Hi all,
I am currently developping an applet to verify Xades signatures, and
therefore I try to keep the size of the whole package at a minimum.
The whole package is actually composed of the following jar files:
MyXadesLib.jar, xmlsec-1.4.1.jar, commons-logging.jar,
commons-jxpath-1.2.jar, bcprov-jdk14-137.jar, bcmail-jdk14-137.jar,
bctsp-jdk14-137.jar
As you can see, I am using commons-jxpath instead of the
Xalan+xercesImpl combo because I only need to make one xpath query to
get the <dsig:Signature> element before passing it to the XMLSignature
constructor.
I just thought that Xalan+xercesImpl is way too heavy for my needs, but
maybe I am wrong.
By the way, the targeted JREs are Sun's JRE 1.4.2 and 1.5.
Everything worked fine for me until now because I was not dealing with
XPath transformations. But now I need to verify Xades signatures that
have their first reference that looks like this:
<ds:Reference URI="#doc">
<ds:Transforms>
<ds:Transform
Algorithm="http://www.w3.org/TR/1999/REC-xpath-19991116">
<ds:XPath>ancestor-or-self::xjo:JO</ds:XPath>
</ds:Transform>
<ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
</ds:Transforms>
<ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>
<ds:DigestValue>VrikqwQegYRo4bh04UEsHPnF9Pk=</ds:DigestValue>
</ds:Reference>
And now I have no other choice but to package xalan.jar, xercesImpl.jar
and xml-apis.jar with my applet. But maybe I am wrong. Do you know any
workaround to this issue?
Thanks a lot.