[xmlsec] Signing SOAP envelopes

Juneja, Manoj manoj.juneja at intel.com
Fri Jun 4 14:23:07 PDT 2004

If I use the enveloped signature, will I be compliant with WSS? 

-----Original Message-----
From: Rich Salz [mailto:rsalz at datapower.com] 
Sent: Friday, June 04, 2004 2:13 PM
To: Juneja, Manoj
Cc: Aleksey Sanin; Erik F. Andersen; xmlsec at aleksey.com
Subject: RE: [xmlsec] Signing SOAP envelopes

>          Does OASIS WSS provide the capability to include the
> within the SOAP body? I think we can include signature only in the
> header. If my understanding is wrong, can someone please point me to
> section # of WSS spec to clarify this?

wss is a soap header.  you can sign the whole envelope by using an
enveloped signature.  beware soap 1.2; see w3c "soap normalization"


Rich Salz                  Chief Security Architect
DataPower Technology       http://www.datapower.com
XS40 XML Security Gateway  http://www.datapower.com/products/xs40.html
XML Security Overview

More information about the xmlsec mailing list