[xmlsec] Signing SOAP envelopes

[Erik F. Andersen]

Thanks, I see it now. I still have some way to go and an example of this would be a great help. If anyone has some code they would like to share with me that shows all the steps involved in signing a SOAP envelope I would greatly appreciate it.

Regards,
Erik

> My last and hopefully final problem is how to sign a SOAP envelope? As 
> far as I can determine the data to be signed is always the value of the 
> data-node (please correct me if I'm wrong) but this will not work with a 
> SOAP envelope!
You can sign any part or parts of a given XML document. Check XPath
and/or XPath2 transforms description in the spec.

>  
> I would also like to know if it is possible to sign multible parts of an 
> XML independant of each other. In my case I need to sign _parts_ of the 
> SOAP body (the signature should stay in the body) and also sign the 
> whole SOAP body (the signature should go in the SOAP header) after parts 
> of the body has been signed.
You have to create 2 dsig:Signatures for this.

Aleksey
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://www.aleksey.com/pipermail/xmlsec/attachments/20040606/90f272cb/attachment-0002.htm