Mailing-List: contact security-dev-help@xml.apache.org; run by ezmlm
Precedence: bulk
Reply-To: security-dev@xml.apache.org
Received-SPF: pass (herse.apache.org: domain of raul.benito.garcia@gmail.com
 designates 66.249.92.173 as permitted sender)
DomainKey-Signature: a=rsa-sha1; c=nofws;
        d=gmail.com; s=beta;
        h=received:message-id:date:from:sender:to:subject:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references:x-google-sender-auth;
        b=CDO+wCvVBRy0hZiUw5EBV4KKeJqQethegY7a+1+xuHVdBK3ucmXJ1lXnvhab/fcdHDBMD2T4/JUlIDS9bI2GQaaOWZ5hW2GfptKxcQp4Daa13AxfLb9gV2QcEZofKoMdzTV3IAJrsPBb0pK6pzU3IpsxMJ/jnefSB5af8L0XXak=
Message-ID: <949ac9410706041336s3f07702ev8d5e3e1171c3bc01@mail.gmail.com>
Date: Mon, 4 Jun 2007 13:36:17 -0700
From: "Raul Benito" <raul@apache.org>
Sender: raul.benito.garcia@gmail.com
To: security-dev@xml.apache.org
Subject: Re: Signature and children - redundant namespace declarations
In-Reply-To: <465C7438.5060504@georgetown.edu>
MIME-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
References: <465C7438.5060504@georgetown.edu>

Can you post an example of the behaviour (a code and an output)?

On 5/29/07, Brent Putman <putmanb@georgetown.edu> wrote:
> When I generate a signature using XMLSignature, the library is
> redundantly adding the signature namespace declaration on every child
> element of the ds:Signature element.  Is there any way that this
> behavior can be avoided or turned off?  Am I doing something wrong?  I
> looked in the docs, I couldn't find any relevant settings, but maybe I
> missed something.
>
> It would be ideal if it could be declared only once, on the ds:Signature
> object itself.  I know it's mostly a cosmetic thing, but one of our
> OpenSAML users noticed and inquired about it, so I wanted to see if
> there is an easy solution.  If not, the only alternative I could think
> of was to post-process the DOM and remove the redundant declarations
> (before signing, of course).
>
> Thanks,
> Brent
>


-- 
http://r-bg.com