Hello all, Please find attached a demo Java application that generates a signature file presented in the document. It compiles and runs with jdk1.6.0. Before trying this you need to - run the command required to create a Java Keystore (instructions are as comments in the Java source file) - create the files that the demo assumes: config.xml, index.htm and pictures/picture1.gif The resulting signature.xml is also attached.
/Olli >>-----Original Message----- >>From: Grassel Guido (Nokia-NRC/Helsinki) >>Sent: 27 April, 2007 16:39 >>To: WAF WG (public) >>Cc: Barstow Art (Nokia-SIR/Boston); Immonen Olli (Nokia-NRC/Helsinki) >>Subject: Updated Widget Signing document >> >> >>Dear All, >> >>The section "Normative Text" has been updated in attached Widget >>Signing document. I request the editors to kindly include the >text into >>the Widget 1.0 draft where it will be reviewed further. >> >>Olli Immonen is our expert on digital signatures. He is available to >>answer questions and comments. Olli is also working on >putting together >>some Java tools to demonstrate how these signature files can be >>created. He will post a message on his results. >> >>I will be on holiday for the next two weeks. I will see some >of you at >>Xtech in Paris. >> >>Regards >>- Gudio >> >>On 4/17/07 8:50 AM, "ext Guido Grassel" <[EMAIL PROTECTED]> wrote: >> >>> >>> Pl find attached input on how to sign Widgets. >>> >>> Regards >>> - Guido >>> >> >>Kind Regards >>- Guido >> >>----- >>Guido Grassel, Nokia Research Center, [EMAIL PROTECTED] >> >>
<?xml version="1.0" encoding="UTF-8" standalone="no"?><Signature xmlns="http://www.w3.org/2000/09/xmldsig#";><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/TR/2001/REC-xml-c14n-20010315"/><SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/><Reference URI="#references"><DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><DigestValue>LC9FRE93dZ43ETBxs/lPwGv9ERM=</DigestValue></Reference></SignedInfo><SignatureValue>D+T8LZI1RXgf37Q31Vaib3ombTmfde75VYf/q+zaJgjhOWPzmZUZ0JBuCkn82Ap7JUM+79limKZ6 V8aju474zWA82oAG77pb5Kin+dWCOPzzcCVCkZ56PwKMqJyaZr28cfkgCUTRcZaUZitNctdoIqpx tC0Tzw9Xatt0b9TRqTY=</SignatureValue><KeyInfo><X509Data><X509SubjectName>CN=Widget testing,O=Testing,C=FI</X509SubjectName><X509Certificate>MIIB5zCCAVCgAwIBAgIERk2aHzANBgkqhkiG9w0BAQUFADA4MQswCQYDVQQGEwJGSTEQMA4GA1UE ChMHVGVzdGluZzEXMBUGA1UEAxMOV2lkZ2V0IHRlc3RpbmcwHhcNMDcwNTE4MTIyMDQ3WhcNMDcw ODE2MTIyMDQ3WjA4MQswCQYDVQQGEwJGSTEQMA4GA1UEChMHVGVzdGluZzEXMBUGA1UEAxMOV2lk Z2V0IHRlc3RpbmcwgZ8wDQYJKoZIhvcNAQEBBQADgY0AMIGJAoGBAN7J9xvtwa6q3yak7nR28E3z xao5vHomMej249mx5E2GDV4eYEevDCHo/4AZPwgixqZJX34D1qw0KoSiHBU+aLJ1VdY1Bgdrm1Fr PsFFefBu62gojUK7PUsqPV/cMK3GB8BsekvPxQAWHxJe8+Rmn+9Po3u4Gs4A+fBAp6KjWyLxAgMB AAEwDQYJKoZIhvcNAQEFBQADgYEAKgakNnsOBMhoUlipn3ZwoJ+eX+Lkp1JpF2b/LiD0k5zdWz4r PZs4JpvraPx/dQhpGZzl26NENSL4J1Qg3Kyyttp3m/eOFjc59jV7k9v/2V3kyl9FBM1a4NY1Qurw k6b4LLeiwQbElMbxNUY6oiyMFLO0ydtMreXgn75/BaoGDXw=</X509Certificate></X509Data></KeyInfo><Object><Manifest Id="references"><Reference URI="config.xml"><DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><DigestValue>qXce8kqB0mOv30eK8/mw+dLVdq4=</DigestValue></Reference><Reference URI="index.html"><DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><DigestValue>Nku+j6gvKh6L4kBuEVtDaY+e/E0=</DigestValue></Reference><Reference URI="pictures/picture1.gif"><DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><DigestValue>hH+DSys57U2ulaHu0JC0ejxgb8s=</DigestValue></Reference></Manifest></Object></Signature>
SignWidget.java
Description: SignWidget.java
