Skip to main content
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] [List Home]
RE: [higgins-dev] Why does projectorg.eclipse.higgins.sts.xmlsecurity.apache (redeclare) XMLUtils.java? 
If it turns out this is true, let me know immediately as I will need to
enter a CQ to get the new version of xlmsec approved. (IPR approval is based
on the specific version.)

-----Original Message-----
From: higgins-dev-bounces@xxxxxxxxxxx
[mailto:higgins-dev-bounces@xxxxxxxxxxx] On Behalf Of Ian Hummel
Sent: Friday, June 27, 2008 12:14 PM
To: Higgins (Trust Framework) Project developer discussions
Subject: Re: [higgins-dev] Why does
projectorg.eclipse.higgins.sts.xmlsecurity.apache (redeclare) XMLUtils.java?

I found a page here that implies you need a patched xmlsec jar for cardspace
to import the cards.

	 http://wso2.org/forum/thread/1138

Mike, can you confirm?

Thanks,

- ian.


On Jun 25, 2008, at 1:15 PM, Ian Hummel wrote:

> The project org.eclipse.higgins.sts.xmlsecurity.apache has a class, 
> org.apache.xml.security.utils.XMLUtils.java and also some xml files in 
> META-INF...
>
> I noticed that  having this jar in the classpath changes the way 
> xmlsec generates or serializes signatures so I'm looking for some 
> background about this...
>
> Does anyone have any ideas?
>
>
> Without that jar on the classpath (apparently it adds some line-
> breaks?):
>
> <?xml version="1.0" encoding="UTF-8"?><ds:Signature 
> xmlns:ds="http://www.w3.org/2000/09/xmldsig#
> ">
> <ds:SignedInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#";>
> <ds:CanonicalizationMethod 
> Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#
> " xmlns:ds="http://www.w3.org/2000/09/xmldsig#"/>
> <ds:SignatureMethod 
> Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1
> " xmlns:ds="http://www.w3.org/2000/09/xmldsig#"/>
> <ds:Reference URI="#IC01" xmlns:ds="http://www.w3.org/2000/09/
> xmldsig#">
> <ds:Transforms xmlns:ds="http://www.w3.org/2000/09/xmldsig#";>
> <ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#";
> xmlns:ds="http://www.w3.org/2000/09/xmldsig#"/>
> </ds:Transforms>
> <ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1";
> xmlns:ds="http://www.w3.org/2000/09/xmldsig#"/>
> <ds:DigestValue xmlns:ds="http://www.w3.org/2000/09/
> xmldsig#">48TKiXHhdrATqVcuD6KiJQPqNGQ=</ds:DigestValue>
> ...
>
> With that jar on the classpath:
>
> <?xml version="1.0" encoding="UTF-8"?><ds:Signature 
> xmlns:ds="http://www.w3.org/2000/09/xmldsig#
> "><ds:SignedInfo xmlns:ds="http://www.w3.org/2000/09/
> xmldsig#"><ds:CanonicalizationMethod 
> Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#
> " xmlns:ds="http://www.w3.org/2000/09/xmldsig#"/><ds:SignatureMethod
> Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"; 
> xmlns:ds="http://www.w3.org/2000/09/xmldsig#
> "/><ds:Reference URI="#IC01" 
> xmlns:ds="http://www.w3.org/2000/09/xmldsig#
> "><ds:Transforms xmlns:ds="http://www.w3.org/2000/09/
> xmldsig#"><ds:Transform 
> Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#
> " xmlns:ds="http://www.w3.org/2000/09/xmldsig#"/></
> ds:Transforms><ds:DigestMethod 
> Algorithm="http://www.w3.org/2000/09/xmldsig#sha1
> " xmlns:ds="http://www.w3.org/2000/09/xmldsig#"/><ds:DigestValue
> xmlns:ds="http://www.w3.org/2000/09/
> xmldsig#">wxD7QxeMbt4VP5tLR9385Pl8U
> +Q=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue
> xmlns:ds="http://www.w3.org/2000/09/xmldsig#";>
> NekOl/NnUNyiWnMUkf/QocMxE6tyA5iu35r1/XOqa8kSyyM9H/
> FPuyz8csB2e0tVZoGj0YU4f6kp
> a5ZJ53NHbJJSG0iOq4EppdJMKXfwrgQxC
> +tVFyhLHIcP9lCIAJspIDOPCqsrYmWupTmXr1pbQb1D
> 4JnfRM05YlnJ+/OTP58=
> </ds:SignatureValue><ds:KeyInfo 
> xmlns:ds="http://www.w3.org/2000/09/xmldsig#
> "><ds:X509Data xmlns:ds="http://www.w3.org/2000/09/
> xmldsig#"><ds:X509Certificate 
> xmlns:ds="http://www.w3.org/2000/09/xmldsig#
> ">
> MIIChTCCAe4CAxAABTANBgkqhkiG9w0BAQQFADCBqzETMBEGA1UEChMKUGFyaXR5IEluYz
> EjMCEG 
> A1UECxMaUm9vdCBDZXJ0aWZpY2F0ZSBBdXRob3JpdHkxIzAhBgkqhkiG9w0BCQEWFGh1bW
> 1lbEBw 
> YXJpdHlpbmMubmV0MRAwDgYDVQQHEwdOZWVkaGFtMRYwFAYDVQQIEw1NYXNzYWNodXNldH
> RzMQsw 
> CQYDVQQGEwJVUzETMBEGA1UEAxMKSWFuIEh1bW1lbDAeFw0wODAyMTIxNTI2NTlaFw0wOT
> AyMTEx 
> NTI2NTlaMGgxCzAJBgNVBAYTAlVTMRYwFAYDVQQIEw1NYXNzYWNodXNldHRzMRMwEQYDVQ
> QKEwpQ
> ...
>
>
> _______________________________________________
> higgins-dev mailing list
> higgins-dev@xxxxxxxxxxx
> https://dev.eclipse.org/mailman/listinfo/higgins-dev

_______________________________________________
higgins-dev mailing list
higgins-dev@xxxxxxxxxxx
https://dev.eclipse.org/mailman/listinfo/higgins-dev

Back to the top