https://issues.apache.org/bugzilla/show_bug.cgi?id=43685
--- Comment #17 from [EMAIL PROTECTED] 2008-07-07 12:05:11 PST --- (In reply to comment #16) > The BEA API doesn't allow one to print the canonilized output as WSS4J does. This should be a fundamental requirement for any XML Signature implementation. There should be some sort of hook that allows the canonicalized bytes from both the Reference and SignedInfo to be emitted or cached and retrieved. I would have been unable to analyze and fix dozens of bugs (or prove they weren't bugs) without this basic level of debugging support. > BEA Support just wrote me today and said that signing (the step after > canonilization) often happens while streaming over the network or sometimes in > the handleRequest or handleResponse events. If that is true, then output of a > BEA client must be exactly what is output from the canonilization step. This is not a signing failure. It fails when the references are validated. The digests don't match. > > Feel free to contact me by email, if you are interested in the BEA client and > the WSS4J serverside. > > Anyway, thanks for responding Sean - I'm trying to get BEA Support to help me > provide the information you require, since I have to decompile and rewrite and > recompile the weblogic.jar in order to get the canonilized output. You're welcome. I hope you figure out the problem. -- Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are the assignee for the bug.
