[xmlsec] FW: Invalid Signature - possible whitespace handling
rsalz at datapower.com
Thu Nov 20 12:27:36 PST 2003
> Behaviour is very predictable. If any tabs or CRs or LFs are disturbed
> within the SignedInfo element or any of its child elements, verification
> fails. The rest of the signature elements are not affected by tab CR or LF
> removal or insertion.
Not sure what you mean by "disturbed," but adding or removing whitespace
will significantly change the content of SignedInfo, and break the
signature. Changing CR to LF and vice-versa will not.
> Knowing you, this is probably exactly what the specification call for. Is
> this so ?
Rich Salz, Chief Security Architect
DataPower Technology http://www.datapower.com
XS40 XML Security Gateway http://www.datapower.com/products/xs40.html
XML Security Overview http://www.datapower.com/xmldev/xmlsecurity.html
More information about the xmlsec