You create a template with two references and just sign it :)
Hint: to create a template, simply remove DigestValue and
SignatureValue content :)
Aleksey
mahmoud wrote:
Hi Aleksey,
i want to sign my XML-Message with x509 and put a timestamp to the
header. Also i want to sign just the timestamp and the body (like the
wss from Apache-AXIS). I want to use your lib but i don't know how to
sign just 2 Parts and make a reference for them in the signature like this:
soapenv="http://schemas.xmlsoap.org/soap/envelope/";
xmlns:xsd="http://www.w3.org/2001/XMLSchema";
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance";>
- <soapenv:Header>
- <wsse:Security
xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd";>
<wsse:BinarySecurityToken
xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd";
EncodingType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-soap-message-security-1.0#Base64Binary";
ValueType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-x509-token-profile-1.0#X509v3";
wsu:Id="CertId-5398314">MIIDajCCAxSgAwIBAgIBKzANBgkqhkiG9w0BAQUFADBbMQswCQYDVQQGEwJERTEMMAoGA1UECBMDTlJXMQ4wDAYDVQQHEwVFc3NlbjEMMAoGA1UEChMDVFNJMQwwCgYDVQQLEwNUU0kxEjAQBgNVBAMTCWxvY2FsaG9zdDAeFw0wNzA3MjAxMTI2MTVaFw0xNzA3MTcxMTI2MTVaMGoxCzAJBgNVBAYTAkRFMQowCAYDVQQIEwFCMQ8wDQYDVQQHEwZCZXJsaW4xFTATBgNVBAoTDEZsZXhmb24gR21iSDEMMAoGA1UECxMDRFNMMRkwFwYDVQQDExBNYWhtb3VkIEVsIERhb3VkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2AYzj7C3MeHroLsbP0tlO9pUtgkYrs2qlrjWHoPSMfYn0s8mv1g/KSTG83kZvsH9l3a2DgAol4abNSK7XLKVsUSsxJDgJV6xejN4dx7GcJjxIvUKPxtKeptU7pkhLxQOYfg4OuHTjD5TTMPrqaxmwNPEo7QRRvI5A7Rv+VaLA4HgorhX+6EoguLhUuhFrjqag3CJTa3JeKTF5tz9euIdvx/53+ULjGvSCxCLz8abqNPLAR6j8BUqmI9iPnwkyslG364k6QhdmhlAWXR0/R8J2+lNhWz78QIc9zQTCepfVp5y/9msLF7OYoUmYDGgf0HIv43h/OLJcaZgMnEnNUg19wIDAQABo4HrMIHoMAkGA1UdEwQCMAAwLAYJYIZIAYb4QgENBB8WHU9wZW5TU0wgR2VuZXJhdGVkIENlcnRpZmljYXRlMB0GA1UdDgQWBBQ9py+EbHAoR/LhEX2fx9QIvfm24TCBjQYDVR0jBIGFMIGCgBSbd/5bKwuXMTzHXyKvTeub/IE6OqFfpF0wWzELMAkGA1UEBhMCREUxDDAKBgNVBAgTA05S
VzEOMAwGA1UEBxMFRXNzZW4xDDAKBgNVBAoTA1RTSTEMMAoGA1UECxMDVFNJMRIwEAYDVQQDEwlsb2NhbGhvc3SCCQDJpL3Hev69jzANBgkqhkiG9w0BAQUFAANBADffCQnJwEcdaBtOu86GicEcMGrGLg7yTF6QoXaa43qiFhrs9oDkmLr0Z9B0D5vdq3ztBU5XXxnHqXWLWdNZ57A=</wsse:BinarySecurityToken>
- <ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#";
Id="Signature-6504030">
- <ds:SignedInfo>
<ds:CanonicalizationMethod
Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"; />
<ds:SignatureMethod
Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"; />
- <ds:Reference URI="#Timestamp-27535250">
- <ds:Transforms>
<ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"; />
</ds:Transforms>
<ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"; />
<ds:DigestValue>8jNGFeIQpXdFPxgPHeCj7i77cxo=</ds:DigestValue>
</ds:Reference>
- <ds:Reference URI="#id-8949356">
- <ds:Transforms>
<ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"; />
</ds:Transforms>
<ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"; />
<ds:DigestValue>POniW5uYnA3py8dCm1iu8Yr0pac=</ds:DigestValue>
</ds:Reference>
</ds:SignedInfo>
<ds:SignatureValue>AiHlclEZneLXRCJ3qa5g0QJ/UvDv7DUwDnpbbtH3df1zPOkDkEzoDu94+eSCDJjGx1NF0ZUx/IXE
/3cfkHjBK/AfxRj72DCcgrEGUkyx27LM2eR2MjdbPZu8sXX4XhAmH0sGJLz+QHO0PqAkByKfKB+V
2EhU+RrUmAIDEtf8QFMhwSWwovk7MhZIESZ5U8VJVxvhz204zE9pcgBsY/LqRrH7lWupzd+TGu4k
Fgp7TpZoy/31CebcGlNR18DCeTwPkTkPBCJRSvEFZjbfvzR6vd1XH4BET/rwPd6n4NKLLwqoooiB
ALKtxQg/ns+MowGQYsyfk5+3IkaGO9fJwd44MA==</ds:SignatureValue>
- <ds:KeyInfo Id="KeyId-22507120">
- <wsse:SecurityTokenReference
xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd";
wsu:Id="STRId-28678543">
<wsse:Reference URI="#CertId-5398314"
ValueType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-x509-token-profile-1.0#X509v3";
/>
</wsse:SecurityTokenReference>
</ds:KeyInfo>
</ds:Signature>
- <wsu:Timestamp
xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd";
wsu:Id="Timestamp-27535250">
<wsu:Created>2007-08-10T12:11:37Z</wsu:Created>
<wsu:Expires>2007-08-10T12:16:37Z</wsu:Expires>
</wsu:Timestamp>
</wsse:Security>
</soapenv:Header>
- <soapenv:Body
xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd";
wsu:Id="id-8949356">
- <ns1:execute
xmlns:ns1="http://www.telekom.de/t-com/resaleDSL/webservices";
soapenv:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/";>
<xmldata xsi:type="xsd:string"><?xml version="1.0" encoding="UTF-8"?>
some text</xmldata>
</ns1:execute>
</soapenv:Body>
</soapenv:Envelope>
thank you for any help!!!
max pade
------------------------------------------------------------------------
Yahoo! Clever <
http://de.rd.yahoo.com/evt=48210/*http://de.answers.yahoo.com/;_ylc=X3oDMTEyYTEwYzVhBF9TAzIxMTQ3MTgxOTAEc2VjA21haWwEc2xrA3RhZ2xpbmU->
- Der einfachste Weg, Fragen zu stellen und Wissenswertes mit Anderen zu
teilen.
------------------------------------------------------------------------
_______________________________________________
xmlsec mailing list
[email protected]
http://www.aleksey.com/mailman/listinfo/xmlsec
_______________________________________________
xmlsec mailing list
[email protected]
http://www.aleksey.com/mailman/listinfo/xmlsec
