> > On the server side, it looks like SignedInfo.verify call is always
> > assuming SOAP-ENV and not soapenv.

No, this code assumes nothing. What you give it is what it signs, and what
you verify can't be changed in between.
 
> > But if the digest of the SOAP body calculated on the the client side
using
> > Axis2's body (soapenv namespace), the digest does not match on the
server
> > side.

If something is changing the prefixes in between, that something is broken.

-- Scott


Reply via email to