[xmlsec] Signing SOAP envelopes

[Juneja, Manoj]

Hi All,
         Does OASIS WSS provide the capability to include the signature
within the SOAP body? I think we can include signature only in the SOAP
header. If my understanding is wrong, can someone please point me to the
section # of WSS spec to clarify this?

Regards,
Manoj.

-----Original Message-----
From: xmlsec-bounces at aleksey.com [mailto:xmlsec-bounces at aleksey.com] On
Behalf Of Aleksey Sanin
Sent: Friday, June 04, 2004 10:10 AM
To: Erik F. Andersen
Cc: xmlsec at aleksey.com
Subject: Re: [xmlsec] Signing SOAP envelopes

> My last and hopefully final problem is how to sign a SOAP envelope? As

> far as I can determine the data to be signed is always the value of
the 
> data-node (please correct me if I'm wrong) but this will not work with
a 
> SOAP envelope!
You can sign any part or parts of a given XML document. Check XPath
and/or XPath2 transforms description in the spec.

>  
> I would also like to know if it is possible to sign multible parts of
an 
> XML independant of each other. In my case I need to sign _parts_ of
the 
> SOAP body (the signature should stay in the body) and also sign the 
> whole SOAP body (the signature should go in the SOAP header) after
parts 
> of the body has been signed.
You have to create 2 dsig:Signatures for this.

Aleksey

_______________________________________________
xmlsec mailing list
xmlsec at aleksey.com
http://www.aleksey.com/mailman/listinfo/xmlsec