Hello All

I wonder if I have been boycotted from the xml security mailing list, coz no
one has addressed my plea for help with XML DSig.

Anyways, I have been able to generate and validate an enveloped signature.

Another problem beckons me now, if someone could please help me out with it.

It so happens that the signature element has to be inserted at a particular
location in the XML DOM, because of which I cannot use the
OwnerDocument.appendChild(xmlSignature.getElement())

But instead have to insert the signature at the location needed.
Now this works fine so long as the generation is concerned, but when it comes
to validation, it just wont work...
If the dbf.setNamespaceAware(true) then the xpath just wont evaluate
If the dbf.setNamespaceAware(false) then the xpath evaluates, but it cribs
with the following error :

********************
org.apache.xml.security.exceptions.XMLSecurityException: Cannot create a
null:null from a http://www.w3.org/2000/09/xmldsig#:Signature element
        at
org.apache.xml.security.utils.ElementProxy.guaranteeThatElementInCorrectSpace
(Unknown Source)
        at org.apache.xml.security.utils.ElementProxy.<init>(Unknown Source)
        at org.apache.xml.security.utils.SignatureElementProxy.<init>(Unknown
Source)
        at org.apache.xml.security.signature.XMLSignature.<init>(Unknown
Source)
        at com.syntegra.xml.dsig.sign.XMLDSig.verify(XMLDSig.java:176)
        at com.syntegra.xml.dsig.sign.XMLDSig.main(XMLDSig.java:75)
*********************

Can someone please tell me how do I got about validating such a XML Dsig ????


********************************************************************

This email may contain information which is privileged or confidential. If you 
are not the intended recipient of this email, please notify the sender 
immediately and delete it without reading, copying, storing, forwarding or 
disclosing its contents to any other person
Thank you

Check us out at http://www.bt.com/consulting

********************************************************************

Reply via email to