santuario-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Scott Cantor" <>
Subject RE: SignedInfo's verify method
Date Tue, 15 Dec 2009 14:56:03 GMT
> > On the server side, it looks like SignedInfo.verify call is always
> > assuming SOAP-ENV and not soapenv.

No, this code assumes nothing. What you give it is what it signs, and what
you verify can't be changed in between.
> > But if the digest of the SOAP body calculated on the the client side
> > Axis2's body (soapenv namespace), the digest does not match on the
> > side.

If something is changing the prefixes in between, that something is broken.

-- Scott

View raw message