Return-Path: 
 <security-dev-return-6570-apmail-xml-security-dev-archive=xml.apache.org@xml.apache.org>
Delivered-To: apmail-xml-security-dev-archive@www.apache.org
Received: (qmail 71456 invoked from network); 4 Apr 2008 20:46:39 -0000
Received: from hermes.apache.org (HELO mail.apache.org) (140.211.11.2)
  by minotaur.apache.org with SMTP; 4 Apr 2008 20:46:39 -0000
Received: (qmail 37026 invoked by uid 500); 4 Apr 2008 20:46:38 -0000
Delivered-To: apmail-xml-security-dev-archive@xml.apache.org
Received: (qmail 36901 invoked by uid 500); 4 Apr 2008 20:46:38 -0000
Mailing-List: contact security-dev-help@xml.apache.org; run by ezmlm
Precedence: bulk
List-Post: <mailto:security-dev@xml.apache.org>
List-Help: <mailto:security-dev-help@xml.apache.org>
List-Unsubscribe: <mailto:security-dev-unsubscribe@xml.apache.org>
Reply-To: security-dev@xml.apache.org
List-Id: <security-dev.xml.apache.org>
Delivered-To: mailing list security-dev@xml.apache.org
Delivered-To: moderator for security-dev@xml.apache.org
Received: (qmail 8174 invoked by uid 99); 4 Apr 2008 19:35:17 -0000
X-ASF-Spam-Status: No, hits=-0.0 required=10.0
	tests=SPF_PASS
X-Spam-Check-By: apache.org
Received-SPF: pass (athena.apache.org: local policy)
From: "Andrzej Matejko" <andrzej.matejko@ec2.pl>
To: <security-dev@xml.apache.org>
Subject: Xpath and namespace problem..
Date: Fri, 4 Apr 2008 21:33:41 +0200
Organization: EC2 sp. z o.o.
Message-ID: <003601c8968a$ca384e00$0a01a8c0@vandal>
MIME-Version: 1.0
Content-Type: text/plain;
	charset="us-ascii"
Content-Transfer-Encoding: 7bit
X-Mailer: Microsoft Office Outlook 11
Thread-Index: AciWismKzYyijmT1RyuRVUUQQw+J4w==
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3198
X-Virus-Checked: Checked by ClamAV on apache.org

Hello,

  I've go signed xml file like:
 <?xml version="1.0" encoding="UTF-8"?>
<rootnode xmlns="something.xsd">
 <ds:Signature xmlns:ds="..">
 ...<Reference>
 ....<ds:Transforms>
 ....<ds:XPath>not(ancestor-or-self::ds:Signature)</ds:XPath>
.....
 </ds:Signature>
</rootnode>

 when I try to validate it xsec fails on ds:Xpath equation resolving. (xalan
fails with error that ds prefix is not declared).
 The question is: how to make xalan to resolve xpath with namespaces?? 
 If I've debugged xalan correctly it looks for namesapces declaration in
root element only (rootnode in my example).

  Does anyone have any experience with that (or knows how to make xalan work
with namespaces prefixes declared not in root node? :))

 best regards,
 andrzeJ