[xmlsec] more then one signature in the document

david.varas at usach.cl david.varas at usach.cl
Thu Dec 5 09:28:04 PST 2002


Aleksey:

I have a document with various signatures, in the end of the document have
to including the signature of ALL the document, like this: 

<?xml version="1.0" encoding="UTF-8" ?> 

 <Document>
 <SetDOCID="SetDoc">
 <.....>
<Doc1>
 <DocumentoID="ID1">
   <.......>
  </Documento>
  <Signature xmlns="http://www.w3.org/2000/09/xmldsig#"Id="my-signature">
  <SignedInfo>
  <CanonicalizationMethod Algorithm="http://www.w3.org/TR/2001/REC-xml-c14n-20010315"
/> 
  <SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"
/> 
 <ReferenceId="my-reference"URI="#T33F000002">
 .........
   </Signature>

  </Doc1>
  <Doc 2>
  <DocumentoID="ID2">
  <..........>
  </Documento>
  <Signature xmlns="http://www.w3.org/2000/09/xmldsig#"Id="my-signature">
  <.......>
  <ReferenceId="my-reference"URI="#T33F000003">

  </Signature>
  </Doc2>

  <Doc3>
  <DocumentoID="D3">
  <.........>
  </Documento>

  <Signature xmlns="http://www.w3.org/2000/09/xmldsig#"Id="my-signature">
  <SignedInfo>
  <CanonicalizationMethod Algorithm="http://www.w3.org/TR/2001/REC-xml-c14n-20010315"
/> 
  <SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"
/> 
  <ReferenceId="my-reference"URI="#T33F000004">
  ......
  </Signature>
  </Doc3>



  </SetDOC>

  <Signature xmlns="http://www.w3.org/2000/09/xmldsig#"Id="my-signature">
  <SignedInfo>
  <CanonicalizationMethod Algorithm="http://www.w3.org/TR/2001/REC-xml-c14n-20010315"
/> 
  <SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"
/> 
  <ReferenceId="my-reference"URI="#SetDoc">
  <......THIS IS THE FIRM OF  THE DOCUMENT>
  </Signature>
  </Document>

basicly my "document" is a lot of documents signed. but to verify the document
I get some problems with the references.

for do this, the reference id "my reference" should be null, or diferent
for each part of set DTE, it's posible make this with xmlsec or not.

Thanks






More information about the xmlsec mailing list