https://issues.apache.org/bugzilla/show_bug.cgi?id=47853
sean.mul...@sun.com changed:
What |Removed |Added
----------------------------------------------------------------------------
Status|NEW |NEEDINFO
--- Comment #3 from sean.mul...@sun.com 2009-09-16 11:01:43 PDT ---
(In reply to comment #2)
> Hi,
> I am using exclusive canonicalization
> <CanonicalizationMethod
> Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#WithComments";>
> ....
>
>
> Basically what I did is sign the assertion and then all I did was manually
> edit
> the file by adding <soapenv:Envelope
> xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/";> at the beginning of
> the file and </soapenv:Envelope> at the end of the file.
> If I then try to validate the signature, the signature validates but the
> reference does not. When using an inclusive canonicaliztion the signature also
> does not validate, so using the exclusive c14n does have a positive effect,
> but
> it does not help the reference validation.
>
> If I were to add the Envelope tag with out the namespace declaration - it
> validates successfully.
>
>
> This is how I came to the conclusion that the reference validation problem
> only
> occurs when adding tags with namespace declarations.
There is not enough information to proceed. Please attach the XML before and
after you added it to the soap envelope.
Also, get a dump of the canonicalized references in the good signature and the
bad signature and compare what is different. See:
http://weblogs.java.net/blog/mullan/archive/2006/02/more_xml_signat_1.html
--
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
