Hi,

In the org.apache.xml.security.signature.XMLSignature class of the java XML 
Security v1.4, I don't understand a piece of code in the "public void sign(Key 
signingKey)" method.

-----------------------------
// generate digest values for all References in this SignedInfo
si.generateDigestValues();
OutputStream so=new UnsyncBufferedOutputStream(new SignerOutputStream(sa));
try {
   so.close();
} catch (IOException e) {
   //Imposible
}
// get the canonicalized bytes from SignedInfo
si.signInOctectStream(so);
-----------------------------

Why the output stream "so" object is closed ("so.close()") before the signing 
operation ?

Regards,

Julien PASQUIER

Reply via email to