RE: JDOM - Sign validation

2006-04-07 Thread chirsmail sapl
I am using the following code to serialize OutputFormat format = new OutputFormat(signDocument);   format.setLineSeparator(LineSeparator.Windows);   format.setIndenting(true);   format.setLineWidth(0);    format.setPreserveSpace(true);   XMLSerializer serializer = new XMLSerializer (  

RE: JDOM - Sign validation

2006-04-07 Thread chirsmail sapl
Yes, you are correct.Here is what i did 1)Converted JDOM to DOM and then signed. 2)Serialized the signed DOM and send it to O/P stream - Attached the file output_DOM.xml 3)Then converted the singed DOM to JDOM 4)Then again covnerted JDOM to DOM Attached file output_DOMFromJDOM.xml   I can se

Re: JDOM - Sign validation

2006-04-07 Thread Martin Labarthe Dubois
But is your code available for others to use?   not yet, i mailed Jason the idea of launching the whole project as a JDOM sister.   Or when you did this, did you find issues that might help the original poster?every modification that is not "catched" by c14n could affect the signature, so we

RE: JDOM - Sign validation

2006-04-07 Thread Jesse Pelton
So, if you serialize the original DOM (canonicalized), convert to JDOM, convert back to DOM, and serialize the resulting DOM (canonicalized), how do the two serializations differ? It sounds like the content of the document is being changed in some non-trivial way somewhere in the JDOM <-> DO

Re: JDOM - Sign validation

2006-04-07 Thread David Wall - Yozons Inc.
yes, i did quite a lot of R&D on that and made a pure JDOM XML signing algorithm. i prefer JDOM to DOM a lot! But is your code available for others to use?  Or when you did this, did you find issues that might help the original poster? David

Re: JDOM - Sign validation

2006-04-07 Thread Martin Labarthe Dubois
yes, i did quite a lot of R&D on that and made a pure JDOM XML signing algorithm. i prefer JDOM to DOM a lot!   i also made a JAXB based on JDOM instead too. I found it much simpler and faster to manage business objects that way, and sign them directly from there.   the other diference of my

Re: JDOM - Sign validation

2006-04-07 Thread chirsmail sapl
One more point to add is that singed DOM validates.But the singed DOM converted to JDOM and then DOM out of JDOM doesnt validate.Martin Labarthe Dubois <[EMAIL PROTECTED]> wrote: you can try saving the XML to a file, and reading from it, when traspasing from one format to another and vicevers

Re: JDOM - Sign validation

2006-04-07 Thread chirsmail sapl
Thanks again for your comments.The app handles JDOM  across the life cycle due to which the singed DOM should be updated into JDOM back and convert the JDOM to DOM instead of saving the XML into a file.   Has anyone did some R&D on handling JDOM for signing and validating. Martin Labarthe Dubois

Re: JDOM - Sign validation

2006-04-07 Thread Martin Labarthe Dubois
you can try saving the XML to a file, and reading from it, when traspasing from one format to another and viceversa. JDOM <-> DOM   moreover, i usually use IBMXMLSecurity suite to test the file just typing java dsig.VerifyGUI "filename.xml"     - Original Message - From: ch

Re: JDOM - Sign validation

2006-04-07 Thread chirsmail sapl
thanks for the reply.When i print DOM and DOM converted from JDOM seems to be same.I see lot of difference on the object level of signed DOM and DOM converted from JDOM.Because the signing of DOM converted from JDOM work well.After updating the DOM into JDOM and then convert the JDOM back to DOM ,t

Re: JDOM - Sign validation

2006-04-07 Thread Martin Labarthe Dubois
Yes. in this case i also saw both of them identical from the c14n perspective.   You must have some other difference.   - Original Message - From: David Wall - Yozons Inc. To: security-dev@xml.apache.org Sent: Friday, April 07, 2006 2:09 PM Subject: Re: JDOM - S

Re: JDOM - Sign validation

2006-04-07 Thread David Wall - Yozons Inc.
Thanks for the reply. 1)The different is on the byte level.When we print the byte of the orignal DOM and DOM converted from JDOM , the size is different. 2)The DOM converted from JDOM has the white space if the element doesn't have the values. For example : Orignal XML content:

Re: JDOM - Sign validation

2006-04-07 Thread chirsmail sapl
Thanks for the reply. 1)The different is on the byte level.When we print the byte of the orignal DOM and DOM converted from JDOM , the size is different. 2)The DOM converted from JDOM has the white space if the element doesn't have the values. For example : Orignal XML content:  DOM o/p us

DO NOT REPLY [Bug 38655] - Canonicalizer gets exception in meny namespaces.

2006-04-07 Thread bugzilla
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG· RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT . ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND· INSERTED IN THE BUG DATABASE. http://issues.apache.org/bugzilla/show_bu

Re: JDOM - Sign validation

2006-04-07 Thread Martin Labarthe Dubois
The validation of DOM converted from JDOM fails.The reason is the converted DOM from JDOM is different than the original DOM. Can you specify where is the difference? send some examples.