Questions tagged [xml-dsig]

XML digital signature is a standard for representing digital signatures as XML. While it can be used to sign other data, it is mainly used to sign XML documents.

XML digital signature is defined in XML Signature Syntax and Processing.

The standard mainly covers the following topics:

  • signature representation

  • definition of signed data

  • key references

  • signature generation process

106 questions
1
vote
1 answer

WS Security signing with com.ibm.crypto.provider.RSAPrivateCrtKey

I am using CXF ws secuirty to create a client to send a WS Security SOAP envelope to a thuird party. When I send the request from my local Tomcat server, I get a 200 response, however, when I deploy to websphere, I get a 500 response. I have…
franzke
  • 517
  • 1
  • 6
  • 18
1
vote
1 answer

URI in XML-DSIG and digest calculation

I am analyzing an XML-DSIG file in order to know how to write my piece of software code that generates XML-DSIGnatures. I am having this trouble and desperately need help... I am trying to understand this bit from signatures0.xml (quoted after this…
user4469411
1
vote
0 answers

Verifying SignedXml with dsig prefix

I'm trying to generate SignedXML with dsig prefix (which I have managed to do thanks to George Dima's answer in xml signature DS prefix?). The problem is that the CheckSignature method is now returning false - I am thinking that this method may also…
1
vote
1 answer

xades4j: how to produce an signature with a transform in the signedproperties reference

I received an example xades signature that I have to reproduce using xades4j ("like a template"). The example signature is this (an excerpt):
brun0sa
  • 104
  • 7
1
vote
1 answer

Error using XAdES4j to produce a detached signature with a xpath transform

I'm using the xades4j for produce xades signatures. I want to include a xpath transform in a reference. My problem is the fact that it is a detached signature and the xpath has namespaces... I tried with the following xml (an excerpt):
brun0sa
  • 104
  • 7
1
vote
1 answer

Different DigestValue for the same XML document

I have signed xml document here The digest value of the document is atHP855e32qDMu4fzAZr+wXRqfeLh9HTpnAlAFy/jDg= When I try to check it with code below the result is Ppk6zE8XY4zaIPco/fY/sSKog3imkmko8CMAIHVNwTw= I think the problem is in Body tag…
Max Kilovatiy
  • 798
  • 1
  • 11
  • 32
1
vote
1 answer

digitally sign XML file with PHP

I need to sign a XML file with a private RSA key to be verified with my C# application. When I sign the xml with my C# application, this is the final output:
1
vote
1 answer

Java X509Certificate issuer validation

I'm implementing communication using X509Certificates and are struggling with validating the certificate. I've gotten a "parent" certificate that is self-signed and used to sign all other certificates. This has been done and I've gotten the…
Hiny
  • 195
  • 7
  • 21
1
vote
2 answers

.Net 4.0 C# When loading SHA256 key SignatureAlgorithm changes to SHA1

I'm struggling with this now a whole week and hope someone could help me out. I need to sign xml using SHA256 and xmldsig. For this I use the SignedXML Class. When looking into this class I see it uses the SignatureAlgorithm value of the loaded key…
user2506299
  • 31
  • 1
  • 5
1
vote
0 answers

How to sign with silverlight a database registry

I have my key pair in Silverlight client and I want to sign a database registry. Is this possible? What kind of XML will I generate? Detached, enveloped, enveloping? I tried an example I found on the internet but it uses the System.Cryptography…
1
vote
0 answers

WCF - SignedXml.CheckSignature failing on signed soap body

I'm trying to validate a signature on a signed SOAP message. (Just to get this out of the way, I have no control at all over the message I'm receiving) The Body of the message is signed and sent over by a Java appliance. The…
Jacob
  • 505
  • 3
  • 8
  • 23
1
vote
2 answers

How do I sign an MTOM SOAP message using SOAPHandlers?

Currently, I have two handlers, one for logging and one for signing the SOAP message (which inherently tampers with the SOAP message). Without the handler chain, MTOM works as expected, inserting a reference to the binary content, rather than…
speedRS
  • 1,190
  • 2
  • 10
  • 17
1
vote
3 answers

Xsd2Code and xmldsig

I have a problem with generating code from xsd with Xsd2Code. The xsd looks like this:
redman
  • 2,115
  • 5
  • 32
  • 59
1
vote
1 answer

Can I verify an XMLDSIG signature in .NET without requiring the root certificate be installed?

I'd like to use XMLDSIG for verifying that a .config file has not been tampered with. I also want to be able to verify the signature chain so that I can trust the signature. I've got three certificates in the chain: Root CA -> Intermediate Signing…
Roger Lipscombe
  • 89,048
  • 55
  • 235
  • 380
0
votes
1 answer

.NET doesn't support non-standard XMLDSIG signature element names

I'm trying to implement an industry spec that requires enveloped XML digital signatures (XMLDSIG). Instead of conforming to the examples () my spec uses its own name for the signature element:
yzorg
  • 4,224
  • 3
  • 39
  • 57