Return-Path: 
 <security-dev-return-4196-apmail-xml-security-dev-archive=xml.apache.org@xml.apache.org>
Delivered-To: apmail-xml-security-dev-archive@www.apache.org
Received: (qmail 86119 invoked from network); 11 Apr 2005 19:21:55 -0000
Received: from hermes.apache.org (HELO mail.apache.org) (209.237.227.199)
  by minotaur.apache.org with SMTP; 11 Apr 2005 19:21:55 -0000
Received: (qmail 44041 invoked by uid 500); 11 Apr 2005 19:21:51 -0000
Delivered-To: apmail-xml-security-dev-archive@xml.apache.org
Received: (qmail 44024 invoked by uid 500); 11 Apr 2005 19:21:51 -0000
Mailing-List: contact security-dev-help@xml.apache.org; run by ezmlm
Precedence: bulk
List-Post: <mailto:security-dev@xml.apache.org>
List-Help: <mailto:security-dev-help@xml.apache.org>
List-Unsubscribe: <mailto:security-dev-unsubscribe@xml.apache.org>
List-Subscribe: <mailto:security-dev-subscribe@xml.apache.org>
Reply-To: security-dev@xml.apache.org
Delivered-To: mailing list security-dev@xml.apache.org
Received: (qmail 44010 invoked by uid 99); 11 Apr 2005 19:21:51 -0000
X-ASF-Spam-Status: No, hits=0.5 required=10.0
	tests=DNS_FROM_RFC_ABUSE,HTML_40_50,HTML_MESSAGE,RCVD_BY_IP,SPF_HELO_PASS,SPF_PASS
X-Spam-Check-By: apache.org
Received-SPF: pass (hermes.apache.org: domain of raul.benito.garcia@gmail.com
 designates 64.233.170.201 as permitted sender)
Received: from rproxy.gmail.com (HELO rproxy.gmail.com) (64.233.170.201)
  by apache.org (qpsmtpd/0.28) with ESMTP; Mon, 11 Apr 2005 12:21:50 -0700
Received: by rproxy.gmail.com with SMTP id z35so2079729rne
        for <security-dev@xml.apache.org>;
 Mon, 11 Apr 2005 12:21:48 -0700 (PDT)
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
        s=beta; d=gmail.com;
        h=received:message-id:date:from:reply-to:to:subject:in-reply-to:mime-version:content-type:references;
        b=Otx+1YArMGViXmkVyp8rsFiVvPwwyjQchy0RmHqlJySYFsWVUpgDyEhqc02hknzncI8lfYjI8VItDA4/jo26NI5d7Oa+UXlRtweKXQ4vJzBmG68DvJWNAvHgDyxowL9+COzdZ6uTmJFCsFH0Q7i87lN61qZx4syFWwLzc93VeWc=
Received: by 10.38.2.70 with SMTP id 70mr4413103rnb;
        Mon, 11 Apr 2005 12:21:47 -0700 (PDT)
Received: by 10.38.97.34 with HTTP; Mon, 11 Apr 2005 12:21:47 -0700 (PDT)
Message-ID: <949ac941050411122128b6e10d@mail.gmail.com>
Date: Mon, 11 Apr 2005 21:21:47 +0200
From: Raul Benito <raul.benito.garcia@gmail.com>
Reply-To: raul@apache.org
To: security-dev@xml.apache.org
Subject: Re: .NET and Apache Java Interoperability
In-Reply-To: <425ACC37.2000607@amberpoint.com>
Mime-Version: 1.0
Content-Type: multipart/alternative;
	boundary="----=_Part_1671_7497734.1113247307910"
References: <425A41DA.506@amberpoint.com>
	 <949ac941050411023329e57ca0@mail.gmail.com>
	 <425ACC37.2000607@amberpoint.com>
X-Virus-Checked: Checked
X-Spam-Rating: minotaur.apache.org 1.6.2 0/1000/N

------=_Part_1671_7497734.1113247307910
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline

Hi Vishal,
The digest method look very weird to me:
<DigestMethod Algorithm=3D"http://www.w3.org/!
2000/09/xmldsig#sha1" />

Perhaps it something in my email, but you can take a look there.

Regards,


On Apr 11, 2005 9:12 PM, Vishal Mahajan <vmahajan@amberpoint.com> wrote:
>=20
> I've attached the soap document signed by .NET (interop_dotnet_sig.xml)=
=20
> and the certificate (apcert1.cer) to be used for verification. The=20
> reference validation fails for the soap body. Note that the 'ID Type'=20
> attribute used on the soap body is a wsu:Id and hence WssIdResolver=20
> (attached) needs to be registered with the library.
>=20
> Vishal
>=20
> Raul Benito wrote:=20
>=20
> Hi Vishal,
> can you post the document?
>=20
> On Apr 11, 2005 11:22 AM, Vishal Mahajan <vmahajan@amberpoint.com> wrote:=
=20
> >=20
> > I know this topic has been raised earlier on the list. I would like to
> > know if someone has got Apache xml-security-J interoperating with the
> > .NET (Microsoft WSE)? I've been trying to debug this for quite some
> > while now without much success. The reference validation seems to be
> > failing. The strange thing is that the document that .NET signed didn't
> > even contain any white-space, even then our library seems to be failing
> > in validating the signature, and vice versa.
> >=20
> > Vishal
> >=20
> > =20
>=20
>=20
> --=20
> http://r-bg.com=20
>=20
>=20
>=20
>=20


--=20
http://r-bg.com

------=_Part_1671_7497734.1113247307910
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline

Hi Vishal,<br>
&nbsp; The digest method look very weird to me:<br>
&lt;DigestMethod Algorithm=3D&quot;<a href=3D"http://www.w3.org/">http://ww=
w.w3.org/</a>!<br>
&nbsp;2000/09/xmldsig#sha1&quot; /&gt;<br>
<br>
Perhaps it something in my email, but you can take a look there.<br>
<br>
Regards,<br>
<br>
<br><div><span class=3D"gmail_quote">On Apr 11, 2005 9:12 PM, <b class=3D"g=
mail_sendername">Vishal Mahajan</b> &lt;<a href=3D"mailto:vmahajan@amberpoi=
nt.com">vmahajan@amberpoint.com</a>&gt; wrote:</span><blockquote class=3D"g=
mail_quote" style=3D"border-left: 1px solid rgb(204, 204, 204); margin: 0pt=
 0pt 0pt 0.8ex; padding-left: 1ex;">


 =20


I've attached the soap document signed by .NET (interop_dotnet_sig.xml)
and the certificate (apcert1.cer) to be used for verification. The
reference validation fails for the soap body. Note that the 'ID Type'
attribute used on the soap body is a wsu:Id and hence WssIdResolver
(attached) needs to be registered with the library.<br><span class=3D"sg">
<br>
Vishal</span><div><span class=3D"e" id=3D"q_10332ae8d819eaf8_2"><br>
<br>
Raul Benito wrote:
<blockquote cite=3D"http://mid949ac941050411023329e57ca0@mail.gmail.com" ty=
pe=3D"cite">Hi Vishal,<br>
can you post the document?<br>
  <br>
  <div><span class=3D"gmail_quote">On Apr 11, 2005 11:22 AM, <b class=3D"gm=
ail_sendername">Vishal Mahajan</b> &lt;<a href=3D"mailto:vmahajan@amberpoin=
t.com" target=3D"_blank" onclick=3D"return top.js.OpenExtLink(window,event,=
this)">vmahajan@amberpoint.com</a>&gt;
wrote:</span>
  <blockquote class=3D"gmail_quote" style=3D"border-left: 1px solid rgb(204=
, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">I
know this topic has been raised earlier on the list. I would like to<br>
know if someone has got Apache xml-security-J interoperating with the<br>
.NET (Microsoft WSE)? I've been trying to debug this for quite some<br>
while now without much success. The reference validation seems to be<br>
failing. The strange thing is that the document that .NET signed didn't<br>
even contain any white-space, even then our library seems to be failing<br>
in validating the signature, and vice versa.<br>
    <br>
Vishal<br>
    <br>
  </blockquote>
  </div>
  <br>
  <br>
  <br>
-- <br>
  <a href=3D"http://r-bg.com" target=3D"_blank" onclick=3D"return top.js.Op=
enExtLink(window,event,this)">http://r-bg.com</a>
</blockquote>
<br>



</span></div><br clear=3D"all"></blockquote></div><br><br><br>-- <br><a hre=
f=3D"http://r-bg.com">http://r-bg.com</a>
------=_Part_1671_7497734.1113247307910--