[xmlsec] How to change to "enveloping signature"

Aleksey Sanin aleksey at aleksey.com
Fri Nov 11 00:59:17 PST 2005


1) Add dsig:Object element to the template using
xmlSecTmplSignatureAddObject() function (you'll
need to generate and remember unique id, it will
be used soon). Then put the content that you want to
sign *under* this dsig:Object element
2) Change xmlSecTmplSignatureAddReference() call
to set the URI to reference the dsig:Object element
(e.g. if you dsig:Object element id is 'myid' then
use URI '#myid').
3) Get rid of "xmlSecTmplReferenceAddTransform(..,
xmlSecTransformEnvelopedId) call.

If I am not missing something, this should do it.

Aleksey



More information about the xmlsec mailing list