Hi, well, at least in version 1.0.x, the recommended prefix feature was not always used (and this may be sometime annoying albeit this is normally irrelevant) anyway this is not sufficient for proper DSig support and you'll need proper canonicalization support as stated by Radu.
I do agree that XMLSignature support is of importance for XMLBean (notably if you want to use the WSS stack), however according that you have a library doing canonacilization properly, I do not see why it is wasteful (can. does require to manipulate the source anyway), according that the idea is to test the equivalence of XML in this case and not the exact binary match. However, I will expect that marshalling/unmarchalling data without modification would not change the XML (e.g XML -> XMLBean (read only access) -> XML' => XML=XML') which may not be the case BR jc > Hi Radu, > > The FAQ says prefixes are not kept when XML is read into the store: > http://wiki.apache.org/xmlbeans/XmlBeansV1Faq#suggestedPrefixes If > this is correct it'd mean that you could not verify signatures within > XMLBeans - you'd have to have an external layer do the signature > handling, before the data goes into the stroe, which seems pretty > wasteful. I was curious about this since I'd think that maintaining > XML-Signature compatibility would be important for some of the > intended usages of XMLBeans. > > - Dennis > > Radu Preotiuc-Pietro wrote: > >> Hi Dennis, >> Can you give me a more detailed scenario? You _can_ load an XmlBean and >> save it back and the prefixes will be preserved. >> >> We had support for canonicalization in our plans, but we had to drop it, >> mainly because we couldn't get anyone interested enough in the problem >> involved :p >> >> Thanks, >> Radu >> >> -----Original Message----- >> From: Dennis Sosnoski [mailto:[EMAIL PROTECTED] Sent: Monday, August >> 15, 2005 6:47 PM >> To: [email protected] >> Subject: XML-Signature >> >> From a quick look it appears that XMLBeans is incompatible with XML >> Signature, since it doesn't retain all the information needed for XML >> Canonicalization (namespace prefixes, in particular). Are there any >> plans to change this and support XML Signature - or is the documentation >> >> out of date and Canonicalization is already supported? Thanks, >> >> - Dennis >> >> --------------------------------------------------------------------- >> To unsubscribe, e-mail: [EMAIL PROTECTED] >> For additional commands, e-mail: [EMAIL PROTECTED] >> >> >> --------------------------------------------------------------------- >> To unsubscribe, e-mail: [EMAIL PROTECTED] >> For additional commands, e-mail: [EMAIL PROTECTED] >> >> >> >> > > --------------------------------------------------------------------- > To unsubscribe, e-mail: [EMAIL PROTECTED] > For additional commands, e-mail: [EMAIL PROTECTED] > -- Jean-Christophe Pazzaglia, PhD <[EMAIL PROTECTED]> Corporate communications Tel: (+33) 4-93-00-26-78 PGP Key available : http://www.eurecom.fr/~pazzagli/publickey.pgp -- Institut Eurécom - Office 029 http://www.eurecom.fr/ 2229 Route des Crêtes BP 193 06904 Sophia Antipolis, France Fax: (+33) 4-93-00-26-27 --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
