Re: Signing AMQP messages

2018-09-14 Thread Gordon Sim
On 13/09/18 19:54, Gordon Sim wrote: On 13/09/18 19:40, Chuck Rolke wrote: I'd put the signature in part of the 'bare message', such as application properties, which passes from sender to receiver unmodified. That would require the signature to be in the bytes the signature signs. I should

Re: Signing AMQP messages

2018-09-13 Thread Ryan Yeats
Okay, it sounds like my approach was correct but unfortunately access to both the footer and message-annotations are package-private so there isn't a clean way to do what I want currently. Also found an open issue related to annotation access here

Re: Signing AMQP messages

2018-09-13 Thread Gordon Sim
On 13/09/18 19:40, Chuck Rolke wrote: I'd put the signature in part of the 'bare message', such as application properties, which passes from sender to receiver unmodified. That would require the signature to be in the bytes the signature signs. The 'footer' section was designed to be used

Re: Signing AMQP messages

2018-09-13 Thread Chuck Rolke
eptember 13, 2018 12:47:05 PM > Subject: RE: Signing AMQP messages > > I recommend signing the message before handing it off for send. You will need > to decide on where to place the signature and if/where you will place the > certificate. > > Steve Huston > > >

RE: Signing AMQP messages

2018-09-13 Thread Steve Huston
I recommend signing the message before handing it off for send. You will need to decide on where to place the signature and if/where you will place the certificate. Steve Huston > -Original Message- > From: Ryan Yeats > Sent: Thursday, September 13, 2018 12:33 PM > To: