I'm getting good an answering my own questions.
ObjectContainer receipt = new ObjectContainer(doc);
receipt.setId("Receipt");
Element pmrele =
doc.createElementNS("http://www.upu.int/EPMService/schemas";,
"epm:PostMarkedReciept");
pmrele.setAttributeNS(Constants.NamespaceSpecNS, "xmlns:epm",
"http://www.upu.int/EPMService/schemas";);
Document recd = db.parse(new FileInputStream(new File("receipt.xml")));
Node newrecd = doc.importNode(recd.getDocumentElement(), true);
Element recde = doc.createElement("PostMarkedReceipt");
recde.setAttributeNS(Constants.NamespaceSpecNS, "xmlns:epm",
"http://www.upu.int/EPMService/schemas";);
recde.appendChild( newrecd );
receipt.appendChild( recde );
sig.appendObject(receipt);
sig.addDocument("#Receipt");
As long as it's here in a public forum for all to find next time.
JLC
On Thu, Aug 31, 2006 at 03:13:25PM -0400, Jean-Luc Cooke wrote:
> Greetings,
>
> Wanted how to do this (if it's possible with apache xmlsec, or even allowed
> by the standard).
>
> I want to insert "rec.xml" into "doc.xml" as you see attached here and sign
> the whole thing.
>
> Trying to fight with appendChild() and DocumentBuilder.parse() keeps getting
> me exceptions saying I can't insert a node into something that not from the
> same Document.
>
> Help would be great. As I start learning this tool.
>
> JLC
>
> ### BEGIN doc.xml ###
> <?xml version="1.0" encoding="UTF-8"?>
> <dsig:Signature xmlns:dsig="http://www.w3.org/2000/09/xmldsig#";
> Id="PostMarkedReceiptSignature">
> <dsig:SignedInfo>
> <dsig:CanonicalizationMethod
> Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
> <dsig:SignatureMethod
> Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
> <dsig:Reference URI="#TstInfo">
> <dsig:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>
> <dsig:DigestValue>0LgZjdD0UGrR4RX0egka1UAtWVU=</dsig:DigestValue>
> </dsig:Reference>
> <dsig:Reference URI="#Receipt">
> <dsig:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>
> <dsig:DigestValue>JDK2kPGna71ehS5PCQJ3iRTN8gk=</dsig:DigestValue>
> </dsig:Reference>
> <dsig:Reference URI="#PostMarkedSignatures">
> <dsig:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>
> <dsig:DigestValue>l0RHNPcNw4SReaad2IMP/SexxMc=</dsig:DigestValue>
> </dsig:Reference>
> </dsig:SignedInfo>
>
> <dsig:SignatureValue>1jnzbouFs1vi3/X1NraNNthG/UgM9XvnZWTS7WYS51Zt/Y8Jvta1h+wW2R7BDeHt
> XMSb6w08oZCfwpQ8gzTVujg+JFmz4LwjEiLHn6zXVnlv3QK1HnFX3aIRjWDpmPNT
> hPal1XKzpmJfAeFvun6Su6LQZaEOtmvQ6ZBoszfgCZA=</dsig:SignatureValue>
> <dsig:KeyInfo>
> <dsig:KeyName></dsig:KeyName>
> <dsig:X509Data>
>
> <dsig:X509Certificate>MIIEXDCCA0SgAwIBAgIBBDANBgkqhkiG9w0BAQUFADCB3jELMAkGA1UEBhMCQ0gx
> DjAMBgNVBAgTBUJlcm5lMQ4wDAYDVQQHEwVCZXJuZTEfMB0GA1UEChMWVW5pdmVy
> c2FsIFBvc3RhbCBVbmlvbjEaMBgGA1UEChMRRm9yIFRlc3QgVXNlIE9ubHkxHTAb
> BgNVBAsTFEVsZWN0cm9uaWMgUG9zdCBNYXJrMTMwMQYDVQQDEypVbml2ZXJzYWwg
> UG9zdGFsIFVuaW9uIFBpbG90IEVQTSBBdXRob3JpdHkxHjAcBgkqhkiG9w0BCQEW
> D0NBQWRtaW5AdXB1LmludDAeFw0wNTAxMjUxOTU3NDFaFw0xMDAxMjQxOTU3NDFa
> MIHeMQswCQYDVQQGEwJDSDEOMAwGA1UECBMFQmVybmUxDjAMBgNVBAcTBUJlcm5l
> MR8wHQYDVQQKExZVbml2ZXJzYWwgUG9zdGFsIFVuaW9uMRowGAYDVQQKExFGb3Ig
> VGVzdCBVc2UgT25seTEdMBsGA1UECxMURWxlY3Ryb25pYyBQb3N0IE1hcmsxMzAx
> BgNVBAMTKlVuaXZlcnNhbCBQb3N0YWwgVW5pb24gUGlsb3QgRVBNIFRpbWVzdGFt
> cDEeMBwGCSqGSIb3DQEJARYPQ0FBZG1pbkB1cHUuaW50MIGfMA0GCSqGSIb3DQEB
> AQUAA4GNADCBiQKBgQDZcXRnH8LSa57tHZH5i4JsKN5MiTADOud2ThVKctheNd5B
> wqP5JxkyK75jBVrFz5efJLOlpSbALtTwMzOuXn8C+UcdB1/Mu0gnTpgFaonMmKuk
> xq9pi4u/7zlzmA+6vI6pUHu8RrBbHUa0PgM6OkgniZqIfkLjtD0Y9IzJpflczwID
> AQABo4GmMIGjMAwGA1UdEwQFMAMCAQAwHQYDVR0OBBYEFBEFCs6yi4oBFWYGSCLY
> +4lb0PrEMB8GA1UdIwQYMBaAFO0VydJTZFy9p5n9OT6icSir2KhQMC4GA1UdHwQn
> MCUwI6AhoB+GHWh0dHA6Ly9jYTEudXB1LmludC9tYXN0ZXIuY3JsMAsGA1UdDwQE
> AwIGwDAWBgNVHSUBAf8EDDAKBggrBgEFBQcDCDANBgkqhkiG9w0BAQUFAAOCAQEA
> EiPjbN4zcLPOztr9WLSVB3C+e+qdl1xdzO9xu4tgtiXmeu6liSicWnRv8VNHJLyx
> acSjCHM5rvn+ItVRCKcQf5l6aXab4XaIJFHCqjW6m09v0T0CNRawQaMYTx83iAcA
> jot4dQ11kca4sL3nYIrxiBMPjwRjsLS/UvogLWjmwwx07lFrat5vLwGYPTjmxGyI
> vngOIpc7Deg1xKhBXK4pBof4l0gukhZ0p98Xq181QcW2C/453kGCA307GY2+bsEe
> 9BvnoWPKk+udtb2+NHKgiFmh0arupWd0YI/szP2Zdim5XyVnXV+UuKW8Wi/83TBB
> b2u1v4jWQWzHV/WfjdX2lg==</dsig:X509Certificate>
> <dsig:X509SubjectName>[EMAIL PROTECTED],CN=Universal Postal Union Pilot EPM
> Timestamp,OU=Electronic Post Mark,O=For Test Use Only,O=Universal Postal
> Union,L=Berne,ST=Berne,C=CH</dsig:X509SubjectName>
> <dsig:X509IssuerSerial>
> <dsig:X509IssuerName>[EMAIL PROTECTED],CN=Universal Postal Union Pilot EPM
> Authority,OU=Electronic Post Mark,O=For Test Use Only,O=Universal Postal
> Union,L=Berne,ST=Berne,C=CH</dsig:X509IssuerName>
> <dsig:X509SerialNumber>4</dsig:X509SerialNumber>
> </dsig:X509IssuerSerial>
> </dsig:X509Data>
> </dsig:KeyInfo>
> <dsig:Object xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"; Id="TstInfo">
> <dss:TstInfo xmlns:dss="urn:oasis:names:tc:dss:1.0:core:schema">
> <SerialNumber>100000002276</SerialNumber>
> <CreationTime>2006-8-31T11:45:41.187</CreationTime>
> <Policy/>
> <ErrorBound/>
> <Ordered/>
> <TSA>[EMAIL PROTECTED], CN=Universal Postal Union Pilot EPM Timestamp,
> OU=Electronic Post Mark, O=For Test Use Only, O=Universal Postal Union,
> L=Berne, S=Berne, C=CH</TSA>
> </dss:TstInfo>
> </dsig:Object>
> <dsig:Object xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"; Id="Receipt">
> <epm:PostMarkedReceipt xmlns:epm="http://www.upu.int/EPMService/schemas";>
>
> <Receipt><TransactionKey><Locator><CountryCode>CA</CountryCode><Version>UPU115</Version><ServiceProvider/><Environment/></Locator><Key>G9Z8-BCIH</Key><Sequence>1</Sequence></TransactionKey><tsaX509SubjectName>C=CH,ST=Berne,L=Berne,O=Universal
> Postal Union,O=For Test Use Only,OU=Electronic Post Mark,CN=Universal Postal
> Union Pilot EPM Timestamp,[EMAIL
> PROTECTED]</tsaX509SubjectName><TimeStampValue>20060831154541Z</TimeStampValue><TimeStampToken>MIAGCSqGSIb3DQEHAqCAMIIHwgIBATELMAkGBSsOAwIaBQAwggFaBgsqhkiG9w0B
> CRABBKCCAUkEggFFMIIBQQIBAQYDKgMEMCEwCQYFKw4DAhoFAAQUX7UNHurs04D4
> Splu5GvsIlsAiOMCAQ8YDzIwMDYwODMxMTU0NTQxWjADAgEBAQH/AhEAxHUESttX
> Ux1ficv0xsRX+aCB5KSB4TCB3jELMAkGA1UEBhMCQ0gxDjAMBgNVBAgTBUJlcm5l
> MQ4wDAYDVQQHEwVCZXJuZTEfMB0GA1UEChMWVW5pdmVyc2FsIFBvc3RhbCBVbmlv
> bjEaMBgGA1UEChMRRm9yIFRlc3QgVXNlIE9ubHkxHTAbBgNVBAsTFEVsZWN0cm9u
> aWMgUG9zdCBNYXJrMTMwMQYDVQQDEypVbml2ZXJzYWwgUG9zdGFsIFVuaW9uIFBp
> bG90IEVQTSBUaW1lc3RhbXAxHjAcBgkqhkiG9w0BCQEWD0NBQWRtaW5AdXB1Lmlu
> dKCCBGAwggRcMIIDRKADAgECAgEEMA0GCSqGSIb3DQEBBQUAMIHeMQswCQYDVQQG
> EwJDSDEOMAwGA1UECBMFQmVybmUxDjAMBgNVBAcTBUJlcm5lMR8wHQYDVQQKExZV
> bml2ZXJzYWwgUG9zdGFsIFVuaW9uMRowGAYDVQQKExFGb3IgVGVzdCBVc2UgT25s
> eTEdMBsGA1UECxMURWxlY3Ryb25pYyBQb3N0IE1hcmsxMzAxBgNVBAMTKlVuaXZl
> cnNhbCBQb3N0YWwgVW5pb24gUGlsb3QgRVBNIEF1dGhvcml0eTEeMBwGCSqGSIb3
> DQEJARYPQ0FBZG1pbkB1cHUuaW50MB4XDTA1MDEyNTE5NTc0MVoXDTEwMDEyNDE5
> NTc0MVowgd4xCzAJBgNVBAYTAkNIMQ4wDAYDVQQIEwVCZXJuZTEOMAwGA1UEBxMF
> QmVybmUxHzAdBgNVBAoTFlVuaXZlcnNhbCBQb3N0YWwgVW5pb24xGjAYBgNVBAoT
> EUZvciBUZXN0IFVzZSBPbmx5MR0wGwYDVQQLExRFbGVjdHJvbmljIFBvc3QgTWFy
> azEzMDEGA1UEAxMqVW5pdmVyc2FsIFBvc3RhbCBVbmlvbiBQaWxvdCBFUE0gVGlt
> ZXN0YW1wMR4wHAYJKoZIhvcNAQkBFg9DQUFkbWluQHVwdS5pbnQwgZ8wDQYJKoZI
> hvcNAQEBBQADgY0AMIGJAoGBANlxdGcfwtJrnu0dkfmLgmwo3kyJMAM653ZOFUpy
> 2F413kHCo/knGTIrvmMFWsXPl58ks6WlJsAu1PAzM65efwL5Rx0HX8y7SCdOmAVq
> icyYq6TGr2mLi7/vOXOYD7q8jqlQe7xGsFsdRrQ+Azo6SCeJmoh+QuO0PRj0jMml
> +VzPAgMBAAGjgaYwgaMwDAYDVR0TBAUwAwIBADAdBgNVHQ4EFgQUEQUKzrKLigEV
> ZgZIItj7iVvQ+sQwHwYDVR0jBBgwFoAU7RXJ0lNkXL2nmf05PqJxKKvYqFAwLgYD
> VR0fBCcwJTAjoCGgH4YdaHR0cDovL2NhMS51cHUuaW50L21hc3Rlci5jcmwwCwYD
> VR0PBAQDAgbAMBYGA1UdJQEB/wQMMAoGCCsGAQUFBwMIMA0GCSqGSIb3DQEBBQUA
> A4IBAQASI+Ns3jNws87O2v1YtJUHcL576p2XXF3M73G7i2C2JeZ67qWJKJxadG/x
> U0ckvLFpxKMIczmu+f4i1VEIpxB/mXppdpvhdogkUcKqNbqbT2/RPQI1FrBBoxhP
> HzeIBwCOi3h1DXWRxriwvedgivGIEw+PBGOwtL9S+iAtaObDDHTuUWtq3m8vAZg9
> OObEbIi+eA4ilzsN6DXEqEFcrikGh/iXSC6SFnSn3xerXzVBxbYL/jneQYIDfTsZ
> jb5uwR70G+ehY8qT6521vb40cqCIWaHRqu6lZ3Rgj+zM/Zl2KblfJWddX5S4pbxa
> L/zdMEFva7W/iNZBbMdX9Z+N1faWMYIB7DCCAegCAQEwgeQwgd4xCzAJBgNVBAYT
> AkNIMQ4wDAYDVQQIEwVCZXJuZTEOMAwGA1UEBxMFQmVybmUxHzAdBgNVBAoTFlVu
> aXZlcnNhbCBQb3N0YWwgVW5pb24xGjAYBgNVBAoTEUZvciBUZXN0IFVzZSBPbmx5
> MR0wGwYDVQQLExRFbGVjdHJvbmljIFBvc3QgTWFyazEzMDEGA1UEAxMqVW5pdmVy
> c2FsIFBvc3RhbCBVbmlvbiBQaWxvdCBFUE0gQXV0aG9yaXR5MR4wHAYJKoZIhvcN
> AQkBFg9DQUFkbWluQHVwdS5pbnQCAQQwCQYFKw4DAhoFAKBfMBoGCSqGSIb3DQEJ
> AzENBgsqhkiG9w0BCRABBDAcBgkqhkiG9w0BCQUxDxcNMDYwODMxMTU0NTQxWjAj
> BgkqhkiG9w0BCQQxFgQU3LFFDRM/w4kB+yL9K7FU4tS/VO0wDQYJKoZIhvcNAQEB
> BQAEgYA/jTGI0m5QRZzZBob73YnAAsJ8kit/s7ulXpkNSwgthqxf+cOw9ZUeWtgw
> I4dN7vTBHN/hRPJ3bgND6OO11o3pmotHYAHxejUMxXjPev4UcwX763bdb+rhJH5C
> zBLRzWGYrdBSCE+XohIZkkY2lcBZwHSLBa8C5UEgiahbBXzOnwAAAAA=</TimeStampToken><RevocationStatusQualifier>Not
>
> Applicable</RevocationStatusQualifier><ClientApplication><NameAndVersion>TestDriver
> Data
> Preparation</NameAndVersion><ContentTransformScheme>none</ContentTransformScheme></ClientApplication></Receipt></epm:PostMarkedReceipt>
> </dsig:Object>
> <dsig:Object xmlns:dsig="http://www.w3.org/2000/09/xmldsig#";
> Id="PostMarkedSignatures">
> <epm:PostMarkedContent xmlns:epm="http://www.upu.int/EPMService/schemas";>
>
> <PostMarkedSignatureValue>UQ+A58r21hXmBxhVAXkIKk6nRLIKPfldDfR6DfoeHFCX3mfzpTRRUiVSmj6Bb93P
> 5yeKtqrnj73Ho0vOVoe323j/ksfvMUrwE6mpt4z52zmAoneszFdb+EgwdiGVE0z6
> K6UGu7H9QwnCqB5nD80vTGyLSl5OAUsanzunObeQmnk=</PostMarkedSignatureValue>
> </epm:PostMarkedContent>
> </dsig:Object>
> </dsig:Signature>
> ### END doc.xml ###
>
> ### BEGIN rec.xml ###
>
> <Receipt><TransactionKey><Locator><CountryCode>CA</CountryCode><Version>UPU115</Version><ServiceProvider/><Environment/></Locator><Key>G9Z8-BCIH</Key><Sequence>1</Sequence></TransactionKey><tsaX509SubjectName>C=CH,ST=Berne,L=Berne,O=Universal
> Postal Union,O=For Test Use Only,OU=Electronic Post Mark,CN=Universal Postal
> Union Pilot EPM Timestamp,[EMAIL
> PROTECTED]</tsaX509SubjectName><TimeStampValue>20060831154541Z</TimeStampValue><TimeStampToken>MIAGCSqGSIb3DQEHAqCAMIIHwgIBATELMAkGBSsOAwIaBQAwggFaBgsqhkiG9w0B
> CRABBKCCAUkEggFFMIIBQQIBAQYDKgMEMCEwCQYFKw4DAhoFAAQUX7UNHurs04D4
> Splu5GvsIlsAiOMCAQ8YDzIwMDYwODMxMTU0NTQxWjADAgEBAQH/AhEAxHUESttX
> Ux1ficv0xsRX+aCB5KSB4TCB3jELMAkGA1UEBhMCQ0gxDjAMBgNVBAgTBUJlcm5l
> MQ4wDAYDVQQHEwVCZXJuZTEfMB0GA1UEChMWVW5pdmVyc2FsIFBvc3RhbCBVbmlv
> bjEaMBgGA1UEChMRRm9yIFRlc3QgVXNlIE9ubHkxHTAbBgNVBAsTFEVsZWN0cm9u
> aWMgUG9zdCBNYXJrMTMwMQYDVQQDEypVbml2ZXJzYWwgUG9zdGFsIFVuaW9uIFBp
> bG90IEVQTSBUaW1lc3RhbXAxHjAcBgkqhkiG9w0BCQEWD0NBQWRtaW5AdXB1Lmlu
> dKCCBGAwggRcMIIDRKADAgECAgEEMA0GCSqGSIb3DQEBBQUAMIHeMQswCQYDVQQG
> EwJDSDEOMAwGA1UECBMFQmVybmUxDjAMBgNVBAcTBUJlcm5lMR8wHQYDVQQKExZV
> bml2ZXJzYWwgUG9zdGFsIFVuaW9uMRowGAYDVQQKExFGb3IgVGVzdCBVc2UgT25s
> eTEdMBsGA1UECxMURWxlY3Ryb25pYyBQb3N0IE1hcmsxMzAxBgNVBAMTKlVuaXZl
> cnNhbCBQb3N0YWwgVW5pb24gUGlsb3QgRVBNIEF1dGhvcml0eTEeMBwGCSqGSIb3
> DQEJARYPQ0FBZG1pbkB1cHUuaW50MB4XDTA1MDEyNTE5NTc0MVoXDTEwMDEyNDE5
> NTc0MVowgd4xCzAJBgNVBAYTAkNIMQ4wDAYDVQQIEwVCZXJuZTEOMAwGA1UEBxMF
> QmVybmUxHzAdBgNVBAoTFlVuaXZlcnNhbCBQb3N0YWwgVW5pb24xGjAYBgNVBAoT
> EUZvciBUZXN0IFVzZSBPbmx5MR0wGwYDVQQLExRFbGVjdHJvbmljIFBvc3QgTWFy
> azEzMDEGA1UEAxMqVW5pdmVyc2FsIFBvc3RhbCBVbmlvbiBQaWxvdCBFUE0gVGlt
> ZXN0YW1wMR4wHAYJKoZIhvcNAQkBFg9DQUFkbWluQHVwdS5pbnQwgZ8wDQYJKoZI
> hvcNAQEBBQADgY0AMIGJAoGBANlxdGcfwtJrnu0dkfmLgmwo3kyJMAM653ZOFUpy
> 2F413kHCo/knGTIrvmMFWsXPl58ks6WlJsAu1PAzM65efwL5Rx0HX8y7SCdOmAVq
> icyYq6TGr2mLi7/vOXOYD7q8jqlQe7xGsFsdRrQ+Azo6SCeJmoh+QuO0PRj0jMml
> +VzPAgMBAAGjgaYwgaMwDAYDVR0TBAUwAwIBADAdBgNVHQ4EFgQUEQUKzrKLigEV
> ZgZIItj7iVvQ+sQwHwYDVR0jBBgwFoAU7RXJ0lNkXL2nmf05PqJxKKvYqFAwLgYD
> VR0fBCcwJTAjoCGgH4YdaHR0cDovL2NhMS51cHUuaW50L21hc3Rlci5jcmwwCwYD
> VR0PBAQDAgbAMBYGA1UdJQEB/wQMMAoGCCsGAQUFBwMIMA0GCSqGSIb3DQEBBQUA
> A4IBAQASI+Ns3jNws87O2v1YtJUHcL576p2XXF3M73G7i2C2JeZ67qWJKJxadG/x
> U0ckvLFpxKMIczmu+f4i1VEIpxB/mXppdpvhdogkUcKqNbqbT2/RPQI1FrBBoxhP
> HzeIBwCOi3h1DXWRxriwvedgivGIEw+PBGOwtL9S+iAtaObDDHTuUWtq3m8vAZg9
> OObEbIi+eA4ilzsN6DXEqEFcrikGh/iXSC6SFnSn3xerXzVBxbYL/jneQYIDfTsZ
> jb5uwR70G+ehY8qT6521vb40cqCIWaHRqu6lZ3Rgj+zM/Zl2KblfJWddX5S4pbxa
> L/zdMEFva7W/iNZBbMdX9Z+N1faWMYIB7DCCAegCAQEwgeQwgd4xCzAJBgNVBAYT
> AkNIMQ4wDAYDVQQIEwVCZXJuZTEOMAwGA1UEBxMFQmVybmUxHzAdBgNVBAoTFlVu
> aXZlcnNhbCBQb3N0YWwgVW5pb24xGjAYBgNVBAoTEUZvciBUZXN0IFVzZSBPbmx5
> MR0wGwYDVQQLExRFbGVjdHJvbmljIFBvc3QgTWFyazEzMDEGA1UEAxMqVW5pdmVy
> c2FsIFBvc3RhbCBVbmlvbiBQaWxvdCBFUE0gQXV0aG9yaXR5MR4wHAYJKoZIhvcN
> AQkBFg9DQUFkbWluQHVwdS5pbnQCAQQwCQYFKw4DAhoFAKBfMBoGCSqGSIb3DQEJ
> AzENBgsqhkiG9w0BCRABBDAcBgkqhkiG9w0BCQUxDxcNMDYwODMxMTU0NTQxWjAj
> BgkqhkiG9w0BCQQxFgQU3LFFDRM/w4kB+yL9K7FU4tS/VO0wDQYJKoZIhvcNAQEB
> BQAEgYA/jTGI0m5QRZzZBob73YnAAsJ8kit/s7ulXpkNSwgthqxf+cOw9ZUeWtgw
> I4dN7vTBHN/hRPJ3bgND6OO11o3pmotHYAHxejUMxXjPev4UcwX763bdb+rhJH5C
> zBLRzWGYrdBSCE+XohIZkkY2lcBZwHSLBa8C5UEgiahbBXzOnwAAAAA=</TimeStampToken><RevocationStatusQualifier>Not
>
> Applicable</RevocationStatusQualifier><ClientApplication><NameAndVersion>TestDriver
> Data
> Preparation</NameAndVersion><ContentTransformScheme>none</ContentTransformScheme></ClientApplication></Receipt>
> ### END rec.xml ###
