Re: [WSS4J] XMLCipher - enhancement for content encryption

2004-01-03 Thread Davanum Srinivas
Ted, Can you please let us know if Xerces dev team will pick this patch up? and when? - http://nagoya.apache.org/bugzilla/show_bug.cgi?id=25853 thanks, dims --- Werner Dittmann <[EMAIL PROTECTED]> wrote: > Hi, > > to test the content encryption of XMLCipher I modified the test case of > XML enc

Re: XMLCipher - enhancement for content encryption

2004-01-03 Thread Berin Lautenbach
Had a quick check on the bug report. Before making a decision as to the correct way forward, do we know if the Xerces-J people are going to incorporate this fix in the next release? Cheers, Berin Werner Dittmann wrote: Hi, to test the content encryption of XMLCipher I modified the tes

Re: XMLCipher - enhancement for content encryption

2004-01-03 Thread Berin Lautenbach
Werner Dittmann wrote: IMO, for encryption serialization CDATA shall be serialized as CDATA element without Entity conversion. Otherwise it may give problems when we first sign that element, then encrypt it. In addition CDATA implies a "preserve space" behavior. Is that true for standard Text nod

Re: XMLCipher - enhancement for content encryption

2004-01-03 Thread Elliotte Rusty Harold
At 9:47 PM +0100 1/3/04, Werner Dittmann wrote: Dims, all, just looked at CanonicalizerBase and did a quick test. Unfortunatly it also handles CDATA in a wrong way - it handles CDATA like standard Text nodes, i.e. C14nBase converts all special chars into Entities and serialize CDATA as standard te

Re: XMLCipher - enhancement for content encryption

2004-01-03 Thread Berin Lautenbach
Werner Dittmann wrote: Dims, all, just looked at CanonicalizerBase and did a quick test. Unfortunatly it also handles CDATA in a wrong way - it handles CDATA like standard Text nodes, i.e. C14nBase converts all special chars into Entities and serialize CDATA as standard text without the "[!CDATA[.

Re: XMLCipher - enhancement for content encryption

2004-01-03 Thread Werner Dittmann
Dims, all, just looked at CanonicalizerBase and did a quick test. Unfortunatly it also handles CDATA in a wrong way - it handles CDATA like standard Text nodes, i.e. C14nBase converts all special chars into Entities and serialize CDATA as standard text without the "[!CDATA[]]" sequence. I don'

Re: XMLCipher - enhancement for content encryption

2004-01-03 Thread Davanum Srinivas
Werner, did you see org.apache.xml.security.c14n.implementations.CanonicalizerBase? -- dims --- Davanum Srinivas <[EMAIL PROTECTED]> wrote: > Werner, > > my 2 cents, let's (make a copy of XMLSerializer) or (write an equivalent) that can > be maintained > as part of xml-security (just like we

Re: XMLCipher - enhancement for content encryption

2004-01-03 Thread Davanum Srinivas
Werner, my 2 cents, let's (make a copy of XMLSerializer) or (write an equivalent) that can be maintained as part of xml-security (just like we have DOM2Writer in axis). also, i grepped for XMLSerializer and it seems to be used only in cipher code and some junit tests. so should be easy to get r

Re: XMLCipher - enhancement for content encryption

2004-01-03 Thread Werner Dittmann
Erwin, all, well, I didn't modify any code that is relevant for Signature. It may relevant for Signature if Signature code uses the XMLSerializer of Xerces (haven't checked that). However, I ran several test cases that also use Signature (I'm working on WSS4J that does Signature and encryption) an