<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta http-equiv="Content-Type" content="text/html;charset=ISO-8859-1">
<title></title>
</head>
<body text="#000000" bgcolor="#ffffff">
<br>
<blockquote type="cite"
cite="mid000001c35101$6ef6efc0$3b01a8c0@PCHaarek">
<div class="Section1">
<p class="MsoNormal"><font size="2" face="Arial"><span lang="EN-GB"
style="font-size: 10pt; font-family: Arial;">1) Is there a difference
between the <span class="SpellE">cannonalization</span> algorithm <br>
<a class="moz-txt-link-freetext" href="http://www.w3.org/TR/2001/REC-xml-c14n-20010315">http://www.w3.org/TR/2001/REC-xml-c14n-20010315</a>
and <br>
<a class="moz-txt-link-freetext" href="http://www.w3.org/2001/10/xml-exc-c14n#">http://www.w3.org/2001/10/xml-exc-c14n#</a> (which I seem to <br>
get from <span class="SpellE">XMLSec</span> when specifying c14
without comments)?<br>
Why the “#”
any not an exact number?</span></font></p>
</div>
</blockquote>
There are two difference C14N algorithms: XML Canonicalization [1]<br>
(with identifier <font size="2" face="Arial"><span lang="EN-GB"
style="font-size: 10pt; font-family: Arial;"><a class="moz-txt-link-freetext" href="http://www.w3.org/TR/2001/REC-xml-c14n-20010315">http://www.w3.org/TR/2001/REC-xml-c14n-20010315</a></span></font>)<br>
and Exclusive XML Canonicalization [2] (with identifier <br>
<font size="2" face="Arial"><span lang="EN-GB"
style="font-size: 10pt; font-family: Arial;"><a class="moz-txt-link-freetext" href="http://www.w3.org/2001/10/xml-exc-c14n#">http://www.w3.org/2001/10/xml-exc-c14n#</a></span></font>).
In the xmlsec, the<br>
first one has transform IDs "xmlSecTransformInclC14NId" and<br>
"xmlSecTransformInclC14NWithCommentsId" [3]. The second <br>
one (exclusive c14n) has transform ids "xmlSecTransformExclC14NId"<br>
and "xmlSecTransformExclC14NWithCommentsId" [4].<br>
<br>
Since xmlsec does not add the transform by itself, I guess<br>
that you have specified the wrong canonicalization in signature<br>
template.<br>
<font size="2" face="Arial"><span lang="EN-GB"
style="font-size: 10pt; font-family: Arial;"></span></font><br>
<blockquote type="cite"
cite="mid000001c35101$6ef6efc0$3b01a8c0@PCHaarek">
<div class="Section1">
<p class="MsoNormal"><font size="2" face="Arial"><span lang="EN-GB"
style="font-size: 10pt; font-family: Arial;"><o:p></o:p></span></font></p>
<p class="MsoNormal"><font size="2" face="Arial"><span lang="EN-GB"
style="font-size: 10pt; font-family: Arial;">2) There is still now way
of
specifying a namespace prefix in <span class="SpellE">XMLSec</span>?</span></font></p>
</div>
</blockquote>
Why? These are absolutely equvivalient nodes:<br>
"<font size="2" face="Arial"><span lang="EN-GB"
style="font-size: 10pt; font-family: Arial;"><Signature <span
class="SpellE">xmlns</span>=<a class="moz-txt-link-rfc2396E" href="http://www.w3.org/2000/09/xmldsig#">"http://www.w3.org/2000/09/xmldsig#"</a> />"<br>
and<br>
</span></font> "<font size="2" face="Arial"><span lang="EN-GB"
style="font-size: 10pt; font-family: Arial;"><ds:Signature <span
class="SpellE">xmlns:ds</span>=<a class="moz-txt-link-rfc2396E" href="http://www.w3.org/2000/09/xmldsig#">"http://www.w3.org/2000/09/xmldsig#"</a>
/>"<br>
</span></font><br>
But the second one is 6 characters longer. Any XML processor<br>
should accept both and produce same internal DOM tree (I meant<br>
that DOM tree would have same nodes, the content of the nodes<br>
would be slightly different, of course).<br>
Nothing is impossible and one can hack xmlsec to use a user defined <br>
prefix but personaly I have no idea why is it needed. If you would <br>
like to prepare such a patch look for xmlSecDSigNs and xmlSecEncNs. <br>
But I would guess it'll be a very ugly and long patch. <br>
<br>
IMO, if someone has problems with processing a valid XML then <br>
it's better to fix the code that has the problem.<br>
<br>
<br>
With best regards,<br>
Aleksey<br>
<br>
<blockquote type="cite"
cite="mid000001c35101$6ef6efc0$3b01a8c0@PCHaarek">
<div class="Section1">
<p class="MsoNormal"><font size="2" face="Arial"><span lang="EN-GB"
style="font-size: 10pt; font-family: Arial;"><o:p></o:p></span></font></p>
<p class="MsoNormal"><font size="2" face="Arial"><span lang="EN-GB"
style="font-size: 10pt; font-family: Arial;"><o:p></o:p></span></font></p>
</div>
</blockquote>
[1] <a class="moz-txt-link-freetext" href="http://www.w3.org/TR/2001/REC-xml-c14n-20010315">http://www.w3.org/TR/2001/REC-xml-c14n-20010315</a><br>
[2] <a class="moz-txt-link-freetext" href="http://www.w3.org/TR/xml-exc-c14n">http://www.w3.org/TR/xml-exc-c14n</a><br>
[3]
<a class="moz-txt-link-freetext" href="http://www.aleksey.com/xmlsec/api/xmlsec-transforms.html#XMLSECTRANSFORMINCLC14NID">http://www.aleksey.com/xmlsec/api/xmlsec-transforms.html#XMLSECTRANSFORMINCLC14NID</a><br>
[4]
<a class="moz-txt-link-freetext" href="http://www.aleksey.com/xmlsec/api/xmlsec-transforms.html#XMLSECTRANSFORMEXCLC14NID">http://www.aleksey.com/xmlsec/api/xmlsec-transforms.html#XMLSECTRANSFORMEXCLC14NID</a><br>
<br>
<br>
<br>
</body>
</html>