|
From: Ronald v. K. <rv...@ab...> - 2003-06-25 10:56:18
|
Ng Chi Yuen [Cyng] probeerde het volgende duidelijk te maken op 25-6-2003 10:36: <snip/> > As said, we ultimate goal should be switching to Axis. However, >Axis currently has a really "nice" feature. It would serialize the XML >document in a pretty way by adding indenting white spaces. My colleague >and I ever trace the source codes and it seems that there is no way to >call SAAJ method to disable such a "nice" feature. After signing with >digital signature, the serialization breaks it. This is the reason why >up to now, I do not yet upload Axis libraries into lib/. > > I've read in some newsgroups/mailinglists that lots of people have a problem with this (e.g. opensaml) As a workaround they write: <scott cantor> If you can use Axis to get hold of the SOAP DOM (the envelope), what you can do is write your own code to output the DOM using the c14n algorithm inside xmlsec. I don't expose that because I'm trying to hide my use of xmlsec inside. But you can always import and call those methods directly. Just look at toStream() in any of the SAML classes to see how to do it. </scott cantor> see http://marsalis.internet2.edu/cgi-bin/viewcvs.cgi/opensaml/java/src/org/opensaml/SAMLObject.java?rev=1.13&content-type=text/vnd.viewcvs-markup Maybe this could work here to...getting that output and using that as input for the signature verification. Ronald |