process of generating the <SignedInfo> tag:

1. inherit namespaces to signed info, like this:
<SignedInfo  xmlns="http://www.w3.org/2000/09/xmldsig#";
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance";>
2. apply xml-c14n-20010315 to SignedInfo
3. apply rsa-sha1
4. apply base64
4. now you have <SignatureValue>

the namespaces inherited in 1. are correct ?
because from DOM if you obtain the namespace at the node SignedInfo it only
says xmlns, but it misses the
xmlns:xsi, which is included in the signature value.



- <Signature xmlns="http://www.w3.org/2000/09/xmldsig#";
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance";>
- <SignedInfo>
  <CanonicalizationMethod
Algorithm="http://www.w3.org/TR/2001/REC-xml-c14n-20010315"; />
  <SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"; />
- <Reference URI="#SetDoc">
  <DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"; />
  <DigestValue>pYaS4AXr+cw9w0u3kf46HhEoVBQ=</DigestValue>
  </Reference>
  </SignedInfo>

<SignatureValue>tCdka7RC0a5KccFS3fOUkIvBnP1cH6+VedU0/mianuFgqaLxRrnnnExlbjNQ
9CcjHTXQ7kows3W+
SXE0DzBkXV5rjWXXlfgGD1Tqoo7+tAyP+6XKplwzlPABFVDW2cLyr9ikQNFduTx+pKPZOgff4kzt
rxLzWtryW7jB6MSOdRY=</SignatureValue>
- <KeyInfo>
......

Reply via email to