java - XML Signature Reference digest uses parent namespace -

-

i need sign xml-file in java, needs contain 3 references.
while 2 of them valid (expected digest == actual digest), 1 invalid.
relevant part of xml looks like: 

<qualifyingproperties xmlns="http://uri.etsi.org/01903/v1.3.2#" target="signature1">     <signedproperties id="signedproperties_1">         <signedsignatureproperties>             <signingtime>2014-11-27t13:49:36</signingtime>         </signedsignatureproperties>     </signedproperties> </qualifyingproperties>

the reference references element "signedproperties" , children.
can see "qualifyingproperties" element defines namespace (xmlns="http://uri.etsi.org/01903/v1.3.2#") , guess thats problem:

after having @ log found, "pre-digest" value looks like: 

<signedproperties xmlns="http://uri.etsi.org/01903/v1.3.2#" id="signedproperties_1">     <signedsignatureproperties>         <signingtime>2014-11-27t13:49:36</signingtime>     </signedsignatureproperties> </signedproperties>

while "signedproperties" element in real file not contain namespace, parent does.
found out, actual digest matches sha-256 of "pre-digest" value, while expected digest matches sha-256 of real file (without namespace).

the reference created following code:

reference sigpropref = fac.newreference("#signedproperties_1", fac.newdigestmethod(digestmethod.sha256, null),     collections.singletonlist(sigproptransform), "http://uri.etsi.org/01903#signedproperties", "reference-signedpropeties" );

where sigproptransform canonicalizationmethod.exclusive transform.

my question is, how can solve problem, i.e. how can prevent namespace added "signedproperties" element, before calculating digest?

if need other informations please leave comment, pretty new theme, not sure informations relevant , not.
lot!

edit: after playing arround bit, seems me, "actual digest" digest, validator calculated, while "expected digest" digest inside "digestvalue" element.
means, digest value inside file matches sha-256 of referenced filepart, validator reason calculates digest parents namespace.
guess need include parents namespace in digest calculation.

edit: continued playing arround , have not pre-digest value of validator 1 of "digest calculation".
1 gives me: 

<signedproperties id="signedproperties_1"><signedsignatureproperties><signingtime>2014-11-27t15:51:26</signingtime></signedsignatureproperties></signedproperties>

when give following transform: 

transform sigproptransform = fac.newtransform(canonicalizationmethod.exclusive, (excc14nparameterspec)null);

and: 

<signedproperties xmlns:ds="some-url" xmlns:msg="some-other-url" id="signedproperties_1"><signedsignatureproperties><signingtime>2014-11-27t15:52:49</signingtime></signedsignatureproperties></signedproperties>

when don't give transform.
namespace xmlns="http://uri.etsi.org/01903/v1.3.2#" never included.

how include it?

i'm afraid cannot prevent adding namespace - it's being add during canonicalizaton. this 1 helped me when had identical issue ;)


Comments

Post a Comment

Popular posts from this blog

matlab - "Contour not rendered for non-finite ZData" -

-
i'm trying plot frequency characteristic equation using ezplot, matlab gives following warning, "contour not rendered non-finite zdata". have used command plot frequency equations warning , plot display empty , not change axis range well. can please help. appreciated. here's code i'm using. % transfer matrix case-i, thin rotor clear all; clc; ei = 1626; l = 0.15; m = 0.44108; = 2.178*10^-4; i_p = 2.205*10^-5; itr = 0.24; i_pr = 0.479; syms p n; f = [1 l*1i l^2/(2*ei)*1i l^3/(6*ei); 0 1 l/ei -l^2/(2*ei)*1i; 0 0 1 -l*1i; 0 0 0 l]; p = [ 1 0 0 0; 0 1 0 0; 0 -it*p^2+i_p*n*p 1 0; -m*p^2 0 0 1]; p_r = [1 0 0 0; 0 1 0 0; 0 -itr*p^2+i_pr*n*p 1 0; -m*p^2 0 0 1]; = f*p*f*p*f*p*f; b = p_r*f*p*f*p*f; r = a(1,2)/a(1,4); a12_p = 0; a22_p = a(2,2)-r*a(2,4); a32_p = a(3,2)-r*a(3,4); a42_p = a(4,2)-r*a(4,4); ap(2,2) = a22_p; ap(3,2) = a32_p; ap(4,2) = a42_p; ap(4,4) = 1; c = b*ap; m = [c(3,2) c(3,4); c(4,2) c(4,...
Read more

delphi - Indy UDP Read Contents of Adata -

-
i using indy udp server read string of data. however, not know how work adata parameter. can around converting binary using bytetobin function below , convert hex using bintohex1 . feel stupid , works slow. know how can directly results without 2 conversions? thanks!! here codes: procedure tform1.idudpserver1udpread(athread: tidudplistenerthread; const adata: tidbytes; abinding: tidsockethandle); var buf: tidbytes; buffer: string; data_received: string; begin if bytestostring(adata) <> 'hello' begin buffer := hextostring('00'); setlength(buf, length(buffer)); copytidstring(buffer, buf, 0); abinding.sendto(abinding.peerip, abinding.peerport, buf); data_received := bintohex1(bytetobin(adata[1]) + bytetobin(adata[2]) + bytetobin(adata[3]) + bytetobin(adata[4]) + bytetobin(adata[5]) + bytetobin(adata[6]) + bytetobin(adata[7]) + bytetobin(adata[8]) + bytetobin(adata[9]) + bytetobin(adata[10]) + bytetobin(adata[11...
Read more

javascript - Any ideas when Firefox is likely to implement lengthAdjust and textLength? -

-
any ideas when firefox implement lengthadjust andtextlength?..... working svg application. lengthadjust , textlength working fine in chrome not working in fire fox . <svg viewbox = "0 0 500 300" version = "1.1"> <defs> <path id="s3" d="m 10,90 q 100,15 200,70" /> </defs> <g> <text font-size = "20"> <textpath xlink:href="#s3" textlength="205"> short text</textpath> </text> <use xlink:href="#s3" fill="none" stroke="black" stroke-width="1"/> </g> </svg> this implemented in firefox text elements (not textpath or tspan) in case that's ok though can move attribute text element. <svg viewbox = "0 0 500 300" version = "1.1"> <defs> ...
Read more