Mailing-List: contact security-dev-help@xml.apache.org; run by ezmlm
Precedence: bulk
Reply-To: security-dev@xml.apache.org
Received-SPF: pass (hermes.apache.org: domain of raul.benito.garcia@gmail.com
 designates 64.233.170.193 as permitted sender)
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
        s=beta; d=gmail.com;
        h=received:message-id:date:from:reply-to:to:subject:in-reply-to:mime-version:content-type:content-transfer-encoding:references;
        b=sya6YmfOCBC1TBC9CGwhHtrawVpLg9Ob1603sAbgvHUiuQI5tuKOdmWcBsdIImLS05yEgkq3+d6WZefpe6HL7icVlnrWo/14Jm5Iym1qa+eW2UxZ8AnPWFsXleLYumJZLZNKzHqk65onz3GcxxYr0Ss8/YN14IolvwIdyqIZ3u8=
Message-ID: <949ac941050301111269ce602c@mail.gmail.com>
Date: Tue, 1 Mar 2005 20:12:39 +0100
From: Raul Benito <raul.benito.garcia@gmail.com>
Reply-To: raul@apache.org
To: security-dev@xml.apache.org
Subject: Re: Help - DSIG Verification
In-Reply-To: 
 <AEAE816E9FE4F243A8B008DC6966DDFE8419EB@ls-exchange-11.uk.intra.syntegra.com>
Mime-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable
References: 
 <AEAE816E9FE4F243A8B008DC6966DDFE8419EB@ls-exchange-11.uk.intra.syntegra.com>

Can you post your xml files, the two inputs and the outputs. Regards.

On Tue, 1 Mar 2005 12:54:29 -0000, Ritesh.Aswaney@syntegra.com
<Ritesh.Aswaney@syntegra.com> wrote:
> Hello Raul and everyone else,
>=20
> Thanks for the pointer, but is there something specific that you can see
> which I m doing blatantly wrong, because I've stuck to the DSig sample an=
d
> coded, so wonder why I can't verify the signature, when I m using the cor=
rect
> keys.
>=20
> One doubt, when I m not signing files, how does the Signature Verifier kn=
ow
> where it has to resolve the document which it signed reference to? Also, =
the
> verifier XMLSignature constructor, doesn't take any input algorithm. Is t=
hat
> why I am not able to verify ?
>=20
> Looking from pointers at u guys...
> Thanks,
> Ritesh
>=20
>=20
> -----Original Message-----
> From: Raul Benito [mailto:raul.benito.garcia@gmail.com]
> Sent: 01 March 2005 08:36
> To: security-dev@xml.apache.org
> Subject: Re: Help - DSIG Verification
>=20
> I haven't look in enought detail on this, so I=B4m only going to answer
> the theoricall things.
>=20
> On Fri, 25 Feb 2005 12:08:56 -0000, Ritesh.Aswaney@syntegra.com
> <Ritesh.Aswaney@syntegra.com> wrote:
> >
> >
> >
> > People,
> >
> >
> >
> > I've managed to create a DSIG with a XSLT Transform and exclusive
> > canonicalization.
> >
> > If someone can answer a few queries for me :
> >
> >
> >
> > 1)    With the code I've written below, can I be sure that the API
> > internally applies canonicalization and the XSLT Transform, before
> > calculating the Hash and finally the Signature Value ?
> Yes, the code always c14n everything that is going to be sign.
> >
> > 2)    When I invoke the verification call, it fails with the following
> > result :
> >
> >
> >
> > Gunna Sign
> >
> > Completed Signing
> >
> > Gunna Decode
> >
> > 25-Feb-2005 11:49:20 org.apache.xml.security.signature.Reference verify=
>
>=20
> > INFO: Verification successful for URI ""
> >
> > Verification Result : false
> >
> > Completed Decoding
> >
> >
> It means that the hash is correct, but the signature not.
> >
> > Why is this verification failing ? When I m passing the correct public
> key...
> > and what does the log generated by the API signify ?
> >
> > Someone please help !  I have a deadline to meet...
> >
> >
> Sorry for not helping before.
> >
> >
> >
> > public class SampleTransformXSLT {
> >
> >
> >
> >    /**+
> >
> >     * Method main
> >
> >     *
> >
> >     * @param args
> >
> >     * @throws Exception
> >
> >     */
> >
> >    public static void main(String args[]) throws Exception {
> >
> >       org.apache.xml.security.Init.init();
> >
> >
> >
> >       //J-
> >
> >       String transformStr =3D convertFileToString(new
> > File("D:/eclipse/workspace/XMLDSig/dataFiles/xslt.xslt")) ;
> >
> >
> >
> >       String inputStr =3DconvertFileToString(new
> > File("D:/eclipse/workspace/XMLDSig/dataFiles/CreateRx.xml")) ;
> >
> >       //J+
> >
> >       javax.xml.parsers.DocumentBuilderFactory dbf =3D
> >
> >          javax.xml.parsers.DocumentBuilderFactory.newInstance();
> >
> >
> >
> >       dbf.setNamespaceAware(true);
> >
> >
> >
> >       javax.xml.parsers.DocumentBuilder db =3D dbf.newDocumentBuilder()=
;>
>=20
> >       org.w3c.dom.Document doc =3D
> >
> >          db.parse(new
> > java.io.ByteArrayInputStream(transformStr.getBytes()));
> >
> >
> >
> >
> >
> >       KeyPairGenerator pairGenerator =3D KeyPairGenerator.getInstance("=
RSA");
>=20
> >
> >       KeyPair keyPair =3D pairGenerator.generateKeyPair();
> >
> >       Document sourceDoc =3D db.parse(new
> > java.io.ByteArrayInputStream(inputStr.getBytes()));
> >
> >       Document transformDoc =3D db.parse(new
> > java.io.ByteArrayInputStream(transformStr.getBytes()));
> >
> >
> >
> >       XMLSignature signer =3D new
> > XMLSignature(sourceDoc,null,XMLSignature.ALGO_ID_SIGNATURE_RSA);
> >
> >
> >
> >       sourceDoc.getDocumentElement().appendChild(signer.getElement());
> >
> >
> >
> >       Transforms transforms =3D new Transforms(sourceDoc);
> >
> >
> >
> >       transforms.addTransform(Transforms.TRANSFORM_ENVELOPED_SIGNATURE)=
;>
>=20
> >
> >
> >
> transforms.addTransform(Transforms.TRANSFORM_C14N_EXCL_OMIT_COMMENTS);
> >
> >
> >
> >       Node xslElem =3D transformDoc.getDocumentElement();
> >
> >         Node xslElemImported =3D sourceDoc.importNode(xslElem, true);
> >
> >
> >
> >         transforms.addTransform(Transforms.TRANSFORM_XSLT,
> > (org.w3c.dom.Element)xslElemImported);
> >
> >
> >
> >       signer.addDocument("",transforms,Constants.ALGO_ID_DIGEST_SHA1);
> >
> >
> >
> >       signer.addKeyInfo(keyPair.getPublic());
> >
> >
> >
> >       System.out.println("Gunna Sign");
> >
> >       signer.sign(keyPair.getPrivate());
> >
> >       System.out.println("Completed Signing");
> >
> >
> >
> >       XMLUtils.outputDOM(signer.getDocument(),new FileOutputStream(new
> > File("D:/eclipse/workspace/XMLDSig/dataFiles/sign.xml")));
> >
> >
> >
> >
> >
> >       //call to verify
> >
> >       verify(keyPair.getPublic());
> >
> >
> >
> >    }
> >
> >
> >
> >
> >
> >
> >
> >       private static String convertFileToString(File file)
> >
> >       {
> >
> >             StringBuffer buffer =3D new StringBuffer();
> >
> >             try
> >
> >             {
> >
> >                   String line =3D null;
> >
> >                   FileInputStream fin =3D new FileInputStream(file);
> >
> >                   BufferedReader reader =3D
> >
> >                         new BufferedReader(new InputStreamReader(fin));=
>
>=20
> >                   while ((line =3D reader.readLine()) !=3D null)
> >
> >                   {
> >
> >                         buffer.append(line);
> >
> >                   }
> >
> >             }
> >
> >             catch (Exception exc)
> >
> >             {
> >
> >                   exc.printStackTrace();
> >
> >             }
> >
> >             return buffer.toString();
> >
> >       }
> >
> >
> >
> >       static
> >
> >       {
> >
> >             Init.init();
> >
> >       }
> >
> >
> >
> > }
> >
> >
> >
> > public static void verify(PublicKey publicKey) throws Exception {
> >
> >
> >
> >
> >
> >       //J-
> >
> >       String inputStr =3D convertFileToString(new
> > File("D:/eclipse/workspace/XMLDSig/dataFiles/sign.xml")) ;
> >
> >
> >
> >       javax.xml.parsers.DocumentBuilderFactory dbf =3D
> >
> >          javax.xml.parsers.DocumentBuilderFactory.newInstance();
> >
> >
> >
> >       dbf.setNamespaceAware(true);
> >
> >
> >
> >       javax.xml.parsers.DocumentBuilder db =3D dbf.newDocumentBuilder()=
;>
>=20
> >
> >
> >       Document sourceDoc =3D db.parse(new
> > java.io.ByteArrayInputStream(inputStr.getBytes()));
> >
> >
> >
> >       Element dsigElement =3D
> > (Element)sourceDoc.getDocumentElement().getLastChild();
> >
> >
> >
> >       System.out.println(dsigElement.getNodeName());
> >
> >
> >
> >       XMLSignature signer =3D new XMLSignature(dsigElement,null);
> >
> >
> >
> >       System.out.println("Gunna Decode");
> >
> >       System.out.println(signer.checkSignatureValue(publicKey));
> >
> >       System.out.println("Completed Decoding");
> >
> >
> >
> >    }
> >
>=20
> ********************************************************************
>=20
> This email may contain information which is privileged or confidential. I=
f you are not the intended recipient of this email, please notify the sende=
r immediately and delete it without reading, copying, storing, forwarding o=
r disclosing its contents to any other person
> Thank you
>=20
> Check us out at http://www.bt.com/consulting
>=20
> ********************************************************************
>=20
>=20


--=20
http://r-bg.com