if I can really contribute regularly to XML Sec. If I spot a problem in other software, e.g. XML Security, I'll try to fix it and genera

Re: AW: [java] Large XML Files ( > 1 MB )

2003-12-19 Thread Davanum Srinivas
Thanks Axl. --- Axl Mattheus <[EMAIL PROTECTED]> wrote: > Dims, all, > > I tested the patch. It looks good. I am going to check it in now. > > Erwin van der Koogh wrote: > > > Hi Dims, > > > >> Werner has pending patch > >> (http://nagoya.apache.org/eyebrowse/[EMAIL PROTECTED] > >> > >> che.or

Re: AW: [java] Large XML Files ( > 1 MB )

2003-12-19 Thread Davanum Srinivas
Just trying to stir the pot. It was just a hint :) :) Also FYI, Werner and I (primarily Werner) are working on WSS4J (http://wss4j.sf.net). We'll soon move it to Apache Web Services project. thanks, dims --- Erwin van der Koogh <[EMAIL PROTECTED]> wrote: > Hi Dims, > > > Werner has pending pat

Re: AW: AW: [java] Large XML Files ( > 1 MB )

2003-12-19 Thread Sean Mullan
I have been looking at the memory consumption using some profiling tools, to see if there are any obvious things we can fix in the short-term. I don't have any patches yet (other than the one I sent in a few weeks ago), but I will keep you informed as I find stuff. Thanks, Sean Dittmann Werner wrot

Re: [java & c++] URI

2003-12-19 Thread Sean Mullan
Berin Lautenbach wrote: Milan, Anything can be an Id, but it needs to be defined as such within the DTD/Schema (type=ID). In the XML DSIG spec, anything that has an type="ID" attribute is called "Id", so references, objects, manifests etc should all have attributes called Id. But if the file

RE: [java & c++] URI

2003-12-19 Thread Scott Cantor
> I agree with that. I don't think the library should be guessing what an > ID is in the signing case. +1. With DOM3, the reasons for this hack are gone. -- Scott

Re: AW: AW: [java] Large XML Files ( > 1 MB )

2003-12-19 Thread Berin Lautenbach
Dittmann Werner wrote: However, I spend most of my free cycles to WSS4J and the associated Axis handler, documentation etc. So I'm not quite sure if I can really contribute regularly to XML Sec. Whatever contribution is made - it is always welcome! (Thx for the patch :>. I was going to get on

Re: AW: [java] Large XML Files ( > 1 MB )

2003-12-19 Thread Berin Lautenbach
Davanum Srinivas wrote: Just trying to stir the pot. It was just a hint :) :) Also FYI, Werner and I (primarily Werner) are working on WSS4J (http://wss4j.sf.net). We'll soon move it to Apache Web Services project. Must have a look-see! Where did you end up with the licensing issue for this? C

Re: [c++] RE: CounterSignature or Multiple Signatures - is it possible?

2003-12-19 Thread Berin Lautenbach
Milan Tomic wrote: Speaking of multiple signatures... How can I verify multiple signatures in my document? Can I use findDSIGNode() to do the job? I belive this function finds only first signature element and can't be used for finding next one. You are correct. At the moment you have to manua

Re: [java & c++] URI

2003-12-19 Thread Berin Lautenbach
What about a middle ground for transition. An explicit call has to be made into the library to enable the fudged Id in the signing case? Cheers, Berin Scott Cantor wrote: I agree with that. I don't think the library should be guessing what an ID is in the signing case. +1. With DOM3,

RE: [c++] RE: CounterSignature or Multiple Signatures - is it possible?

2003-12-19 Thread Marius Constantin
Can't you use XPath for that? An expression like "//*[local-name()='Signature'][n]" gives you back the n-th signature element. Marius -Original Message- From: Berin Lautenbach [mailto:[EMAIL PROTECTED] Sent: Friday, December 19, 2003 4:08 PM To: [EMAIL PROTECTED] Subject: Re: [c++] RE: C

Re: [c++] RE: CounterSignature or Multiple Signatures - is it possible?

2003-12-19 Thread Berin Lautenbach
Marius, Yup that would work. Inside the library though I've tried to avoid using XPath wherever possible, because I'm trying to ensure that users only need to link in Xalan if they want XPath/XSLT support for transforms. Cheers, Berin Marius Constantin wrote: Can't you use XPath for t