Re: JDOM - Sign validation

2006-04-10 Thread Sean Mullan
o factor out insignificant changes (like attribute ordering), but one or both of the conversions appears to introduce something that C14N cannot accommodate. If you can attach the two serializations of a given (small) document, that might help diagnose the problem.

RE: JDOM - Sign validation

2006-04-10 Thread Jesse Pelton
  can you help me get original DOM out of JDOM Thanks Chris,Jesse Pelton <[EMAIL PROTECTED]> wrote: So, if you serialize the original DOM (canonicalized), convert to JDOM, convert back to DOM, and serialize the resulting DOM (canonicalized), how do the two seri

RE: JDOM - Sign validation

2006-04-07 Thread chirsmail sapl
l DOM out of JDOM Thanks Chris,Jesse Pelton <[EMAIL PROTECTED]> wrote: So, if you serialize the original DOM (canonicalized), convert to JDOM, convert back to DOM, and serialize the resulting DOM (canonicalized), how do the two serializations differ? It sounds like the conte

RE: JDOM - Sign validation

2006-04-07 Thread chirsmail sapl
o: security-dev@xml.apache.org Sent: Friday, April 07, 2006 2:31 PM Subject: Re: JDOM - Sign validationthanks for the reply.When i print DOM and DOM converted from JDOM seems to be same.I see lot of difference on the object level of signed DOM and DOM converted from JDOM.Because the signing of D

Re: JDOM - Sign validation

2006-04-07 Thread Martin Labarthe Dubois
But is your code available for others to use?   not yet, i mailed Jason the idea of launching the whole project as a JDOM sister.   Or when you did this, did you find issues that might help the original poster?every modification that is not "catched" by c14n could affect the signature, so we

RE: JDOM - Sign validation

2006-04-07 Thread Jesse Pelton
t help diagnose the problem. From: chirsmail sapl [mailto:[EMAIL PROTECTED] Sent: Friday, April 07, 2006 2:08 PMTo: security-dev@xml.apache.orgSubject: Re: JDOM - Sign validation One more point to add is that singed DOM validates.But the singed DOM converted to JDOM and then DOM out of JDOM

Re: JDOM - Sign validation

2006-04-07 Thread David Wall - Yozons Inc.
yes, i did quite a lot of R&D on that and made a pure JDOM XML signing algorithm. i prefer JDOM to DOM a lot! But is your code available for others to use?  Or when you did this, did you find issues that might help the original poster? David

Re: JDOM - Sign validation

2006-04-07 Thread Martin Labarthe Dubois
yes, i did quite a lot of R&D on that and made a pure JDOM XML signing algorithm. i prefer JDOM to DOM a lot!   i also made a JAXB based on JDOM instead too. I found it much simpler and faster to manage business objects that way, and sign them directly from there.   the other diference of my

Re: JDOM - Sign validation

2006-04-07 Thread chirsmail sapl
i also saw both of them identical from the c14n perspective.   You must have some other difference.  - Original Message - From: David Wall - Yozons Inc. To: security-dev@xml.apache.org Sent: Friday, April 07, 2006 2:09 PM Subject: Re: JDOM - Sign validation Thanks for the

Re: JDOM - Sign validation

2006-04-07 Thread chirsmail sapl
UI "filename.xml"    - Original Message - From: chirsmail sapl To: security-dev@xml.apache.org Sent: Friday, April 07, 2006 2:31 PM Subject: Re: JDOM - Sign validationthanks for the reply.When i print DOM and DOM converted from JDOM seems to be same.I see lot of difference on the

Re: JDOM - Sign validation

2006-04-07 Thread Martin Labarthe Dubois
ge - From: chirsmail sapl To: security-dev@xml.apache.org Sent: Friday, April 07, 2006 2:31 PM Subject: Re: JDOM - Sign validation thanks for the reply.When i print DOM and DOM converted from JDOM seems to be same.I see lot of difference on the object level of si

Re: JDOM - Sign validation

2006-04-07 Thread chirsmail sapl
ntical from the c14n perspective.   You must have some other difference.  - Original Message - From: David Wall - Yozons Inc. To: security-dev@xml.apache.org Sent: Friday, April 07, 2006 2:09 PM Subject: Re: JDOM - Sign validation Thanks for the reply. 1)The different is

Re: JDOM - Sign validation

2006-04-07 Thread Martin Labarthe Dubois
Yes. in this case i also saw both of them identical from the c14n perspective.   You must have some other difference.   - Original Message - From: David Wall - Yozons Inc. To: security-dev@xml.apache.org Sent: Friday, April 07, 2006 2:09 PM Subject: Re: JDOM

Re: JDOM - Sign validation

2006-04-07 Thread David Wall - Yozons Inc.
Thanks for the reply. 1)The different is on the byte level.When we print the byte of the orignal DOM and DOM converted from JDOM , the size is different. 2)The DOM converted from JDOM has the white space if the element doesn't have the values. For example : Orignal XML content:

Re: JDOM - Sign validation

2006-04-07 Thread chirsmail sapl
Thanks for the reply. 1)The different is on the byte level.When we print the byte of the orignal DOM and DOM converted from JDOM , the size is different. 2)The DOM converted from JDOM has the white space if the element doesn't have the values. For example : Orignal XML content:  DOM o/p us

Re: JDOM - Sign validation

2006-04-07 Thread Martin Labarthe Dubois
The validation of DOM converted from JDOM fails.The reason is the converted DOM from JDOM is different than the original DOM. Can you specify where is the difference? send some examples.