DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG· RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT <http://issues.apache.org/bugzilla/show_bug.cgi?id=38444>. ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND· INSERTED IN THE BUG DATABASE.
http://issues.apache.org/bugzilla/show_bug.cgi?id=38444 Summary: Transform TRANSFORM_XPATH2FILTER subtract filter bug in 1.3 release Product: Security Version: unspecified Platform: All OS/Version: All Status: NEW Severity: normal Priority: P2 Component: Signature AssignedTo: security-dev@xml.apache.org ReportedBy: [EMAIL PROTECTED] I'm trying to sign a document using the transform TRANSFORM_XPATH2FILTER, but I get a bad signature if I try to use ONLY the filter XPath2FilterContainer.SUBTRACT 1) Ex: String filters[][] = { {XPath2FilterContainer.SUBTRACT, "//NotToBeSigned"} }; transforms.addTransform( Transforms.TRANSFORM_XPATH2FILTER, XPath2FilterContainer.newInstances(doc, filters) ); With this filter I always get the same DigestValue element inside SignedInfo, even with different xml sources. But, if I try to add the filter XPath2FilterContainer.INTERSECT including all nodes, then I get the right DigestValue and signature 2) Ex: String filters[][] = { { XPath2FilterContainer.INTERSECT, "*" },{ XPath2FilterContainer.SUBTRACT, "//NotToBeSigned"} }; transforms.addTransform(Transforms.TRANSFORM_XPATH2FILTER, XPath2FilterContainer.newInstances(doc, filters)); The second example works both with the 1.3 and 1.2 releases, while the first one does not work with 1.3 release. -- Configure bugmail: http://issues.apache.org/bugzilla/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are the assignee for the bug, or are watching the assignee.
