Return-Path: 
 <fx-dev-return-3411-apmail-ws-fx-dev-archive=ws.apache.org@ws.apache.org>
Delivered-To: apmail-ws-fx-dev-archive@www.apache.org
Received: (qmail 50365 invoked from network); 9 Jul 2005 17:10:15 -0000
Received: from hermes.apache.org (HELO mail.apache.org) (209.237.227.199)
  by minotaur.apache.org with SMTP; 9 Jul 2005 17:10:15 -0000
Received: (qmail 891 invoked by uid 500); 9 Jul 2005 17:10:14 -0000
Delivered-To: apmail-ws-fx-dev-archive@ws.apache.org
Received: (qmail 599 invoked by uid 500); 9 Jul 2005 17:10:13 -0000
Mailing-List: contact fx-dev-help@ws.apache.org; run by ezmlm
Precedence: bulk
list-help: <mailto:fx-dev-help@ws.apache.org>
list-unsubscribe: <mailto:fx-dev-unsubscribe@ws.apache.org>
List-Post: <mailto:fx-dev@ws.apache.org>
List-Id: <fx-dev.ws.apache.org>
Delivered-To: mailing list fx-dev@ws.apache.org
Received: (qmail 586 invoked by uid 99); 9 Jul 2005 17:10:13 -0000
Received: from asf.osuosl.org (HELO asf.osuosl.org) (140.211.166.49)
    by apache.org (qpsmtpd/0.29) with ESMTP; Sat, 09 Jul 2005 10:10:13 -0700
X-ASF-Spam-Status: No, hits=0.0 required=10.0
	tests=RCVD_BY_IP,SPF_HELO_PASS,SPF_PASS
X-Spam-Check-By: apache.org
Received-SPF: pass (asf.osuosl.org: domain of davanum@gmail.com designates
 64.233.170.193 as permitted sender)
Received: from [64.233.170.193] (HELO rproxy.gmail.com) (64.233.170.193)
    by apache.org (qpsmtpd/0.29) with ESMTP; Sat, 09 Jul 2005 10:10:08 -0700
Received: by rproxy.gmail.com with SMTP id 34so181992rns
        for <fx-dev@ws.apache.org>; Sat, 09 Jul 2005 10:10:07 -0700 (PDT)
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
        s=beta; d=gmail.com;
        h=received:message-id:date:from:reply-to:to:subject:cc:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references;
        b=U4ge/fyUKxp6XLfb1cU7JRXs//k6LzgmDUSU9pCBIYw6KPtPaPrm36EuYOldYfNGysNB6RH6ggmB9y6py4oUcm8HorsuoXFCUsRUFTzIwmD6Qta64lM6VjJndRPI88lDZKiBnqjl2rqaJHR6u7K1q4ZkJAkAOZCBQd4XMiv5Tm0=
Received: by 10.38.195.4 with SMTP id s4mr6125292rnf;
        Sat, 09 Jul 2005 10:10:07 -0700 (PDT)
Received: by 10.38.8.28 with HTTP; Sat, 9 Jul 2005 10:10:07 -0700 (PDT)
Message-ID: <19e0530f050709101022f9b55e@mail.gmail.com>
Date: Sat, 9 Jul 2005 13:10:07 -0400
From: Davanum Srinivas <davanum@gmail.com>
Reply-To: dims@apache.org
To: Brian Nielsen <brian@sweetxml.org>
Subject: Re: Problem checking signatures (from WSE 2.0 to wss4j) - found
 workaround
Cc: fx-dev@ws.apache.org, David Del Vecchio <ddelvecc@virginia.edu>,
	"Dittmann, Werner" <werner.dittmann@siemens.com>
In-Reply-To: <20050708211229.B1AEFD795F@mail.sweetxml.org>
Mime-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline
References: <42CA0486.5060403@virginia.edu>
	 <20050708211229.B1AEFD795F@mail.sweetxml.org>
X-Virus-Checked: Checked by ClamAV on apache.org
X-Spam-Rating: minotaur.apache.org 1.6.2 0/1000/N

thanks, am making this the default in the axis's wsdd.

-- dims

On 7/8/05, Brian Nielsen <brian@sweetxml.org> wrote:
>=20
> David gave me the key to a workaround:
>=20
> <globalConfiguration>
>   <parameter name=3D"enableNamespacePrefixOptimization" value=3D"false"/>
>   ...
>=20
> Thank you for that.
>=20
> I have not had time to grasp what exactly goes wrong, but my first though=
t
> is that it's an error and not a feature to be enabled/disabled in
> wsdd-files. Naturally that depends on what the spec says and the need for
> interop ;-).
>=20
> /Brian
>=20
>=20
>=20
>=20
>=20
>=20
> -----Original Message-----
> From: David Del Vecchio [mailto:ddelvecc@virginia.edu]
> Sent: 5. juli 2005 05:55
> To: Brian Nielsen
> Subject: Re: Problem checking signatures (from WSE 2.0 to wss4j)
>=20
> So there is an issue with Axis modifying the message XML somewhat before
> WSS4J ever gets to process the signature
> (http://issues.apache.org/jira/browse/AXIS-1624). This frequently causes
> problems with WSE<->WSS4J interop. Anyway, you should be able to disable =
the
> Axis behavior that causes this problem by adding the following to your
> server-config.wsdd or client-config.wsdd.
>=20
> <globalConfiguration>
>   <parameter name=3D"enableNamespacePrefixOptimization" value=3D"false"/>
>   ...
>=20
> Of course the problem your seeing could also be caused by something else.
>=20
> David
>=20
> Brian Nielsen wrote:
>=20
> >Werner,
> >
> >Thanks for clearing that out, so okay, the problem is the
> >certificate/signature. I've tried to create a small program to do my
> >own verification, based on the xml-sec samples with some luck, but it
> >has not help me much. I took the response i got from WSE 2.0 and tried
> >to reproduce the signature, but that can't even get the digest right.
> >I've look at some of the code inside wss4j, but it's "steeeeep" uphill
> >for me. I've attached the result i get as an XML file, with both the
> wss-stuff and my "own"
> >signature element in the header. And my program sample are inserted belo=
w.
> >
> >Has anyone had the same problem?
> >
> >Does anyone have a clue to what could be wrong or something I should
> >try out?
> >
> >Thanks in advance - any ideas will be much appreciated since I've
> >allready spend quite some time on this, and have no intention of giving
> >up :-)
> >
> >Also, I've tried switching between JDK 1.4.2 and 5.0, with some weird
> >problems, should i stick with 1.4.2 or should the be no problems with
> >either?
> >
> >Best regards
> >Brian
> >
> >
> >               org.apache.xml.security.Init.init();
> >
> >               String keystoreType =3D "PKCS12";
> >               String keystoreFile =3D "cpr.p12";
> >               String keystorePass =3D "cpr";
> >               String privateKeyAlias =3D "cpr server certificate";
> >               String privateKeyPass =3D "cpr";
> >               String certificateAlias =3D "cpr server certificate";
> >               File signatureFile =3D new File(AXIS_SIGNATURE_FILENAME);
> >
> >               KeyStore ks =3D KeyStore.getInstance(keystoreType);
> >               FileInputStream fis =3D new FileInputStream(keystoreFile)=
;
> >
> >               ks.load(fis, keystorePass.toCharArray());
> >
> >               PrivateKey privateKey =3D (PrivateKey)
> >ks.getKey(privateKeyAlias,
> >                               privateKeyPass.toCharArray());
> >               DocumentBuilderFactory dbf =3D
> >DocumentBuilderFactory.newInstance();
> >               dbf.setNamespaceAware(true);
> >
> >               DocumentBuilder db =3D dbf.newDocumentBuilder();
> >
> >               File soapFile =3D new File("dotNet-response.xml");
> >               Document soapDocument =3D db.parse(soapFile);
> >
> >               Element bodyElement =3D (Element)
> >soapDocument.getElementsByTagNameNS(
> >                               "http://schemas.xmlsoap.org/soap/envelope=
/",
> >"Body").item(0);
> >               Element headerElement =3D (Element)
> >soapDocument.getElementsByTagNameNS(
> >                               "http://schemas.xmlsoap.org/soap/envelope=
/",
> >"Header").item(0);
> >               // org.w3c.dom.Document doc =3D db.newDocument();
> >
> >               String BaseURI =3D soapFile.toURL().toString();
> >               XMLSignature sig =3D new XMLSignature(soapDocument, BaseU=
RI,
> >                               XMLSignature.ALGO_ID_SIGNATURE_RSA_SHA1,
> >
> >Canonicalizer.ALGO_ID_C14N_EXCL_OMIT_COMMENTS);
> >
> >               headerElement.appendChild(sig.getElement());
> >
> >               org.apache.ws.security.WSSConfig wssConf =3D
> >org.apache.ws.security.WSSConfig
> >                               .getDefaultWSConfig();
> >               ResourceResolverSpi eir =3D
> >EnvelopeIdResolver.getInstance(wssConf);
> >
> >               sig.addResourceResolver(eir);
> >               sig.addDocument("#Id-eb849637-bd22-465e-891c-3b713e222c15=
");
> >
> >               X509Certificate cert =3D (X509Certificate) ks
> >                               .getCertificate(certificateAlias);
> >
> >               sig.addKeyInfo(cert);
> >               // sig.addKeyInfo(cert.getPublicKey());
> >               sig.sign(privateKey);
> >
> >               FileOutputStream f =3D new FileOutputStream(signatureFile=
);
> >
> >               XMLUtils.outputDOMc14nWithComments(soapDocument, f);
> >
> >               f.close();
> >               System.out.println("Wrote signature to " + f.toString());
> >
> >               for (int i =3D 0; i <
> >sig.getSignedInfo().getSignedContentLength(); i++) {
> >                       System.out.println("--- Signed Content follows
> ---");
> >                       System.out.println(new String(sig.getSignedInfo()
> >                                       .getSignedContentItem(i)));
> >               }
> >       }
> >
> >
> >
> >
> >-----Original Message-----
> >From: Dittmann, Werner [mailto:werner.dittmann@siemens.com]
> >Sent: 29. juni 2005 16:30
> >To: Brian Nielsen; fx-dev@ws.apache.org
> >Subject: AW: Problem checking signatures
> >
> >Brian,
> >
> >the message "Verification successful for URI" means that the computed
> >digest value over the referenced part of the messag is ok.
> >
> >The SignatureValue is then computed over the part that is enclosed by
> >"<SignedInfo>" tags. If somehow this part of the message is modified
> >then the computation of the hash for this part fails. Even inserting a
> >blank or an additional linefeed causes failure - so _no_ modification
> >after Signature.
> >
> >AFAIK the SignatureValue is the hash over the SignedInfo encrypted with
> >the private key of the Signer, the check the signature decrypt with
> >public key, compute hash over SignedInfo (after checking the enclosed
> >DigestValues) and compare the results.
> >
> >Regards,
> >Werner
> >
> >
> >
> >>-----Urspr=FCngliche Nachricht-----
> >>Von: Brian Nielsen [mailto:brian@sweetxml.org]
> >>Gesendet: Mittwoch, 29. Juni 2005 14:30
> >>An: fx-dev@ws.apache.org
> >>Betreff: Problem checking signatures
> >>
> >>
> >>
> >>My scenario is signature/ecrypt request/response from wss4j to
> >>WSE2.0SP3.
> >>The request sign/encrypt goes fine, and for the reponse the decryption
> >>is also okay, but the signature fails. The strange thing is that i get
> >>the following on the console:
> >>
> >>Verification successful for URI
> >>"#Id-e1f13ac7-1af6-4f79-a76c-2489d05e3816"
> >>
> >>I can see that this message comes from the call to
> >>"sig.checkSignatureValue(certs[0]);" in WSSecurityEngine and that the
> >>return value is "false". [1] is a pretty print of the reponse, that
> >>I've confined to just signing to focus on the problem.
> >>
> >>Has anyone got an idea of what's happening and a solution? I know that
> >>there could be more information nessesary, so please write back if
> >>you've got any clues.
> >>
> >>Best regards
> >>Brian Nielsen
> >>
> >>
> >>[1]
> >><?xml version=3D"1.0" encoding=3D"utf-8"?>
> >>   <soap:Envelope
> >>xmlns:soap=3D"http://schemas.xmlsoap.org/soap/envelope/"
> >>xmlns:xsi=3D"http://www.w3.org/2001/XMLSchema-instance"
> >>xmlns:xsd=3D"http://www.w3.org/2001/XMLSchema"
> >>xmlns:wsa=3D"http://schemas.xmlsoap.org/ws/2004/03/addressing"
> >>xmlns:wsse=3D"http://docs.oasis-open.org/wss/2004/01/oasis-20040
> >>1-wss-wssecuri
> >>ty-secext-1.0.xsd"
> >>xmlns:wsu=3D"http://docs.oasis-open.org/wss/2004/01/oasis-200401
> >>-wss-wssecurit
> >>y-utility-1.0.xsd">
> >>      <soap:Header>
> >>
> >><wsa:Action>http://www.oio.dk/arkitektur/webservice/security/a
> >>tedResponse</w
> >>sa:Action>
> >>
> >><wsa:MessageID>uuid:d7a59b71-f5c8-4789-b9a9-5e27b08dbdad</wsa:
> >>MessageID>
> >>
> >><wsa:RelatesTo>uuid:3de201e3-1b79-48c7-b195-0207ea3bad58</wsa:
> >>RelatesTo>
> >>
> >><wsa:To>http://schemas.xmlsoap.org/ws/2004/03/addressing/role/
> >>anonymous</wsa
> >>:To>
> >>         <wsse:Security soap:mustUnderstand=3D"1">
> >>            <wsu:Timestamp
> >>wsu:Id=3D"Timestamp-8ba94dc8-5688-4fb9-9d05-31ccb1ec9f94">
> >>               <wsu:Created>2005-06-29T11:31:55Z</wsu:Created>
> >>               <wsu:Expires>2005-06-29T11:36:55Z</wsu:Expires>
> >>            </wsu:Timestamp>
> >>            <wsse:BinarySecurityToken
> >>ValueType=3D"http://docs.oasis-open.org/wss/2004/01/oasis-200401
> >>-wss-x509-toke
> >>n-profile-1.0#X509v3"
> >>EncodingType=3D"http://docs.oasis-open.org/wss/2004/01/oasis-200
> >>401-wss-soap-m
> >>essage-security-1.0#Base64Binary"
> >>xmlns:wsu=3D"http://docs.oasis-open.org/wss/2004/01/oasis-200401
> >>-wss-wssecurit
> >>y-utility-1.0.xsd"
> >>wsu:Id=3D"SecurityToken-0170d0e7-53ad-4bf4-8176-5598acd0a7ae">MI
> >>IELzCCAxegAwIB
> >>AgIKG07I7gAAAAAAAjANBgkqhkiG9w0BAQUFADAWMRQwEgYDVQQDEwtYbWx0b2
> >>9scyBDQTAeFw0w
> >>NDA4MTUxMzAxMDRaFw0wNTA4MTUxMzExMDRaMHYxCzAJBgNVBAYTAkRLMRUwEw
> >>YDVQQHEwxDb3Bl
> >>bmhhZ2VuIEsxJzAlBgNVBAoTHk5hdGlvbmFsIElUIGFuZCBUZWxlY29tIEFnZW
> >>5jeTENMAsGA1UE
> >>CxMETklUQTEYMBYGA1UEAxMPeG1sdG9vbHMub2lvLmRrMIGfMA0GCSqGSIb3DQ
> >>EBAQUAA4GNADCB
> >>iQKBgQCqypgPb9QasSHVapTIO5tKj9B1QyQBJqDLzCq8+j1yipiG+bOUUsj4xW
> >>CtbJq2fkw/
> >>iQKBgQCqypgPb9QasSHVapTIO5tKj9B1QyQBJqDLzCq8+j1yipiG+tOgt
> >>Cb25W0Qkd7nq8IfLcYplYlrIeniZY03nyvm2S5dXiwDC0hMME+NqDhv9JRkmKn
> >>Ho5UjOVoyv
> >>Cb25W0Qkd7nq8IfLcYplYlrIeniZY03nyvm2S5dXiwDC0hMME+DgLb
> >>bDSVQM2WK/zQLhXjxfn/yYsHDwIDAQABo4IBoTCCAZ0wDgYDVR0PAQH/BAQDAg
> >>TwMEQGCSqGSIb3
> >>DQEJDwQ3MDUwDgYIKoZIhvcNAwICAgCAMA4GCCqGSIb3DQMEAgIAgDAHBgUrDg
> >>MCBzAKBggqhkiG
> >>9w0DBzATBgNVHSUEDDAKBggrBgEFBQcDATAdBgNVHQ4EFgQUK955SSfcZEG27E
> >>fKy76R64hB4Jcw
> >>HwYDVR0jBBgwFoAUI9iI5DYhchM3V6IfXb3cq8DiJZYwZQYDVR0fBF4wXDBaoF
> >>igVoYpaHR0cDov
> >>L2l0czI2L0NlcnRFbnJvbGwvWG1sdG9vbHMlMjBDQS5jcmyGKWZpbGU6Ly9cXG
> >>l0czI2XENlcnRF
> >>bnJvbGxcWG1sdG9vbHMgQ0EuY3JsMIGIBggrBgEFBQcBAQR8MHowOwYIKwYBBQ
> >>UHMAKGL2h0dHA6
> >>Ly9pdHMyNi9DZXJ0RW5yb2xsL2l0czI2X1htbHRvb2xzJTIwQ0EuY3J0MDsGCC
> >>sGAQUFBzAChi9m
> >>aWxlOi8vXFxpdHMyNlxDZXJ0RW5yb2xsXGl0czI2X1htbHRvb2xzIENBLmNydD
> >>ANBgkqhkiG9w0B
> >>AQUFAAOCAQEAkSKwxWUsGnkLe+ogRfFBoGwVvTSpJKR41Qjri5e0LKndG7BrU8
> >>2ZmAsWreUa
> >>AQUFAAOCAQEAkSKwxWUsGnkLe+PbVp
> >>WrlrsRwoPHuwXrtm0LHRLrjKLSzkW9fxjMoKJejlKGwwNJHYi2XzumTtt7DSSw
> >>VfR6zgJrY27xKj
> >>1gs8Qm2GefZW0xIWefNZ82l0f86gaHogVVSF05v3QL5X6tnAphS0EI5PFWG+ss
> >>6ajvdcRCW0
> >>1gs8Qm2GefZW0xIWefNZ82l0f86gaHogVVSF05v3QL5X6tnAphS0EI5PFWG+k13L
> >>H9DCF5mweaHIQ5pjxCfdbMieFiDR0RF5wXPAJIAjkIkPPYF6Rewf7XPI+kDDK6
> >>/Y+8UqfLTc
> >>H9DCF5mweaHIQ5pjxCfdbMieFiDR0RF5wXPAJIAjkIkPPYF6Rewf7XPI+gJiG
> >>QUWuUq1JUAd/qCcdOujsefNAG0Uraj//2azQrtjA1sXx2V6tMw=3D=3D</wsse:Bin
> >>arySecurityTok
> >>en>
> >>            <Signature xmlns=3D"http://www.w3.org/2000/09/xmldsig#">
> >>               <SignedInfo>
> >>                  <ds:CanonicalizationMethod
> >>Algorithm=3D"http://www.w3.org/2001/10/xml-exc-c14n#"
> >>xmlns:ds=3D"http://www.w3.org/2000/09/xmldsig#" />
> >>                  <SignatureMethod
> >>Algorithm=3D"http://www.w3.org/2000/09/xmldsig#rsa-sha1" />
> >>                  <Reference
> >>URI=3D"#Id-4130cb51-eb27-4f46-aa92-c7db3e906e4c">
> >>                     <Transforms>
> >>                        <Transform
> >>Algorithm=3D"http://www.w3.org/2001/10/xml-exc-c14n#" />
> >>                     </Transforms>
> >>                     <DigestMethod
> >>Algorithm=3D"http://www.w3.org/2000/09/xmldsig#sha1" />
> >>
> >><DigestValue>iDgY5vodA7dsKqrWWXJT0ynFJzI=3D</DigestValue>
> >>                  </Reference>
> >>               </SignedInfo>
> >>
> >><SignatureValue>TQ1okwAi9CQS5vNCSxR2p2vaRKjbYF2YYx3XtOA/lhm9yk
> >>wxCQpNlOwio4U0
> >>eE3ko1IwRmG8/ATqkTEZ8AKQVsg6w3xRqTcKjs2jQPj3Q8epOsXeie6OEuYeD1
> >>wSbsPYoaP0jBAC
> >>Wbdd1TR2OMiqjEENvIPGAw9jaTz0Ldp4uSU=3D</SignatureValue>
> >>               <KeyInfo>
> >>                  <wsse:SecurityTokenReference>
> >>                     <wsse:Reference
> >>URI=3D"#SecurityToken-0170d0e7-53ad-4bf4-8176-5598acd0a7ae"
> >>ValueType=3D"http://docs.oasis-open.org/wss/2004/01/oasis-200401
> >>-wss-x509-toke
> >>n-profile-1.0#X509v3" />
> >>                  </wsse:SecurityTokenReference>
> >>               </KeyInfo>
> >>            </Signature>
> >>         </wsse:Security>
> >>      </soap:Header>
> >>      <soap:Body wsu:Id=3D"Id-4130cb51-eb27-4f46-aa92-c7db3e906e4c">
> >>         <PersonalCPRDataStructure
> >>xmlns=3D"http://rep.oio.dk/xkom.dk/xml/schemas/2004/08/01/">
> >>            <PersonName>
> >>               <PersonGivenName
> >>xmlns=3D"http://rep.oio.dk/ebxml/xml/schemas/dkcc/2003/02/13/">F
> >>ornavn</Person
> >>GivenName>
> >>               <PersonMiddleName
> >>xmlns=3D"http://rep.oio.dk/ebxml/xml/schemas/dkcc/2003/02/13/">M
> >>ellemnavn</Per
> >>sonMiddleName>
> >>               <PersonSurnameName
> >>xmlns=3D"http://rep.oio.dk/ebxml/xml/schemas/dkcc/2003/02/13/">E
> >>fternavn</Pers
> >>onSurnameName>
> >>            </PersonName>
> >>         </PersonalCPRDataStructure>
> >>      </soap:Body>
> >>   </soap:Envelope>
> >>
> >>
> >>
> >>
> >>
> >>----------------------------------------------------------------------
> >>--
> >>
> >><soap:Envelope xmlns:soap=3D"http://schemas.xmlsoap.org/soap/envelope/"
> >>xmlns:wsa=3D"http://schemas.xmlsoap.org/ws/2004/03/addressing"
> >>xmlns:wsse=3D"http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-w=
s
> >>security-secext-1.0.xsd"
> >>xmlns:wsu=3D"http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-ws=
s
> >>ecurity-utility-1.0.xsd" xmlns:xsd=3D"http://www.w3.org/2001/XMLSchema"
> >>xmlns:xsi=3D"http://www.w3.org/2001/XMLSchema-instance"><soap:Header><w=
s
> >>a:Action>http://www.oio.dk/arkitektur/webservice/security/atedResponse
> >></wsa:Action><wsa:MessageID>uuid:d8e8ba0d-e52e-4b0c-865a-dbd50628b548<
> >>/wsa:MessageID><wsa:RelatesTo>uuid:90ac9dbc-3036-4679-8738-fafd6408a82
> >>3</wsa:RelatesTo><wsa:To>http://schemas.xmlsoap.org/ws/2004/03/address
> >>ing/role/anonymous</wsa:To><wsse:Security
> >>soap:mustUnderstand=3D"1"><wsu:Timestamp
> >>wsu:Id=3D"Timestamp-641538e6-f411-4611-a772-966ea5d546b9"><wsu:Created>=
2
> >>005-07-02T12:56:02Z</wsu:Created><wsu:Expires>2005-07-02T13:01:02Z</ws
> >>u:Expires></wsu:Timestamp><wsse:BinarySecurityToken
> >>EncodingType=3D"http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss=
-
> >>soap-message-security-1.0#Base64Binary"
> >>ValueType=3D"http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-x5=
0
> >>9-token-profile-1.0#X509v3"
> >>wsu:Id=3D"SecurityToken-70385b85-b296-4f89-81a9-dd289df11e52">MIICojCCA=
g
> >>ugAwIBAgIBCDANBgkqhkiG9w0BAQQFADCBjzELMAkGA1UEBhMCREsxEzARBgNVBAgTCkNP
> >>UEVOSEFHRU4xDTALBgNVBAcTBENJVFkxFDASBgNVBAoTC0Zha2UgU1NMIENBMRQwEgYDVQ
> >>QLEwtJVCBESVZJU0lPTjEUMBIGA1UEAxMLRkFLRSBTU0wgQ0ExGjAYBgkqhkiG9w0BCQEW
> >>C2JuaUBpdHN0LmRrMB4XDTA0MDkyOTA4MDkwMloXDTA3MDkyOTA4MDkwMlowgY4xCzAJBg
> >>NVBAYTAkRLMRIwEAYDVQQIFAlCSVJLRVLDmEQxJDAiBgNVBAoTG0RFVCBDRU5UUkFMRSBQ
> >>RVJTT05SRUdJU1RFUjEVMBMGA1UECxMMQ1BSIEtPTlRPUkVUMRMwEQYDVQQDEwp3d3cuY3
> >>ByLmRrMRkwFwYJKoZIhvcNAQkBFgpjcHJAY3ByLmRrMIGfMA0GCSqGSIb3DQEBAQUAA4GN
> >>ADCBiQKBgQC31NZppksvJ1ilKuBD6flx+HOjDGr8XsOsHDnyaJ+ovGJMCbSlvP2Shdo374
> >>im2i7KsF6fZDnNdPTkolU3RxOQ+P8eSa/6qvNWutsdxVuPaB6rZwzy4gpNFP+7KvuIQZVV
> >>xOA9NMqXv1VDzBb5hV/DAcAlnyos7IjtsmsoNTX1QwIDAQABow0wCzAJBgNVHRMEAjAAMA
> >>0GCSqGSIb3DQEBBAUAA4GBAKR/kL3zvnWQr0V/zr0qNWQvUfhZBFMy03RuAJw3G51L/mhU
> >>iXH8mMPjB9uozQ9FiAzZ9mQ/Ebt7tHUNE+fgPMWg/rO2wfmwvnp0Mp/FO/5DVS4hwun+3m
> >>e6wNi5GBDmlKiOWFXWnHxKsKVEx5weAsebgeh1JijGtSGK0NZnrU8Z</wsse:BinarySec
> >>urityToken><Signature
> >>xmlns=3D"http://www.w3.org/2000/09/xmldsig#"><SignedInfo><ds:Canonicali=
z
> >>ationMethod xmlns:ds=3D"http://www.w3.org/2000/09/xmldsig#"
> >>Algorithm=3D"http://www.w3.org/2001/10/xml-exc-c14n#"></ds:Canonicaliza=
t
> >>ionMethod><SignatureMethod
> >>Algorithm=3D"http://www.w3.org/2000/09/xmldsig#rsa-sha1"></SignatureMet=
h
> >>od><Reference
> >>URI=3D"#Id-eb849637-bd22-465e-891c-3b713e222c15"><Transforms><Transform
> >>Algorithm=3D"http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Tra=
n
> >>sforms><DigestMethod
> >>Algorithm=3D"http://www.w3.org/2000/09/xmldsig#sha1"></DigestMethod><Di=
g
> >>estValue>c9AQwWWvja1uazcmo1IHKVjTckY=3D</DigestValue></Reference></Sign=
e
> >>dInfo><SignatureValue>cS+9rwDkOV7WxyFqGffRaajQ8qibO+mgotVMNbEWZGPHFNQ2
> >>oHnrz3fx6wcnDx/+0rvwaA31x9m6lFgR/Up1jiUZtipoyhgE6Ucs6VayjvS1YtaQ6fvWq8
> >>o6TDPCYfQVofam1wJbZn51H/6R4GX2a/MnAp1U0z4BC9XUyMBu1Us=3D</SignatureValu=
e
> >>><KeyInfo><wsse:SecurityTokenReference><wsse:Reference
> >>URI=3D"#SecurityToken-70385b85-b296-4f89-81a9-dd289df11e52"
> >>ValueType=3D"http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-x5=
0
> >>9-token-profile-1.0#X509v3"></wsse:Reference></wsse:SecurityTokenRefer
> >>ence></KeyInfo></Signature></wsse:Security><ds:Signature
> >>xmlns:ds=3D"http://www.w3.org/2000/09/xmldsig#">
> >><ds:SignedInfo>
> >><ds:CanonicalizationMethod
> >>Algorithm=3D"http://www.w3.org/2001/10/xml-exc-c14n#"></ds:Canonicaliza=
t
> >>ionMethod> <ds:SignatureMethod
> >>Algorithm=3D"http://www.w3.org/2000/09/xmldsig#rsa-sha1"></ds:Signature=
M
> >>ethod> <ds:Reference URI=3D"#Id-eb849637-bd22-465e-891c-3b713e222c15">
> >><ds:DigestMethod
> >>Algorithm=3D"http://www.w3.org/2000/09/xmldsig#sha1"></ds:DigestMethod>
> >><ds:DigestValue>zQG8m5qaGb0PLNarfq47qlQXwUk=3D</ds:DigestValue>
> >></ds:Reference>
> >></ds:SignedInfo>
> >><ds:SignatureValue>
> >>i+tlVaNNEyQI3v6ErjMWz8g/nsdFkwSM/aVprtsYPL6jwhmSH78LuQ0/63Ql7rkdMD/i2p
> >>i+YUkqFy
> >>SPmVAbDxfZ6DnAEPNlWf9xOPtOgjMWa02l86HpTHHKQgRTUs/POO/f1O1nxVS1HlyvTAmW
> >>CkqkQC
> >>gKPWEhrOX+8uva32SoM=3D
> >></ds:SignatureValue>
> >><ds:KeyInfo>
> >><ds:X509Data>
> >><ds:X509Certificate>
> >>MIICojCCAgugAwIBAgIBCDANBgkqhkiG9w0BAQQFADCBjzELMAkGA1UEBhMCREsxEzARBg
> >>NVBAgT
> >>CkNPUEVOSEFHRU4xDTALBgNVBAcTBENJVFkxFDASBgNVBAoTC0Zha2UgU1NMIENBMRQwEg
> >>YDVQQL
> >>EwtJVCBESVZJU0lPTjEUMBIGA1UEAxMLRkFLRSBTU0wgQ0ExGjAYBgkqhkiG9w0BCQEWC2
> >>JuaUBp
> >>dHN0LmRrMB4XDTA0MDkyOTA4MDkwMloXDTA3MDkyOTA4MDkwMlowgY4xCzAJBgNVBAYTAk
> >>RLMRIw
> >>EAYDVQQIFAlCSVJLRVLDmEQxJDAiBgNVBAoTG0RFVCBDRU5UUkFMRSBQRVJTT05SRUdJU1
> >>RFUjEV
> >>MBMGA1UECxMMQ1BSIEtPTlRPUkVUMRMwEQYDVQQDEwp3d3cuY3ByLmRrMRkwFwYJKoZIhv
> >>cNAQkB
> >>FgpjcHJAY3ByLmRrMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC31NZppksvJ1ilKu
> >>BD6flx
> >>+HOjDGr8XsOsHDnyaJ+ovGJMCbSlvP2Shdo374im2i7KsF6fZDnNdPTkolU3RxOQ+P8eSa
> >>+HOjDGr8XsOsHDnyaJ+ovGJMCbSlvP2Shdo374im2i7KsF6fZDnNdPTkolU3RxOQ+/6qvN
> >>+HOjDGr8XsOsHDnyaJ+ovGJMCbSlvP2Shdo374im2i7KsF6fZDnNdPTkolU3RxOQ+W
> >>utsdxVuPaB6rZwzy4gpNFP+7KvuIQZVVxOA9NMqXv1VDzBb5hV/DAcAlnyos7IjtsmsoNT
> >>utsdxVuPaB6rZwzy4gpNFP+X1QwID
> >>AQABow0wCzAJBgNVHRMEAjAAMA0GCSqGSIb3DQEBBAUAA4GBAKR/kL3zvnWQr0V/zr0qNW
> >>QvUfhZ
> >>BFMy03RuAJw3G51L/mhUiXH8mMPjB9uozQ9FiAzZ9mQ/Ebt7tHUNE+fgPMWg/rO2wfmwvn
> >>p0Mp/F
> >>O/5DVS4hwun+3me6wNi5GBDmlKiOWFXWnHxKsKVEx5weAsebgeh1JijGtSGK0NZnrU8Z
> >></ds:X509Certificate>
> >></ds:X509Data>
> >></ds:KeyInfo>
> >></ds:Signature></soap:Header><soap:Body
> >>wsu:Id=3D"Id-eb849637-bd22-465e-891c-3b713e222c15"><PersonalCPRDataStru=
c
> >>ture
> >>xmlns=3D"http://rep.oio.dk/xkom.dk/xml/schemas/2004/08/01/"><PersonName=
>
> >><PersonGivenName
> >>xmlns=3D"http://rep.oio.dk/ebxml/xml/schemas/dkcc/2003/02/13/">Fornavn<=
/
> >>PersonGivenName><PersonMiddleName
> >>xmlns=3D"http://rep.oio.dk/ebxml/xml/schemas/dkcc/2003/02/13/">Mellemna=
v
> >>n</PersonMiddleName><PersonSurnameName
> >>xmlns=3D"http://rep.oio.dk/ebxml/xml/schemas/dkcc/2003/02/13/">Efternav=
n
> >></PersonSurnameName></PersonName></PersonalCPRDataStructure></soap:Bod
> >>y></soap:Envelope>
> >>
>=20
>=20
>=20
>=20


--=20
Davanum Srinivas -http://blogs.cocoondev.org/dims/