I'm not sure what can be done in the Java library to control or turn off
indenting.
Anyone else able to assist?
Cheers,
Berin
Jorge Martín Cuervo wrote:
Hi Berin,
Maybe for me, a solution would be eliminate all line feeds and carriage
returns in the Signature element. So, the xml can be indented and before
the validation i can clean up again this LF/CR.
is it posible? is there any posibility to configure the API like this?
thanks again!
El mar, 13 de 02 de 2007 a las 09:32, Berin Lautenbach escribió:
/You need to do your indenting before you sign, which means you can
really only indent your own XML prior to attaching the signature node.
The library handles the indenting of the <Signature> elements. Off the
top of my head I'm not sure how much control you can have of that for
the Java library. For the C++ library you can turn indenting on and
off, but when it's on there no way to tell it how to indent.
The merlin signature below was all indented before the final signature
was made. If you were to change even one space in the indenting, the
signature would fail.
Cheers,
Berin
Jorge Martín Cuervo wrote:
> Hola Raul
>
> i understand, but after check the xml files used in the samples i found
> several like this in merlin directory:
>
> <?xml version="1.0" encoding="UTF-8"?>
> <Signature xmlns="//http://www.w3.org/2000/09/xmldsig#";>
> <SignedInfo>
> <CanonicalizationMethod
Algorithm="http://www.w3.org/TR/2001/REC-xml-c14n-20010315"; />
> <SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"; />
> <Reference URI="http://www.w3.org/TR/xml-stylesheet";>
> <DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"; />
> <DigestValue>60NvZvtdTB+7UnlLp/H24p7h4bs=</DigestValue>
> </Reference>
> </SignedInfo>
> <SignatureValue>
> KTe1H5Hjp8hwahNFoUqHDuPJNNqhS1U3BBBH5/gByItNIwV18nMiLq4KunzFnOqD
> xzTuO0/T+wsoYC1xOEuCDxyIujNCaJfLh+rCi5THulnc8KSHHEoPQ+7fA1VjmO31
> 2iw1iENOi7m//wzKlIHuxZCJ5nvolT21PV6nSE4DHlA=
> </SignatureValue>
> <KeyInfo>
> <KeyName>Lugh</KeyName>
> </KeyInfo>
> </Signature>
>
> I seems to be indented, and (i supose) still works. How did Merlin get
> that signatures?
>
> thanks
>
> El lun, 12 de 02 de 2007 a las 18:32, Raul Benito escribió:
>> /Hola Jorge,
>>
>> Sorry no luck, If you change the signature it will be void. No matter
>> what books have told, spaces are an important part of the XML. And it
>> means a lot. You cannot change it without changing the signature.
>>
>> Regards,
>>
>> Raul
>>
>> On 12 Feb 2007 12:00:20 +0100, *Jorge Martín Cuervo*
>> <//[EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]>>
>> wrote: /
>>
>> / Hi all,
>>
>> I want to create a signature inside an xml file, i use several
>> transforms to get a portion of the original xml with xpath, and to
>> canonize. I decided to don't attach the public keys.
>>
>>
>> /
>>
>> /<?xml version="1.0" encoding="UTF-8"?>
>> <hr:Candidate xmlns:df="http://defactops.com";
xmlns:hr="http://ns.hr-xml.org/2004-08-02"; xmlns:xs="
>> http://www.w3.org/2001/XMLSchema";
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance";>
>> <hr:CandidateRecordInfo>
>> <hr:Id>
>> <hr:IdValue name="id">1158138667963</hr:IdValue>
>> </hr:Id>
>> <hr:Id>
>> <hr:IdValue name="version">
>> 0.9.0</hr:IdValue>
>> </hr:Id>
>> <hr:Id>
>> <hr:IdValue name="model">0.9.0</hr:IdValue>
>> </hr:Id>
>> <hr:Id>
>> <hr:IdValue name="host">
>> 127.0.0.1 <http://127.0.0.1></hr:IdValue <http://127.0.0.1></hr:IdValue>>
>> </hr:Id>
>> </hr:CandidateRecordInfo>
>> <hr:CandidateProfile>
>>
>> [...]
>> </hr:UserArea>
>> <HRSignature id="protean-xmldsig-01"><ds:Signature xmlns:ds="
>> http://www.w3.org/2000/09/xmldsig#";>
>> <ds:SignedInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#";>
>> <ds:CanonicalizationMethod
Algorithm="http://www.w3.org/TR/2001/REC-xml-c14n-20010315";
xmlns:ds="http://www.w3.org/2000/09/xmldsig#"/>
>> <ds:SignatureMethod Algorithm="
>> http://www.w3.org/2000/09/xmldsig#dsa-sha1"; xmlns:ds="
>> http://www.w3.org/2000/09/xmldsig#"/>
>> <ds:Reference URI="" xmlns:ds="http://www.w3.org/2000/09/xmldsig#";>
>> <ds:Transforms xmlns:ds="http://www.w3.org/2000/09/xmldsig#";>
>> <ds:Transform Algorithm="
>> http://www.w3.org/2002/06/xmldsig-filter2"; xmlns:ds="
>> http://www.w3.org/2000/09/xmldsig#";>
>> <dsig-xpath:XPath Filter="intersect" xmlns:dsig-xpath="
>>
http://www.w3.org/2002/06/xmldsig-filter2";>/hr:Candidate/hr:CandidateRecordInfo</dsig-xpath:XPath>
>> </ds:Transform>
>> <ds:Transform Algorithm="
>> http://www.w3.org/TR/2001/REC-xml-c14n-20010315#WithComments";
xmlns:ds="http://www.w3.org/2000/09/xmldsig#"/>
>> </ds:Transforms>
>> <ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1";
xmlns:ds="http://www.w3.org/2000/09/xmldsig#"/>
>> <ds:DigestValue xmlns:ds="
>>
http://www.w3.org/2000/09/xmldsig#";>ICBDC9GdWcp8S373I1jlKCilSbI=</ds:DigestValue>
>> </ds:Reference>
>>
>> </ds:SignedInfo>
>> <ds:SignatureValue xmlns:ds="http://www.w3.org/2000/09/xmldsig#
>>
">l0N6Ll3/tlSoBz26QdIHyWMA1D95xcPClBz8oy8y7Oj69QQxTVF9GA==</ds:SignatureValue>
>> </ds:Signature></HRSignature></hr:Resume>
>> </hr:Candidate>/
>>
>> /
>> It works pretty well, (the sign and the verification process) but,
>> when i indent the whole file, the *Signature* element content is
>> indented too and the validation process fails.
>>
>> is there any way to canonice the Signature element? is this a
>> common problem? how can i solve this?
>>
>>
>> thank you!
>>
>> pd: i'm new in this mailing list, and sorry if this issue was
>> commented before./
>>
>> --
>> ;-)
>> ____________________________________
>> Jorge Martin Cuervo
>> Analista Programador
>>
>> Outsourcing Emarketplace
>> deFacto Powered by Standards
>>
>> email <
>> [EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]>>
>> voz +34 985 129 820
>> voz +34 660 026 384
>> ____________________________________
>>
>> /
>>
>>
>> -- //
>> http://r-bg.com/
>
> --
> ;-)
> ____________________________________
> Jorge Martin Cuervo
> Analista Programador
>
> Outsourcing Emarketplace
> deFacto Powered by Standards
>
> email <[EMAIL PROTECTED]>
> voz +34 985 129 820
> voz +34 660 026 384
> ____________________________________
> /
--
;-)
____________________________________
Jorge Martin Cuervo
Analista Programador
Outsourcing Emarketplace
deFacto Powered by Standards
email <[EMAIL PROTECTED]>
voz +34 985 129 820
voz +34 660 026 384
____________________________________
