Mailing-List: contact dev-help@santuario.apache.org; run by ezmlm
Precedence: bulk
Reply-To: dev@santuario.apache.org
Received-SPF: pass (nike.apache.org: local policy)
From: "Inoguchi, Kinichiro" <Kinichiro.Inoguchi@hp.com>
To: "dev@santuario.apache.org" <dev@santuario.apache.org>
Subject: Why namespace in SignedContentItem is removed ?
Thread-Topic: Why namespace in SignedContentItem is removed ?
Thread-Index: Ac5g+o1zIjD9ZYXUS6ucXnkrCY1jxA==
Date: Tue, 4 Jun 2013 08:07:30 +0000
Message-ID: 
 <4FA49C3435EE6C4E8243055FAC810E7E8DC041D0@G9W0344.americas.hpqcorp.net>
Accept-Language: ja-JP, en-US
Content-Language: ja-JP
Content-Type: multipart/mixed;
	boundary="_003_4FA49C3435EE6C4E8243055FAC810E7E8DC041D0G9W0344americas_"
MIME-Version: 1.0

--_003_4FA49C3435EE6C4E8243055FAC810E7E8DC041D0G9W0344americas_
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

Hi,

Now I'm trying to work with detached and sibling XML signature.
I could sign to my XML, but I realized that SignedContentItem in=20
XMLSignature missed namespace I added.

Here is my XML document, and I signed to <myXml>.
<myXml> contains <myData>, and <myData> contains <myItem>.
<myItem> belongs to namespace "http://xxx.yyy.zzz/".
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D
<myPayload xmlns=3D"http://aaa.bbb.ccc/">
    <myXml xmlns:ns0=3D"http://aaa.bbb.ccc/" ns0:Id=3D"signed">
        <myData>
            <myItem xmlns=3D"http://xxx.yyy.zzz/">Item1</myItem>
        </myData>
    </myXml>
    <ds:Signature>
        ...
    </ds:Signature>
</myPayload>
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D

And SignedContentItem in XMLSignature was like below.
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D
<myXml xmlns=3D"http://aaa.bbb.ccc/" Id=3D"signed"><myData><myItem>Item1</m=
yItem></myData></myXml>
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D

I wonder why namespace is removed from <myItem>.
I'm afraid that this will causes wrong digest value calculation.

I've read the thread "vanishing attribute namespace prefixes",
but I couldn't get the conclusion by myself.

Does anyone tell me how to resolve this issue ?

I attached source code (TestMySignature.java)=20
and result (TestMySignature.txt).

Thanks.


--_003_4FA49C3435EE6C4E8243055FAC810E7E8DC041D0G9W0344americas_
Content-Type: application/octet-stream; name="TestMySignature.java"
Content-Description: TestMySignature.java
Content-Disposition: attachment; filename="TestMySignature.java"; size=4512;
	creation-date="Tue, 04 Jun 2013 06:20:57 GMT";
	modification-date="Tue, 04 Jun 2013 08:01:30 GMT"
Content-Transfer-Encoding: base64
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--_003_4FA49C3435EE6C4E8243055FAC810E7E8DC041D0G9W0344americas_
Content-Type: text/plain; name="TestMySignature.txt"
Content-Description: TestMySignature.txt
Content-Disposition: attachment; filename="TestMySignature.txt"; size=1594;
	creation-date="Tue, 04 Jun 2013 08:07:29 GMT";
	modification-date="Tue, 04 Jun 2013 08:07:29 GMT"
Content-Transfer-Encoding: base64
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==

--_003_4FA49C3435EE6C4E8243055FAC810E7E8DC041D0G9W0344americas_--