DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUGĀ·
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://issues.apache.org/bugzilla/show_bug.cgi?id=36640>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED ANDĀ·
INSERTED IN THE BUG DATABASE.

http://issues.apache.org/bugzilla/show_bug.cgi?id=36640

           Summary: Signature verification ignores the inclusive namespaces
                    parameter of a excl c14n ds:CanonicalizationMethod
           Product: Security
           Version: Java 1.2.1
          Platform: All
        OS/Version: All
            Status: NEW
          Severity: normal
          Priority: P4
         Component: Signature
        AssignedTo: security-dev@xml.apache.org
        ReportedBy: [EMAIL PROTECTED]


If a signature containing a ds:CanonicalizationMethod like the following is 
passed to the xml-security library, the inclusive namespaces parameter is 
ignored.

<ds:CanonicalizationMethod 
  Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#";>
    <InclusiveNamespaces
      xmlns="http://www.w3.org/2001/10/xml-exc-c14n#"; 
      PrefixList="enc ns0 xsd xsi"/>
</ds:CanonicalizationMethod>

Suggested patch has been attached.

-- 
Configure bugmail: http://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

Reply via email to