Mailing-List: contact security-dev-help@xml.apache.org; run by ezmlm
Precedence: bulk
Reply-To: security-dev@xml.apache.org
Received-SPF: pass (asf.osuosl.org: domain of raul.benito.garcia@gmail.com
 designates 64.233.184.197 as permitted sender)
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
        s=beta; d=gmail.com;
        h=received:message-id:date:from:sender:to:subject:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references;
        b=ouJt6ZVCH5cYnRDy+GZPF8cbMR3hLyCzc0k1CnGF8qPzBMro1kapD7LPrdCxzXRYzwhEckC67tRXhbbEAY772Re3wfgWrzxJlXZpIkaq1GmxesWXO1ZlGsLK1LtPQs9MgppZCGbVGxIpezUFeRUyJSw00QZsQZd5xOagRVfyIX4=
Message-ID: <949ac9410603231038q495d0554p20731fe9787124b4@mail.gmail.com>
Date: Thu, 23 Mar 2006 19:38:51 +0100
From: "Raul Benito" <raul@apache.org>
Sender: raul.benito.garcia@gmail.com
To: security-dev@xml.apache.org
Subject: Re: Document removes xml header
In-Reply-To: <86849E8D015FC545A1C0F6F19FC290701B5F85@majestix.RL-AG.local>
MIME-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline
References: <86849E8D015FC545A1C0F6F19FC290701B5F85@majestix.RL-AG.local>

The <?xml ...> is removed by the Canocilazation method as it is
mandated by the c14n spec.

Regards,

Raul

On 3/23/06, Michael Kail <michael.kail@rl-ag.com> wrote:
> Morning everybody!
>
> Could it be, that the java class org.w3c.dom.Document removes my xml
> header information(<?xml version=3D"1.0" encoding=3D...)???
> Before loading the xml file there is a header, after making an enveloped
> xml signature and writing it back into file there is none.
> Could it be that the Document class removes that information? Currently
> am adding the header after signing with JDOM.... But I have to open and
> parse
> The file again(ugly!).
>
> Thanxs!!!!!
>
> There's my source code, if there's any error... tell me:
>
> javax.xml.parsers.DocumentBuilderFactory dbf =3D
>                  javax.xml.parsers.DocumentBuilderFactory.newInstance();
>
>            //dbf.setNamespaceAware(true);
>
>            javax.xml.parsers.DocumentBuilder db =3D
> dbf.newDocumentBuilder();
>
>            org.w3c.dom.Document doc =3D db.parse(signatureFile);
>
>            String BaseURI =3D signatureFile.toURL().toString();
>
>
> ElementProxy.setDefaultPrefix("http://www.w3.org/2000/09/xmldsig#","");
>
>               XMLSignature sig =3D new XMLSignature(doc, BaseURI,
>
> XMLSignature.ALGO_ID_SIGNATURE_DSA);
>
>               //add signature information to document
>               Node nl =3D doc.getFirstChild();
>               nl.appendChild(sig.getElement());
>
>               Transforms transforms =3D new Transforms(doc);
>
>
> transforms.addTransform(Transforms.TRANSFORM_ENVELOPED_SIGNATURE);
>
>               //add document "archivdescriptor" to signed content
>               sig.addDocument("", transforms,
> Constants.ALGO_ID_DIGEST_SHA1);
>
>               {
>                  X509Certificate cert =3D
>                     (X509Certificate)
> ks.getCertificate(certificateAlias);
>
>                  sig.addKeyInfo(cert);
>                  sig.addKeyInfo(cert.getPublicKey());
>                  sig.sign(privateKey);
>               }
>
>               FileOutputStream f =3D new FileOutputStream(signatureFile);
>
>               XMLUtils.outputDOMc14nWithComments(doc, f);
>               f.close();
>


--
http://r-bg.com