> Using my test xml file, both Glue and .NET C# both produce all of these > 
 elements, while the javax.xml apis produce no 
 entities.
Hmm. Reading the spec, it does say that text nodes get changed such that "all #xD characters are replaced by 
". So, heh, you're right. Guess I never noticed, SAML doesn't generally contain linefeeds. But when you say javax.xml, what do you mean? That API doesn't do c14n, it's the xmlsec code that does that. Or do you just mean you parsed the document with JAXP? That should be ok, but I'd have to guess that the difference must be in that step. A whitespace collapse setting is the only thing that makes any sense to me. > The Glue and .NET C# begin > > <soap:Envelope > xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"; ... > > But the javax.xml begins differently > > <soap:Envelope > soap:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"; Again, this isn't javax.xml, that doesn't have any influence on the c14n step except for maybe building the input DOM. But, the spec says that namespace declarations come before other attributes. So the latter would be wrong. > So the whitespace issue isn't my only problem. Could this be > a library issue? Well, I'm not sure you're canonicalizing here in the Java case. I know they have interop tests and so forth, so the c14n code isn't *that* broken. -- Scott
