oh Yes, You are correct.<br><br>I think the correct spec is :<a href="http://www.w3.org/2008/xmlsec/Drafts/xmldsig-core-11/">http://www.w3.org/2008/xmlsec/Drafts/xmldsig-core-11/</a><br><br>Regards,<br>Ashish<br><br><div class="gmail_quote">
On Wed, Aug 26, 2009 at 11:36 AM, Aleksey Sanin <span dir="ltr"><<a href="mailto:aleksey@aleksey.com">aleksey@aleksey.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
This is not xml dsig spec but widgets signature spec. I believe<br>
xmlsec supports the "signature" part of it and you can get the<br>
attributes like you describe directly from xml document.<br>
<br>
Aleksey<br>
<br>
Ashish Agrawal wrote:<br>
<blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
Hi Aleksey,<br>
<br><div class="im">
The new DSig spec refers to the new xml properties like author, distributor etc:<br>
<br></div>
Example of a distributor signature <<a href="http://www.w3.org/TR/2009/CR-widgets-digsig-20090625/#distributor-signature" target="_blank">http://www.w3.org/TR/2009/CR-widgets-digsig-20090625/#distributor-signature</a>> document, named |signature1.xml|:<div>
<div></div><div class="h5"><br>
<br>
|<?xml version="1.0" encoding="UTF-8"?><br>
<Signature xmlns="<a href="http://www.w3.org/2000/09/xmldsig#" target="_blank">http://www.w3.org/2000/09/xmldsig#</a>" Id="DistributorASignature"><br>
<br>
<SignedInfo><br>
<CanonicalizationMethod Algorithm="<a href="http://www.w3.org/2006/12/xml-c14n11" target="_blank">http://www.w3.org/2006/12/xml-c14n11</a>"/><br>
<SignatureMethod<br>
Algorithm="<a href="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256" target="_blank">http://www.w3.org/2001/04/xmldsig-more#rsa-sha256</a>"/><br>
<br>
<Reference URI="config.xml"><br>
<DigestMethod<br>
Algorithm="<a href="http://www.w3.org/2001/04/xmlenc#sha256" target="_blank">http://www.w3.org/2001/04/xmlenc#sha256</a>"/><br>
<DigestValue>...</DigestValue><br>
<br>
</Reference><br>
<Reference URI="index.html"><br>
<DigestMethod<br>
Algorithm="<a href="http://www.w3.org/2001/04/xmlenc#sha256" target="_blank">http://www.w3.org/2001/04/xmlenc#sha256</a>"/><br>
<br>
<DigestValue>...</DigestValue><br>
</Reference><br>
<Reference URI="icon.png"><br>
<DigestMethod<br>
Algorithm="<a href="http://www.w3.org/2001/04/xmlenc#sha256" target="_blank">http://www.w3.org/2001/04/xmlenc#sha256</a>"/><br>
<br>
<DigestValue>...</DigestValue><br>
</Reference><br>
<Reference URI="#prop"><br>
<DigestMethod Algorithm="<a href="http://www.w3.org/2001/04/xmlenc#sha256" target="_blank">http://www.w3.org/2001/04/xmlenc#sha256</a>"/><br>
<br>
<DigestValue>...</DigestValue><br>
</Reference><br>
</SignedInfo><br>
<Object Id="prop"> <SignatureProperties<br>
xmlns:dsp="<a href="http://www.w3.org/2009/xmldsig-properties" target="_blank">http://www.w3.org/2009/xmldsig-properties</a>"><br>
<br>
<SignatureProperty Id="profile" Target="#DistributorASignature"><br>
<dsp:Profile URI="<a href="http://www.w3.org/ns/widgets-digsig#profile" target="_blank">http://www.w3.org/ns/widgets-digsig#profile</a>"/><br>
<br>
</SignatureProperty> <SignatureProperty Id="role" Target="#DistributorASignature"><br>
<dsp:Role<br>
URI="<a href="http://www.w3.org/ns/widgets-digsig#role-distributor" target="_blank">http://www.w3.org/ns/widgets-digsig#role-distributor</a>"/><br>
<br>
</SignatureProperty> <SignatureProperty Id="identifier" Target="#DistributorASignature"><br>
<dsp:Identifier>07425f59c544b9cebff04ab367e8854a</dsp:Identifier><br>
</SignatureProperty> <br>
</SignatureProperties> </Object> <SignatureValue>...</SignatureValue><br>
<KeyInfo><br>
<X509Data><br>
<X509Certificate>...</X509Certificate><br>
</X509Data><br>
<br>
</KeyInfo><br>
<br>
Will this is supported by latest XMLSec.<br>
<br>
Regards,<br>
Ashish<br>
</Signature>|<br>
<br>
<br>
<br></div></div><div class="im">
On Fri, Jul 24, 2009 at 8:58 PM, Aleksey Sanin <<a href="mailto:aleksey@aleksey.com" target="_blank">aleksey@aleksey.com</a> <mailto:<a href="mailto:aleksey@aleksey.com" target="_blank">aleksey@aleksey.com</a>>> wrote:<br>
<br>
This spec is based on XML DSig and I looks like xmlsec<br>
should be able to handle it as-is.<br>
<br>
Aleksey<br>
<br>
<br>
Ashish Agrawal wrote:<br>
<br>
Hi Aleksey,<br>
<br>
W3C has published a new spec.<br>
<br>
W3C Widgets 1.0: Digital Signatures specification :<br>
<a href="http://www.w3.org/TR/2009/CR-widgets-digsig-20090625/" target="_blank">http://www.w3.org/TR/2009/CR-widgets-digsig-20090625/</a><br>
<br>
Do you plan to provide the same support in xmlsec.<br>
<br>
Regards,<br>
Ashish<br>
<br>
<br>
------------------------------------------------------------------------<br>
<br>
_______________________________________________<br>
xmlsec mailing list<br></div>
<a href="mailto:xmlsec@aleksey.com" target="_blank">xmlsec@aleksey.com</a> <mailto:<a href="mailto:xmlsec@aleksey.com" target="_blank">xmlsec@aleksey.com</a>><div class="im"><br>
<a href="http://www.aleksey.com/mailman/listinfo/xmlsec" target="_blank">http://www.aleksey.com/mailman/listinfo/xmlsec</a><br>
<br>
<br>
</div></blockquote>
</blockquote></div><br>