DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG· RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT <http://issues.apache.org/bugzilla/show_bug.cgi?id=40684>. ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND· INSERTED IN THE BUG DATABASE.
http://issues.apache.org/bugzilla/show_bug.cgi?id=40684 Summary: Allow relaxing namespace requirement for signature element Product: Security Version: Java 1.3 Platform: Other OS/Version: other Status: NEW Severity: enhancement Priority: P3 Component: Signature AssignedTo: security-dev@xml.apache.org ReportedBy: [EMAIL PROTECTED] Given the following XML <TEST> <SUB_TEST>test</SUBTEST> <Signature Id="_1"> </Signature> </TEST> signature verification fails because it is missing xmlns="http://www.w3.org/2000/09/xmldsig#"; which is enforced by the classes ElementProxy and SignatureElementProxy: public abstract class ElementProxy { ... public void guaranteeThatElementInCorrectSpace() throws XMLSecurityException { { String localnameSHOULDBE = this.getBaseLocalName(); String namespaceSHOULDBE = this.getBaseNamespace(); ... } } public abstract class SignatureElementProxy { ... public String getBaseNamespace() { return Constants.SignatureSpecNS; } ... } } -- Configure bugmail: http://issues.apache.org/bugzilla/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are the assignee for the bug, or are watching the assignee.
