[xmlsec] RE: Implementing WS-Security using XMLSec...

Wed, 04 Jun 2003 00:10:05 -0700

This is a multi-part message in MIME format.
--------------040302020903050300060905
Content-Type: text/plain; charset=windows-1252; format=flowed
Content-Transfer-Encoding: 7bit

> Thanks for the reply, I am sorry about not using the mailing list, 
> will make sure to use it in the future.

It would be great if you also subscribe to the list since you have to be 
subscribed
in order to post :)

> I don't have a DTD, I am using the xmlAddID function to inform LibXML2 
> about all the ID's.

Does not matter. xmlAddID() should work too.

>  Also, I am capturing the response directly from Websphere and storing 
> it to a file in binary mode.
>  
> Since there is no way I could get to the code of Websphere, do you 
> have any other suggestions on how to solve this issue?
>
I looked at your files first time with "--print-all" option I told you 
about.
xmlsec output seems perfectly valid to me. However, the c14n might
depend on the DTD/schema. If you have any kind of DTD/schema on the
Websphere side then it might screw up the digest. I don't have a WebSphere
to try it out myself so you are on your own here. And you don't need the 
code,
you just need a dump of pre-digested data. If there is a exc c14n 
function when
you might try to execute it by yourself. Also I would suggest to try 
c14n instead of
 exc c14n just to see if it will work on not.

Aleksey

--------------040302020903050300060905
Content-Type: text/html; charset=windows-1252
Content-Transfer-Encoding: 8bit

<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
  <meta http-equiv="Content-Type"
 content="text/html;charset=windows-1252">
  <title></title>
</head>
<body>
<br>
<blockquote type="cite"
 cite="mid002c01c32a5a$c1f41d10$030aa8c0@corp.arvasoft.com">
  <div><span class="653361317-03062003"><font face="Arial"
 color="#0000ff" size="2">Thanks for the reply, I am s</font></span><span
 class="653361317-03062003"><font face="Arial" color="#0000ff" size="2">orry
about not using the mailing list, will make sure to use it in the
future.</font></span></div>
</blockquote>
It would be great if you also subscribe to the list since you have to
be subscribed <br>
in order to post :)<br>
<blockquote type="cite"
 cite="mid002c01c32a5a$c1f41d10$030aa8c0@corp.arvasoft.com">
  <div><span class="653361317-03062003"></span> <span
 class="653361317-03062003"><font face="Arial" color="#0000ff" size="2">I
don't have a DTD, I am using the xmlAddID function to inform LibXML2
about all the ID's.</font></span></div>
  <div><span class="653361317-03062003"></span></div>
</blockquote>
Does not matter. xmlAddID() should work too.<br>
<br>
<blockquote type="cite"
 cite="mid002c01c32a5a$c1f41d10$030aa8c0@corp.arvasoft.com">
  <div> <span class="653361317-03062003"><font face="Arial"
 color="#0000ff" size="2">Also, I am capturing the response directly
from Websphere and storing it to a file in binary mode.</font></span></div>
  <div><span class="653361317-03062003"></span> </div>
  <div><span class="653361317-03062003"><font face="Arial"
 color="#0000ff" size="2">Since there is no way I could get to the
code of Websphere, do you have any other suggestions on how to solve
this issue?</font></span></div>
  <div><span class="653361317-03062003"></span> <br>
  </div>
</blockquote>
I looked at your files first time with "--print-all" option I told you
about.<br>
xmlsec output seems perfectly valid to me. However, the c14n might<br>
depend on the DTD/schema. If you have any kind of DTD/schema on the<br>
Websphere side then it might screw up the digest. I don't have a
WebSphere<br>
to try it out myself so you are on your own here. And you don't need
the code,<br>
you just need a dump of pre-digested data. If there is a exc c14n
function when<br>
you might try to execute it by yourself. Also I would suggest to try
c14n instead of<br>
 exc c14n just to see if it will work on not.<br>
<br>
Aleksey<br>
<br>
</body>
</html>

--------------040302020903050300060905--