[xmlsec] Signing SOAP envelopes
aleksey at aleksey.com
Fri Jun 4 10:09:49 PDT 2004
> My last and hopefully final problem is how to sign a SOAP envelope? As
> far as I can determine the data to be signed is always the value of the
> data-node (please correct me if I'm wrong) but this will not work with a
> SOAP envelope!
You can sign any part or parts of a given XML document. Check XPath
and/or XPath2 transforms description in the spec.
> I would also like to know if it is possible to sign multible parts of an
> XML independant of each other. In my case I need to sign _parts_ of the
> SOAP body (the signature should stay in the body) and also sign the
> whole SOAP body (the signature should go in the SOAP header) after parts
> of the body has been signed.
You have to create 2 dsig:Signatures for this.
More information about the xmlsec