Questions tagged [xml-dsig]

XML digital signature is a standard for representing digital signatures as XML. While it can be used to sign other data, it is mainly used to sign XML documents.

XML digital signature is defined in XML Signature Syntax and Processing.

The standard mainly covers the following topics:

  • signature representation

  • definition of signed data

  • key references

  • signature generation process

106 questions
0
votes
0 answers

WCF service with username security should accept messages with additional ws-security headers. Is it possible?

I have an wcf service that has classical username-password message security. On transport level this service has https Binding is typical
Kirill Bestemyanov
  • 11,946
  • 2
  • 24
  • 38
0
votes
2 answers

Splitting base64 signature value in a xml signed file

I am trying to sign some XML files, which i managed to do fine, yet i can't find a way to check the signature, the receiver service accepts it fine (the xml), but it finds error on the signature. I have checked the documentation of the web service…
Glas
  • 169
  • 1
  • 3
  • 12
0
votes
1 answer

DigestValue in XML signature in java is different from PHP

This is the digest value that it was calculated in java SF4D6+PX7VB2hDbnb59a4WrWMOk= This is the digest value that I have calculated with $nodoDocumento = $doc3 ->getElementsByTagName('factura') ->item(0); $content =…
0
votes
1 answer

Verify XML Signature with libxmlsec1

I can verify a XML Signature with Apache Santuario XML security for Java. The code is like: ByteArrayInputStream bais = new ByteArrayInputStream(readData("signature.xml")); DocumentBuilderFactory f =…
Wayne Huang
  • 495
  • 6
  • 17
0
votes
1 answer

Java DOM appendChild: namespaces and signed documents

I'm having a problem generating a document with signed nodes. I have a bunch of signed XMLs, in text format. They signature is valid, I've tested it with xmlsec1. I have to load all the XMLs and put them in another XML document, for sending it to…
moretti.fabio
  • 1,128
  • 13
  • 32
0
votes
1 answer

xades4j.UnsupportedAlgorithmException: Unsupported transform on XML Signature provider

I'm trying to create a XAdES-BES signature for a given blob. For this signature, I'd need to add two transforms on the content before it is signed: Base64 (http://www.w3.org/2000/09/xmldsig#base64) & a custom one (called optional-deflate). The…
testuser
  • 952
  • 4
  • 17
  • 34
0
votes
1 answer

Java xmldsig DigestValue ( jsr105Provider apche, oracl )

I am trying to implement a java webservice client. Soap message is signed (internal detached signing). I have an example of valid message that validates as correctly signed. When I try my code, the message is not correctly signed. Trying to track…
ibonso
  • 31
  • 5
0
votes
1 answer

Problems with SignedXML in .NET

I am trying to sign a XML document using a Digital Signature. I have the certificate installed and the output seems to resemble the specification (EXCEPT the Namespace, which it seems is something I am not able to touch in .NET), however I am unable…
andreasnauta
  • 638
  • 7
  • 18
0
votes
0 answers

Verify an XML signature from SiteMinder with Ruby on Rails

I'm having trouble verifying an XML signed document that was created by SiteMinder with Ruby on Rails xmldsig gem. I cloned the gem and ran through it with the debugger, and I can't find anything wrong. It fails both [:digest_value, :signature].…
Chloe
  • 25,162
  • 40
  • 190
  • 357
0
votes
1 answer

C# why XmlDsigC14NTransform remove all whitespaces from xml

I have problem with XmlDsigC14NTransform. I trying to repeat example from http://www.di-mgt.com.au/xmldsig2.html (part Compose the canonicalized SignedInfo element and compute its SignatureValue) but my code loses whitespaces from xml and i cant…
Frank59
  • 3,141
  • 4
  • 31
  • 53
0
votes
2 answers

Java & XMLDSig: Reference with no URI

I'm trying to sign some text using XMLDSig with javax.xml.crypto.dsig.* package. I need to make a reference to some content being signed. And according to project requirements this reference should not have any URI, it means not
Bobby_Bob
  • 33
  • 6
0
votes
1 answer

From where the Digest in xmlSig is created?

From where the Digest in xmlSig is created? Its only a checksum/hash from the soap header? have some special treatment on this? thanks
0
votes
1 answer

How to implement XMLDSIG's XPath transform using LibXML2?

I'm attempting to implement the XPath transform from the XMLDSIG spec, and due to a few issues I won't go into, I can't use any additional libraries (e.g. xmlsec). The spec states that given an XPath expression: The XPath expression...is evaluated…
Mak Kolybabi
  • 344
  • 1
  • 8
0
votes
1 answer

KeyInfo in XMLDSIG

I am reasonably familiar with basic digital signing. And currently reading up on XMLDSIG. This page explains how to sign http://www.di-mgt.com.au/xmldsig.html I am unable to figure what key is stored in field of the sample output XML file on the…
user93353
  • 13,733
  • 8
  • 60
  • 122
-1
votes
1 answer

Create a correct PKCS7/CMS (ASN.1) from existing XML Signature in PHP

I have an XML digital signature, (xmlns="http://www.w3.org/2000/09/xmldsig) and I want to convert this into a PKCS7 signature. I belive I have to use an ASN.1 encoder such as https://github.com/FGrosse/PHPASN1 but I cannot understand how to create…
Patrik Grinsvall
  • 584
  • 1
  • 4
  • 22