See my answers inline below.

Aleksey

1. Does xmlsec support encryption of many parts of the document. I used –node-name and the xpath flag but it found only the first encrypted part.

You will need to run encryption multiple times for each selected
subtree manually.

2. I have went over the regression testing directory and searched for templates where the EncryptedKey is outside EncryptedData part, and so on. Can you please give me a reference to such templates?

Are you talking about <RetrievalMethod> ? There are several examples,
just search for it :)


3. I tried decrypting by xmlsec an instance generated using xmlsec, and got an error on id pointer. I discovered that if I use xml:id instead of xmlend:Id xmlsec decrypts it properly.

Section 3.2 from FAQ http://www.aleksey.com/xmlsec/faq.html :)


4. I tried decrypting more than one EncryptedData element, literally all EncryptedData elements in one pass, or find a way of specifying number of times decryption will be executed in order to decrypt all encrypted content. Is there such a configuration flag?

Nope. You will need to do decryption manually one-by-one.


_______________________________________________
xmlsec mailing list
[email protected]
http://www.aleksey.com/mailman/listinfo/xmlsec

Reply via email to