Hi all,

I am currently developping an applet to verify Xades signatures, and therefore I try to keep the size of the whole package at a minimum.

The whole package is actually composed of the following jar files:
MyXadesLib.jar, xmlsec-1.4.1.jar, commons-logging.jar, commons-jxpath-1.2.jar, bcprov-jdk14-137.jar, bcmail-jdk14-137.jar, bctsp-jdk14-137.jar

As you can see, I am using commons-jxpath instead of the Xalan+xercesImpl combo because I only need to make one xpath query to get the <dsig:Signature> element before passing it to the XMLSignature constructor. I just thought that Xalan+xercesImpl is way too heavy for my needs, but maybe I am wrong.
By the way, the targeted JREs are Sun's JRE 1.4.2 and 1.5.


Everything worked fine for me until now because I was not dealing with XPath transformations. But now I need to verify Xades signatures that have their first reference that looks like this:

<ds:Reference URI="#doc">
    <ds:Transforms>
<ds:Transform Algorithm="http://www.w3.org/TR/1999/REC-xpath-19991116";>
            <ds:XPath>ancestor-or-self::xjo:JO</ds:XPath>
        </ds:Transform>
        <ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    </ds:Transforms>
    <ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>
    <ds:DigestValue>VrikqwQegYRo4bh04UEsHPnF9Pk=</ds:DigestValue>
</ds:Reference>


And now I have no other choice but to package xalan.jar, xercesImpl.jar and xml-apis.jar with my applet. But maybe I am wrong. Do you know any workaround to this issue?

Thanks a lot.


Reply via email to