xml dsig streaming impl.

View: New views
2 Messages — Rating Filter:   Alert me  

xml dsig streaming impl.

by Styrman, Igor :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message

Some parts of this message have been removed. Learn more about Nabble's security policy.
Hello,
 
i run into a document at w3c.org/next steps from 2007 describing Raul Benito being involved with STaX-based XML Digital Signature. I'm wondering whats the status of this project?
 
Thanks,
 
Igor Styrman
 

Re: xml dsig streaming impl.

by sean.mullan :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message

There's an implementation available, but just be warned it is very much a work
in progress (actually nobody has worked on it for a while) and does not support
all of the XML Signature features. In particular, the following are not
supported: signature generation, inclusive c14n, enveloped signatures, xpath
transform, and backward references (those appearing before the signature). You
can get it from the svn repository:

svn co https://svn.apache.org/repos/asf/xml/security/branches/stax_jsr105

XML Signature 2.0 is currently being worked on and one of the requirements is to
enable it to better support streaming implementations. So we should try to adapt
the STaX implementation as that specification progresses.

Thanks,
Sean

Styrman, Igor wrote:

> Hello,
>  
> i run into a document at w3c.org/next steps from 2007 describing Raul
> Benito being involved with STaX-based XML Digital Signature. I'm
> wondering whats the status of this project?
>  
> Thanks,
>  
> Igor Styrman
>