[xmlsec] xpath addressing

[Aleksey Sanin]

Hi, Matthias!

The "(//. | //@* | //namespace::*)" part simply selects all nodes in the
document and then the condition inside square brackets selects the
desired nodes. This way of XPath transform processing is described
in XMLDSig specification [1]. Unfortunately, I don't know a simple
way to achieve the result you want using the XPath transform.
However, there is a new XPath2 transform [2] and xmlsec does support it.
Using this transform you'll easily get what you want because it does not
require implicit "square brackets".  The downside is that less toolkits
support it thus you might have interop problems with non-xmlsec
based implementations.

Aleksey


[1] http://www.w3.org/TR/xmldsig-core/#sec-XPath
[2] http://www.w3.org/TR/xmldsig-filter2/