[xmlsec] XmlDSig Enveloping another xml

[Aleksey Sanin]

Apologies, too many emails to read :)

Check out examples in tests folder:

tests/aleksey-xmldsig-01/enveloping-*

Basically you need to create template with <Object> node you
need to sign

Aleksey

On 6/11/13 7:58 AM, Alexwell Sandro wrote:
> I think there was some misunderstanding, the "link" is a discussion
> about enveloped signature.
> 
> Thank you anyway.
> 
> 
> 
> 
> On Mon, Jun 10, 2013 at 10:07 PM, Aleksey Sanin <aleksey at aleksey.com
> <mailto:aleksey at aleksey.com>> wrote:
> 
>     http://www.aleksey.com/pipermail/xmlsec/2013/009563.html
> 
>     Aleksey
> 
>     On 6/10/13 9:35 AM, Alexwell Sandro wrote:
>     > Can I have access to that discussion?
>     >
>     > I cannot find...
>     > http://www.aleksey.com/pipermail/xmlsec/
>     >
>     >
>     >
>     > On Sun, Jun 9, 2013 at 10:12 PM, Aleksey Sanin
>     <aleksey at aleksey.com <mailto:aleksey at aleksey.com>
>     > <mailto:aleksey at aleksey.com <mailto:aleksey at aleksey.com>>> wrote:
>     >
>     >     There was a discussion about this a few months ago in this
>     mailing list.
>     >     Basically, xmlsec *does not* allow enveloping signatures for
>     another
>     >     xml file.
>     >
>     >     Aleksey
>     >
>     >     On 6/7/13 4:18 PM, Alexwell Sandro wrote:
>     >     > I do not know if this is the list for this question.
>     >     >
>     >     > I am try to learn about enveloping signature.
>     >     >
>     >     > If I sign another xml file, what can happen?
>     >     > I cannot find examples.
>     >     >
>     >     > *For this file:*
>     >     >
>     >     > <?xml version="1.0" encoding="ISO-8859-1"?>
>     >     > <newdoc>
>     >     >   <content>hi</content>
>     >     > </newdoc>
>     >     >
>     >     > *First case "using xmlAddChild":*
>     >     > ...
>     >     > *<ds:Object Id="obj-1236">*<newdoc>
>     >     >   <content>hi</content>
>     >     > </newdoc>*</ds:Object>*
>     >     > *</ds:Signature>*
>     >     >
>     >     > - The enconding declaration disappears...
>     >     > - Possible namespace conflit (without prefix)
>     >     >
>     >     > *Second case "using xmlNodeSetContent":*
>     >     > ...
>     >     > *<ds:Object Id="obj-1236">*/<?xml version="1.0"
>     >     > encoding="ISO-8859-1"?>&#xD;/
>     >     > /<newdoc>&#xD;/
>     >     > /  <content>hi</content>&#xD;/
>     >     > /</newdoc>/*</ds:Object>*
>     >     > *</ds:Signature>*
>     >     >
>     >     > Exists another way? What pros and cons?
>     >     >
>     >     > Can you recommend Articles.
>     >     >
>     >     > Thanks,
>     >     >
>     >     >
>     >     >
>     >     >
>     >     > _______________________________________________
>     >     > xmlsec mailing list
>     >     > xmlsec at aleksey.com <mailto:xmlsec at aleksey.com>
>     <mailto:xmlsec at aleksey.com <mailto:xmlsec at aleksey.com>>
>     >     > http://www.aleksey.com/mailman/listinfo/xmlsec
>     >     >
>     >
>     >
> 
>