Using WSS4J for signing large XML messages

[Idan Miller]

Hi everyone,   Our project uses web services to transfer XML messages that can be of a very large size (up to 100MB).   Currently, we are using WSE over IIS for verifying the signing for incoming messages. Due to a problem with WSE loading the XML using a DOM Document (probably due to cannonization), combined with memory being held in the large object heap in .NET, we are unable to transfer very large messages, since we simply run out of memory that doesn't get released.   Now that WSS4J is out, we would like to know if this problem will be solved by changing our architecture to use apache axis and WSS4J:   How does WSS4J handle large messages? Does it use DOM or does it use a reader (SAX) for cannonization? Also, if it does use DOM, has it been tested for out of memory errors?   p.s. we are using X509 certificates for the signing.   Thanks, Idan.