santuario-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Martin Labarthe Dubois" <dub...@consist.com.ar>
Subject Re: Canonical Transformation
Date Fri, 10 Jun 2005 21:30:48 GMT

> > applies, by default, C14N transformation when signing xml data or if I
> > have to apply it everytime I want to sign xml content.

About this,
the texts says that only when
"the data object is a node-set and the next transform requires octets"

so in all the other cases c14n shouldn´t be applied.


----- Original Message -----
From: "Berin Lautenbach" <berin@wingsofhermes.org>
To: <security-dev@xml.apache.org>
Sent: Thursday, June 09, 2005 7:04 AM
Subject: Re: Canonical Transformation


> Should do it by default.  Having said that - it wouldn't hurt to add the
> C14n transformation explicitly for all references.
>
> Cheers,
> Berin
>
> Marina Moreno wrote:
>
> > Hi,
> >
> > I have read in XML-Signature Syntax and Processing W3C recommendation,
> > section 4.3.3.2 The Reference Processing Model, "If the data object is a
> > node-set and the next transform requires octets, the signature
> > application MUST attempt to convert the node-set to an octet stream
> > using Canonical XML [XML-C14N] ". Provided that we need to have an
> > octect stream as the input to the signing process, we have to apply C14N
> > transformation. So I would like to know if xmlsec-1.2.1 for java
> > applies, by default, C14N transformation when signing xml data or if I
> > have to apply it everytime I want to sign xml content.
> >
> > Can yo help me, pleas??
> >
> > Thank you very much in advance.
> >
> > Marina.
> >
> > _________________________________________________________________
> > Acepta el reto MSN Premium: Protección para tus hijos en internet.
> > Descárgalo y pruébalo 2 meses gratis.
> >
http://join.msn.com?XAPID=1697&DI=1055&HL=Footer_mailsenviados_proteccioninf
antil
> >
> >
> >
> >



Mime
View raw message