> > On the server side, it looks like SignedInfo.verify call is always > > assuming SOAP-ENV and not soapenv.
No, this code assumes nothing. What you give it is what it signs, and what you verify can't be changed in between. > > But if the digest of the SOAP body calculated on the the client side using > > Axis2's body (soapenv namespace), the digest does not match on the server > > side. If something is changing the prefixes in between, that something is broken. -- Scott