Mailing-List: contact dev-help@santuario.apache.org; run by ezmlm
Precedence: bulk
Reply-To: dev@santuario.apache.org
Received-SPF: pass (nike.apache.org: domain of eric@tibco.com designates
 63.100.100.142 as permitted sender)
Message-ID: <4E66861F.7020506@tibco.com>
Date: Tue, 6 Sep 2011 22:44:15 +0200
From: Eric Johnson <eric@tibco.com>
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.6;
 rv:6.0.1) Gecko/20110830 Thunderbird/6.0.1
MIME-Version: 1.0
To: <dev@santuario.apache.org>
CC: Paul <ppage4@yahoo.com>
Subject: Re: xpath and xmlsec expression using concat
References: <loom.20110906T171452-675@post.gmane.org>
In-Reply-To: <loom.20110906T171452-675@post.gmane.org>
Content-Type: text/plain; charset="ISO-8859-1"; format=flowed
Content-Transfer-Encoding: 7bit

Hi Paul,

On 9/6/11 5:17 PM, Paul wrote:
> I know I can use xmlsec to sign an xml doc with a list of xpaths such
> as //aa, //bb, ... but what I like to do is sign a doc with this xpath
> expression:
>
> concat(substring(/Record/Name/text(),1,10), substring(/Record/Address/text
> (),1,20), ... )

I don't quite follow the intent of the XPath expression. Perhaps you can 
show a sample document, and your "expected" result?

-Eric.
>
> When I try this expr., I get this error:
>
> Can not convert #STRING to a NodeList!
>
> Now, that makes sense, but I don't have control over the xmlsec sign method so
> I'm wondering if there is another way to do this? Is there another xpath
> operator to convert a string to nodelist? Or maybe there is another way to use
> xmlsec?
>
> There is a requirement in the project I'm working on to sign just parts of the
> xml doc as one big string so that's why I was trying to use the xpath concat
> operator instead of signing individual elements but maybe the two are
> equivalent when using concat/substring?
>
>
> thanks,
> Paul.
>