Questions tagged [xml-dsig]

XML digital signature is a standard for representing digital signatures as XML. While it can be used to sign other data, it is mainly used to sign XML documents.

XML digital signature is defined in XML Signature Syntax and Processing.

The standard mainly covers the following topics:

  • signature representation

  • definition of signed data

  • key references

  • signature generation process

106 questions
0
votes
0 answers

Quarkus - No DEBUG logs appear from Java XML Digital Signature API

I'm trying to use the Java XML Digital Signature API (https://www.oracle.com/technical-resources/articles/java/dig-signature-api.html) together with Quarkus 3.2.4. As stated in the Oracle article to enable debug logging you have to set the following…
xperjon
  • 46
  • 4
0
votes
1 answer

Signing XML (XML-DSig) using HSM and PKCS11 token in .Net Core 7.0

I have X509 certificate which contains public key only in my database. The corresponding private key is store inside HSM. I found out that SignedXml class in .NET does not support signing XML in HSM. Is there any other alternative? A replacement for…
0
votes
0 answers

XML Signature remote

We need to send a hash / digest of an XML file to a remote signing service. The signing service returns a PKCS#7 response. This includes the signature and the short-lived-x509 certificate that was used. Question: what is the easiest solution to…
beat
  • 1,857
  • 1
  • 22
  • 36
0
votes
1 answer

What is getting signed in XML Signature (XMLDsig)?

I want to parse an XML-DSIG file and it's content. I've read on wikipedia about it's structure and a little of RFC. But I can't figure out some things, let's say this is an example XML-DSIG I got:
0
votes
1 answer

XML envelopped signature with Inclusivenamespace

Writing in 4D language, I had to write low level canonicalization functions to check signature on XML. Worked fine for a dozen cases, and now I'm up to a new difficulty : the XML includes "InclusiveNamespaces" transformation. I think that's what is…
Katz
  • 165
  • 6
0
votes
1 answer

Error while signing a specific XML tag in java

I need to sign a specific XML tag with java 1.6. My XML is like this:
Roberto
  • 1
  • 1
0
votes
0 answers

How to use Xpath Transform

I'm trying to sign a UBL2.1 with xades4j but I need to exclude some tags from being singed. I used XPathTransform but the resulted digest is not valid. Here is the UBL document (not complete document for simplicity) that I'm trying to sign
0
votes
1 answer

How to generate an internally-detached XML signature in Java

I am failing to understand how to place the signature node as a sibling to the data node. The example that I have found was from Oracle, but only covered the normal detached signature, where the XML is passed as an URI to the Reference…
hllshm
  • 1
  • 2
0
votes
0 answers

How to sign XML in Scala with RFC 3275 standart?

I am looking for an implementation of automatically signing XML request with this. However I do not think it is a good idea to put values directly in the code. And I have several unclear point: How should I import (read: how it is normally done)…
chacid
  • 25
  • 8
0
votes
1 answer

Manual validation of a X.509 certificate, bundled with a document in an XML

I have a government-issued document with the following format (much was redacted as it contained some personal information), which contains a doc/docx file and a certificate, encoded in base64:
Dev-iL
  • 23,742
  • 7
  • 57
  • 99
0
votes
1 answer

wiremock soap ws-policy support?

I am wondering if anybody knows if wiremock has support for WS-Policy in regards to SOAP webservices? What I'm after is to give wiremock a WSDL that has some WS-Policy in it, that contains the "reciepe" for what the response should look like. Ie…
Joel Pearson
  • 1,622
  • 1
  • 16
  • 28
0
votes
1 answer

Storing the user name as part of the XAdES signature

Several users using a web app can electronically sign documents using the company key and certificate. The signature is produced in the XAdES format. I'd like to keep a trace, in the signature itself, of the user name who asked for signing. First,…
Cyrille
  • 348
  • 1
  • 4
  • 12
0
votes
1 answer

c# XmlDsig. Set signature elements inside root element

I have an XML like this: 123 Dadada I need to sign it with this format: (...) 123 Dadada I have…
Monks
  • 21
  • 2
0
votes
0 answers

CXF WS-Security - X509IssuerSerial validation fails

I encountered issues while working with CXF WS-Security and Signature verification. I use WSS4JInInterceptor on server side in order to verify signature over Body element. - When I usee BinarySecurityToken (DirectReference) as a key identifier type…
user2310395
  • 297
  • 3
  • 6