Re: [ebxmlms-develop] Digital signatures

SourceForge Headquarters 1320 Columbia Street Suite 310 San Diego, CA 92101 +1 (858) 422-6466

<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
 <meta http-equiv="Content-Type" content="text/html;charset=ISO-8859-1">
 <title></title>
</head>
<body>
Yes Hermes is doing that. 
How about to write a simple program which involves the XSLT and
CANONICALIZATION using exactly the way as Hermes. And then try to
verfiy the signature generated by that program by using
BusinessConnect. I guess it will be simpler to modify the
XSLT/Canonicalization parameters, and test back and forth, in that
program. Just my $0.02. 
 
Regards, -Patrick 
 
Mayne, Peter wrote: 
<blockquote type="cite"
 cite="mid...@s-...">
 <meta http-equiv="Content-Type" content="text/html; ">
 <meta name="Generator"
 content="MS Exchange Server version 5.5.2654.45">
 <title>Digital signatures</title>
 We're sending signed ebXML messages to Tibco
BusinessConnect. However, BusinesConnect isn't verifying the signatures. 
 The response from Tibco is 
 &lt;quote&gt; 
 ----------------------------------------------------------------------- 
 The Digest value for the envelope fails to match. 
 &nbsp;&nbsp; The process of Digest Calculation is as follows. 
 &nbsp;&nbsp;&nbsp; a&gt; Apply optional list of transforms which can
include XPATH, XSLT, CANONICALIZATION. 
 &nbsp;&nbsp;&nbsp; b&gt; Use the algorithm mentioned in DigestMethod
to calculate the digest. 
 &nbsp;&nbsp; Note that if step (a) is omitted and a plain digest
is calculated, the signature verification will fail. 
 ----------------------------------------------------------------------- 
 &lt;/quote&gt; 
 I presume Hermes is doing this? What can we do to
facilitate checking digital signature verification with BusinessConnect?
 PJDM 
 -- 
 Peter Mayne 
 Technology Consultant 
 Spherion Technology Solutions 
 Level 1, 243 Northbourne Avenue, Lyneham, ACT, 2602 
 T: 61 2 62689727&nbsp; F: 61 2 62689777 
 
 <pre>The information contained in this email and any attachments to it:

(a) may be confidential and if you are not the intended recipient, any interference with, 
use, disclosure or copying of this material is unauthorised and prohibited; and

(b) may contain personal information of the recipient and/or the sender as defined 
under the Privacy Act 1988 (Cth). Consent is hereby given by the recipient(s) to 
collect, hold and use such information and any personal information contained in a 
response to this email, for any reasonable purpose in the ordinary course of 
Spherion's 
business, including forwarding this email internally or disclosing it to a third party. All 
personal information collected by Spherion will be handled in accordance with 
Spherion's Privacy Policy. If you have received this email in error, please notify the 
sender and delete it.

(c) you agree not to employ or arrange employment for any candidate(s) supplied in 
this email and any attachments without first entering into a contractual agreement with 
Spherion. You further agree not to divulge any information contained in this document 
to any person(s) or entities without the express permission of Spherion.

  </pre>
  </font> </blockquote>
</body>
</html>