Re: [ebxmlms-develop] KeyInfo in outgoing messages

SourceForge Headquarters 1320 Columbia Street Suite 310 San Diego, CA 92101 +1 (858) 422-6466

<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
 <meta http-equiv="Content-Type" content="text/html;charset=ISO-8859-1">
 <title></title>
</head>
<body text="#000000" bgcolor="#ffffff">
Peter, 
 
We just have our tool ready.. yet it depends on xmlsec library to do
canonicalization and transformation. For the other steps, e.g. digest
generation, etc, we do it ourselves. It takes in a MIME multipart
message and generate the intermediate documents. 
 
The whole tool takes 2.5MB in zip format... do you have a ftp account
so that I can upload it to you? We will open source the tool after some
more testing. 
 
Regards, -Patrick 
 
 
 
Mayne, Peter wrote: 
<blockquote type="cite"
 cite="mid...@s-...">
 <meta http-equiv="Content-Type" content="text/html; ">
 <meta name="Generator"
 content="MS Exchange Server version 5.5.2654.45">
 <title>RE: [ebxmlms-develop] KeyInfo in outgoing messages</title>
 We're still can't validate digital signatures in
either direction. Obviously the xmlsec thing would have affected this,
but recent versions of Hermes have been using the later version.
 I'll have a think, but I'm otherwise engaged at the
moment.
 
 We had a discussion with our patner on Tuesday.
Tibco are asking for exactly the same information that your new tool
will provide (the state of the document at various stages of signing),
so we're eager to try it out.
 PJDM
 
 --
 
 Peter Mayne
 
 Technology Consultant
 
 Spherion Technology Solutions
 
 Level 1, 243 Northbourne Avenue, Lyneham, ACT, 2602
 
 T: 61 2 62689727&nbsp; F: 61 2 62689777 
 
 -----Original Message-----
 
 From: Patrick Yee [<a href="mailto:kc...@ce...">mailto:kc...@ce...</a>]
 
 Sent: Wednesday, 23 July 2003 6:03 PM
 
 To: <a class="moz-txt-link-abbreviated" href="mailto:ebx...@li...">ebx...@li...</a>
 
 Subject: Re: [ebxmlms-develop] KeyInfo in outgoing
messages
 
 
 arrr yes... agreed. Peter, do you think it is
possible for you to do this?
 
 BTW, how is the result of digital signature
interoperability between Hermes and Tibco, with you adhoc quick fix?
 
 Regards, -Patrick
 
 
 
 Mayne, Peter wrote:
 
 Adding a parameter to sign() doesn't handle signed
acks sent by Hermes, so I think the hook would be better.
 
 &nbsp;
 
 PJDM 
 
 -- 
 
 Peter Mayne 
 
 Technology Consultant 
 
 Spherion Technology Solutions 
 
 Level 1, 243 Northbourne Avenue, Lyneham, ACT, 2602 
 
 T: 61 2 62689727&nbsp; F: 61 2 62689777 
 
 -----Original Message----- 
 
 From: Patrick Yee [<a href="mailto:kc...@ce...">mailto:kc...@ce...</a>]
 
 Sent: Wednesday, 23 July 2003 1:31 AM 
 
 To: <a class="moz-txt-link-abbreviated" href="mailto:ebx...@li...">ebx...@li...</a> 
 
 Subject: Re: [ebxmlms-develop] KeyInfo in outgoing
messages 
 
 
 Agreed. Two approaches: 
 
 1. add an optional parameter at ebxmlMessage.sign() to
control whether to add KeyInfo or not. 
 
 2. write a hook to do digital signature 
 
 Comment? 
 
 Regards, -Patrick 
 
 The information contained in this email and any
attachments to it:
 
 (a) may be confidential and if you are not the
intended recipient, any interference with, 
 
 use, disclosure or copying of this material is
unauthorised and prohibited; and
 
 (b) may contain personal information of the
recipient and/or the sender as defined 
 
 under the Privacy Act 1988 (Cth). Consent is hereby
given by the recipient(s) to 
 
 collect, hold and use such information and any
personal information contained in a 
 
 response to this email, for any reasonable purpose in
the ordinary course of 
 
 Spherion's 
 
 business, including forwarding this email internally
or disclosing it to a third party. All 
 
 personal information collected by Spherion will be
handled in accordance with 
 
 Spherion's Privacy Policy. If you have received this
email in error, please notify the 
 
 sender and delete it.
 
 (c) you agree not to employ or arrange employment
for any candidate(s) supplied in 
 
 this email and any attachments without first entering
into a contractual agreement with 
 
 Spherion. You further agree not to divulge any
information contained in this document 
 
 to any person(s) or entities without the express
permission of Spherion.
 
 
 &nbsp; 
 
 -------------------------------------------------------
This SF.net email is sponsored by: VM Ware With VMware you can run
multiple operating systems on a single machine. WITHOUT REBOOTING! Mix
Linux / Windows / Novell virtual machines at the same time. Free trial
click here: <a href="http://www.vmware.com/wl/offer/345/0"
 target="_blank">http://www.vmware.com/wl/offer/345/0</a>
_______________________________________________ ebxmlms-develop mailing
list <a class="moz-txt-link-abbreviated" href="mailto:ebx...@li...">ebx...@li...</a> <a
 href="https://lists.sourceforge.net/lists/listinfo/ebxmlms-develop"
 target="_blank">https://lists.sourceforge.net/lists/listinfo/ebxmlms-develop</a>
</blockquote>
</body>
</html>