Hi Aleksey, I would like to work on providing the latest canonical support, can u give me some pointers on the areas in the code where i need to foucs for the changes.
Regards, Ashish On Mon, Jun 1, 2009 at 9:06 PM, Aleksey Sanin <[email protected]> wrote: > Sure, I see your point. Well, I haven't seen a lot of interest > in C14N 1.1 support so far. BTW, C14N is a part of LibXML2. > If you need C14N 1.1, then I am sure that Daniel will be happy > to apply your patches to the main tree. > > Aleksey > > > Ashish Agrawal wrote: > >> Hi Aleksey, >> >> Thanks for prompt reply. >> >> The basis of my argument is the newer Widgets DSig specifies certain fixed >> values for Canonicalizationmethod & Digest Method. >> >> Eg: >> <?xml version="1.0" encoding="UTF-8"?> >> <Signature xmlns="http://www.w3.org/2000/09/xmldsig#"> >> <SignedInfo> >> <CanonicalizationMethod >> Algorithm="http://www.w3.org/2006/12/xml-c14n11"/> >> <SignatureMethod >> Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256" >> /> >> <Reference URI="config.xml"> >> <DigestMethod Algorithm=" >> http://www.w3.org/2001/04/xmlenc#sha256"/> >> <DigestValue>j6...8nk=</DigestValue> >> </Reference> >> <Reference URI="index.html"> >> <DigestMethod Algorithm=" >> http://www.w3.org/2001/04/xmlenc#sha256"/> >> <DigestValue>lm...34=</DigestValue> >> </Reference> >> <Reference URI="icon.png"> >> <DigestMethod Algorithm=" >> http://www.w3.org/2001/04/xmlenc#sha256"/> >> <DigestValue>pq...56=</DigestValue> >> </Reference> >> </SignedInfo> >> <SignatureValue>MC0E~LE=</SignatureValue> >> <KeyInfo> >> <X509Data> >> <X509Certificate>MI...lVN</X509Certificate> >> </X509Data> >> </KeyInfo> >> </Signature> >> >> >> So when i create a signature file with the abov mentioned canonicalizaiton >> and Digest method, xmlsec fails. >> Pls clarify. >> >> Regards, >> Ashish >> >> On Mon, Jun 1, 2009 at 8:55 PM, Aleksey Sanin <[email protected]<mailto: >> [email protected]>> wrote: >> >> xmlsec implements XML DSig and the Widgets DSig is just >> a profile of XML DSig. Thus, I don't see why you claim >> that xmlsec doesn't support it. >> >> Aleksey >> >> Ashish Agrawal wrote: >> >> Hi Aleksey, >> >> I need to support >> *http://www.w3.org/TR/2009/WD-widgets-digsig-20090331/* >> and seems that current version of xmlsec doesn't support it, Is >> there any plan for it. >> >> Regards, >> Ashish >> >> On Mon, Jun 1, 2009 at 8:02 PM, Aleksey Sanin >> <[email protected] <mailto:[email protected]> >> <mailto:[email protected] <mailto:[email protected]>>> wrote: >> >> https://www.aleksey.com/xmlsec/xmldsig.html >> >> Aleksey >> >> Ashish Agrawal wrote: >> >> Hi Aleksey, >> >> i want to know which standards of DigestMethod and >> Canonicalization Method is supported by xmlsec currently. >> >> I ve a requirement where i ve the Digest method as: >> http://www.w3.org/2000/09/xmldsig#sha256 and >> Canonicalization >> methord as : http://www.w3.org/2006/12/xml-c14n11. >> Will this be supported ? >> >> ~Ashish >> >> >> >> ------------------------------------------------------------------------ >> >> _______________________________________________ >> xmlsec mailing list >> [email protected] <mailto:[email protected]> >> <mailto:[email protected] <mailto:[email protected]>> >> >> http://www.aleksey.com/mailman/listinfo/xmlsec >> >> >> >> >> ------------------------------------------------------------------------ >> >> _______________________________________________ >> xmlsec mailing list >> [email protected] <mailto:[email protected]> >> http://www.aleksey.com/mailman/listinfo/xmlsec >> >> >>
_______________________________________________ xmlsec mailing list [email protected] http://www.aleksey.com/mailman/listinfo/xmlsec
