From securitydiazchelsea@example.net Sun May 09 10:12:54 2004 Return-Path: <securitydiazchelsea@example.net> Delivered-To: diazchelsea@example.net Received: (qmail 7720 invoked from network); 9 May 2004 10:12:54 -0000 Received: from daedalus.apache.org (HELO mail.apache.org) (83.161.120.155) by minotaur-2.apache.org with SMTP; 9 May 2004 10:12:54 -0000 Received: (qmail 11745 invoked by uid 500); 9 May 2004 10:12:27 -0000 Delivered-To: diazchelsea@example.net Received: (qmail 11726 invoked by uid 500); 9 May 2004 10:12:27 -0000 Mailing-List: contact diazchelsea@example.net; run by ezmlm Precedence: bulk X-No-Archive: yes List-Post: <mailto:diazchelsea@example.net> List-Help: <mailto:diazchelsea@example.net> List-Unsubscribe: <mailto:diazchelsea@example.net> List-Subscribe: <mailto:diazchelsea@example.net> Delivered-To: mailing list diazchelsea@example.net Received: (qmail 11712 invoked from network); 9 May 2004 10:12:27 -0000 Date: 9 May 2004 10:12:53 -0000 Message-ID: <diazchelsea@example.net> From: diazchelsea@example.net To: diazchelsea@example.net Subject: cvs commit: xml-security/c/src/enc/WinCAPI WinCAPICryptoProvider.cpp X-Spam-Rating: daedalus.apache.org 1.6.2 0/1000/N X-Spam-Rating: minotaur-2.apache.org 1.6.2 0/1000/N blautenb 2004/05/09 03:12:53 Modified: c/src/enc/WinCAPI WinCAPICryptoProvider.cpp Log: Buf fix for some W2K machines - reported by Andrzej Matejko 4/5/2004 Revision Changes Path 1.13 +2 -2 xml-security/c/src/enc/WinCAPI/WinCAPICryptoProvider.cpp Index: WinCAPICryptoProvider.cpp =================================================================== RCS file: /home/cvs/xml-security/c/src/enc/WinCAPI/WinCAPICryptoProvider.cpp,v retrieving revision 1.12 retrieving revision 1.13 diff -u -r1.12 -r1.13 --- WinCAPICryptoProvider.cpp 18 Feb 2004 10:46:52 -0000 1.12 +++ WinCAPICryptoProvider.cpp 9 May 2004 10:12:53 -0000 1.13 @@ -67,7 +67,7 @@ // Check of we maybe don't understand AES DWORD error = GetLastError(); - if (error == NTE_PROV_TYPE_NOT_DEF) { + if (error == NTE_PROV_TYPE_NOT_DEF || error == 0) { // This system does not have AES! m_haveAES = false; From securitydiazchelsea@example.net Wed May 12 12:00:48 2004 Return-Path: <securitydiazchelsea@example.net> Delivered-To: diazchelsea@example.net Received: (qmail 61064 invoked from network); 12 May 2004 12:00:48 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (83.161.120.155) by minotaur-2.apache.org with SMTP; 12 May 2004 12:00:48 -0000 Received: (qmail 55354 invoked by uid 500); 12 May 2004 12:00:49 -0000 Delivered-To: diazchelsea@example.net Received: (qmail 55317 invoked by uid 500); 12 May 2004 12:00:49 -0000 Mailing-List: contact diazchelsea@example.net; run by ezmlm Precedence: bulk X-No-Archive: yes List-Post: <mailto:diazchelsea@example.net> List-Help: <mailto:diazchelsea@example.net> List-Unsubscribe: <mailto:diazchelsea@example.net> List-Subscribe: <mailto:diazchelsea@example.net> Delivered-To: mailing list diazchelsea@example.net Received: (qmail 55299 invoked by uid 98); 12 May 2004 12:00:48 -0000 X-Qmail-Scanner-Mail-From: diazchelsea@example.net via hermes.apache.org X-Qmail-Scanner: 1.20 (Clear:RC:0(83.161.120.155):. Processed in 0.042838 secs) Date: 12 May 2004 12:00:46 -0000 Message-ID: <diazchelsea@example.net> From: diazchelsea@example.net To: diazchelsea@example.net Subject: cvs commit: xml-security/src/org/apache/xml/security/utils/resolver/implementations ResolverFragment.java ResolverXPointer.java X-Spam-Rating: hermes.apache.org 1.6.2 0/1000/N X-Spam-Rating: minotaur-2.apache.org 1.6.2 0/1000/N blautenb 2004/05/12 05:00:46 Modified: src/org/apache/xml/security/c14n/implementations Canonicalizer20010315.java Canonicalizer20010315Excl.java CanonicalizerBase.java src/org/apache/xml/security/keys/content KeyValue.java RetrievalMethod.java src/org/apache/xml/security/keys/keyresolver/implementations DSAKeyValueResolver.java RSAKeyValueResolver.java RetrievalMethodResolver.java X509CertificateResolver.java X509SKIResolver.java X509SubjectNameResolver.java src/org/apache/xml/security/signature Reference.java SignatureProperties.java SignedInfo.java XMLSignature.java XMLSignatureInput.java src/org/apache/xml/security/transforms Transform.java src/org/apache/xml/security/transforms/implementations TransformC14N.java TransformC14NExclusive.java TransformC14NExclusiveWithComments.java TransformC14NWithComments.java TransformEnvelopedSignature.java TransformXPath.java src/org/apache/xml/security/utils ElementProxy.java IdResolver.java SignatureElementProxy.java XMLUtils.java src/org/apache/xml/security/utils/resolver/implementations ResolverFragment.java ResolverXPointer.java Log: Raul Benito's patches - see Bugzilla #28752 Revision Changes Path 1.31 +123 -314 xml-security/src/org/apache/xml/security/c14n/implementations/Canonicalizer20010315.java http://cvs.apache.org/viewcvs/xml-security/src/org/apache/xml/security/c14n/implementations/Canonicalizer20010315.java.diff?r1=1.30&r2=1.31 1.14 +302 -1157 xml-security/src/org/apache/xml/security/c14n/implementations/Canonicalizer20010315Excl.java http://cvs.apache.org/viewcvs/xml-security/src/org/apache/xml/security/c14n/implementations/Canonicalizer20010315Excl.java.diff?r1=1.13&r2=1.14 1.6 +484 -117 xml-security/src/org/apache/xml/security/c14n/implementations/CanonicalizerBase.java http://cvs.apache.org/viewcvs/xml-security/src/org/apache/xml/security/c14n/implementations/CanonicalizerBase.java.diff?r1=1.5&r2=1.6 1.10 +13 -21 xml-security/src/org/apache/xml/security/keys/content/KeyValue.java http://cvs.apache.org/viewcvs/xml-security/src/org/apache/xml/security/keys/content/KeyValue.java.diff?r1=1.9&r2=1.10 1.12 +5 -12 xml-security/src/org/apache/xml/security/keys/content/RetrievalMethod.java http://cvs.apache.org/viewcvs/xml-security/src/org/apache/xml/security/keys/content/RetrievalMethod.java.diff?r1=1.11&r2=1.12 1.9 +6 -13 xml-security/src/org/apache/xml/security/keys/keyresolver/implementations/DSAKeyValueResolver.java http://cvs.apache.org/viewcvs/xml-security/src/org/apache/xml/security/keys/keyresolver/implementations/DSAKeyValueResolver.java.diff?r1=1.8&r2=1.9 1.8 +5 -11 xml-security/src/org/apache/xml/security/keys/keyresolver/implementations/RSAKeyValueResolver.java http://cvs.apache.org/viewcvs/xml-security/src/org/apache/xml/security/keys/keyresolver/implementations/RSAKeyValueResolver.java.diff?r1=1.7&r2=1.8 1.10 +13 -5 xml-security/src/org/apache/xml/security/keys/keyresolver/implementations/RetrievalMethodResolver.java http://cvs.apache.org/viewcvs/xml-security/src/org/apache/xml/security/keys/keyresolver/implementations/RetrievalMethodResolver.java.diff?r1=1.9&r2=1.10 1.8 +11 -14 xml-security/src/org/apache/xml/security/keys/keyresolver/implementations/X509CertificateResolver.java http://cvs.apache.org/viewcvs/xml-security/src/org/apache/xml/security/keys/keyresolver/implementations/X509CertificateResolver.java.diff?r1=1.7&r2=1.8 1.9 +10 -12 xml-security/src/org/apache/xml/security/keys/keyresolver/implementations/X509SKIResolver.java http://cvs.apache.org/viewcvs/xml-security/src/org/apache/xml/security/keys/keyresolver/implementations/X509SKIResolver.java.diff?r1=1.8&r2=1.9 1.10 +10 -14 xml-security/src/org/apache/xml/security/keys/keyresolver/implementations/X509SubjectNameResolver.java http://cvs.apache.org/viewcvs/xml-security/src/org/apache/xml/security/keys/keyresolver/implementations/X509SubjectNameResolver.java.diff?r1=1.9&r2=1.10 1.33 +18 -12 xml-security/src/org/apache/xml/security/signature/Reference.java http://cvs.apache.org/viewcvs/xml-security/src/org/apache/xml/security/signature/Reference.java.diff?r1=1.32&r2=1.33 1.11 +11 -24 xml-security/src/org/apache/xml/security/signature/SignatureProperties.java http://cvs.apache.org/viewcvs/xml-security/src/org/apache/xml/security/signature/SignatureProperties.java.diff?r1=1.10&r2=1.11 1.20 +9 -4 xml-security/src/org/apache/xml/security/signature/SignedInfo.java http://cvs.apache.org/viewcvs/xml-security/src/org/apache/xml/security/signature/SignedInfo.java.diff?r1=1.19&r2=1.20 1.38 +10 -22 xml-security/src/org/apache/xml/security/signature/XMLSignature.java http://cvs.apache.org/viewcvs/xml-security/src/org/apache/xml/security/signature/XMLSignature.java.diff?r1=1.37&r2=1.38 1.26 +113 -39 xml-security/src/org/apache/xml/security/signature/XMLSignatureInput.java http://cvs.apache.org/viewcvs/xml-security/src/org/apache/xml/security/signature/XMLSignatureInput.java.diff?r1=1.25&r2=1.26 1.14 +1 -0 xml-security/src/org/apache/xml/security/transforms/Transform.java http://cvs.apache.org/viewcvs/xml-security/src/org/apache/xml/security/transforms/Transform.java.diff?r1=1.13&r2=1.14 1.8 +9 -0 xml-security/src/org/apache/xml/security/transforms/implementations/TransformC14N.java http://cvs.apache.org/viewcvs/xml-security/src/org/apache/xml/security/transforms/implementations/TransformC14N.java.diff?r1=1.7&r2=1.8 1.6 +20 -5 xml-security/src/org/apache/xml/security/transforms/implementations/TransformC14NExclusive.java http://cvs.apache.org/viewcvs/xml-security/src/org/apache/xml/security/transforms/implementations/TransformC14NExclusive.java.diff?r1=1.5&r2=1.6 1.5 +15 -1 xml-security/src/org/apache/xml/security/transforms/implementations/TransformC14NExclusiveWithComments.java http://cvs.apache.org/viewcvs/xml-security/src/org/apache/xml/security/transforms/implementations/TransformC14NExclusiveWithComments.java.diff?r1=1.4&r2=1.5 1.7 +12 -1 xml-security/src/org/apache/xml/security/transforms/implementations/TransformC14NWithComments.java http://cvs.apache.org/viewcvs/xml-security/src/org/apache/xml/security/transforms/implementations/TransformC14NWithComments.java.diff?r1=1.6&r2=1.7 1.10 +47 -71 xml-security/src/org/apache/xml/security/transforms/implementations/TransformEnvelopedSignature.java http://cvs.apache.org/viewcvs/xml-security/src/org/apache/xml/security/transforms/implementations/TransformEnvelopedSignature.java.diff?r1=1.9&r2=1.10 1.15 +8 -2 xml-security/src/org/apache/xml/security/transforms/implementations/TransformXPath.java http://cvs.apache.org/viewcvs/xml-security/src/org/apache/xml/security/transforms/implementations/TransformXPath.java.diff?r1=1.14&r2=1.15 1.25 +22 -33 xml-security/src/org/apache/xml/security/utils/ElementProxy.java http://cvs.apache.org/viewcvs/xml-security/src/org/apache/xml/security/utils/ElementProxy.java.diff?r1=1.24&r2=1.25 1.16 +3 -1 xml-security/src/org/apache/xml/security/utils/IdResolver.java http://cvs.apache.org/viewcvs/xml-security/src/org/apache/xml/security/utils/IdResolver.java.diff?r1=1.15&r2=1.16 1.6 +5 -2 xml-security/src/org/apache/xml/security/utils/SignatureElementProxy.java http://cvs.apache.org/viewcvs/xml-security/src/org/apache/xml/security/utils/SignatureElementProxy.java.diff?r1=1.5&r2=1.6 1.36 +140 -0 xml-security/src/org/apache/xml/security/utils/XMLUtils.java http://cvs.apache.org/viewcvs/xml-security/src/org/apache/xml/security/utils/XMLUtils.java.diff?r1=1.35&r2=1.36 1.18 +7 -62 xml-security/src/org/apache/xml/security/utils/resolver/implementations/ResolverFragment.java http://cvs.apache.org/viewcvs/xml-security/src/org/apache/xml/security/utils/resolver/implementations/ResolverFragment.java.diff?r1=1.17&r2=1.18 1.18 +15 -18 xml-security/src/org/apache/xml/security/utils/resolver/implementations/ResolverXPointer.java http://cvs.apache.org/viewcvs/xml-security/src/org/apache/xml/security/utils/resolver/implementations/ResolverXPointer.java.diff?r1=1.17&r2=1.18 From securitydiazchelsea@example.net Wed May 12 20:37:04 2004 Return-Path: <securitydiazchelsea@example.net> Delivered-To: diazchelsea@example.net Received: (qmail 58809 invoked from network); 12 May 2004 20:37:04 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (83.161.120.155) by minotaur-2.apache.org with SMTP; 12 May 2004 20:37:04 -0000 Received: (qmail 31859 invoked by uid 500); 12 May 2004 20:37:31 -0000 Delivered-To: diazchelsea@example.net Received: (qmail 31844 invoked by uid 500); 12 May 2004 20:37:30 -0000 Mailing-List: contact diazchelsea@example.net; run by ezmlm Precedence: bulk X-No-Archive: yes List-Post: <mailto:diazchelsea@example.net> List-Help: <mailto:diazchelsea@example.net> List-Unsubscribe: <mailto:diazchelsea@example.net> List-Subscribe: <mailto:diazchelsea@example.net> Delivered-To: mailing list diazchelsea@example.net Delivered-To: moderator for diazchelsea@example.net Received: (qmail 6615 invoked by uid 98); 12 May 2004 12:15:09 -0000 X-Qmail-Scanner-Mail-From: diazchelsea@example.net via hermes.apache.org X-Qmail-Scanner: 1.20 (Clear:RC:0(83.161.120.155):. Processed in 0.746628 secs) Message-ID: <diazchelsea@example.net> Date: Wed, 12 May 2004 22:15:02 +1000 From: Berin Lautenbach <diazchelsea@example.net> User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.6) Gecko/20040113 X-Accept-Language: en-us, en MIME-Version: 1.0 To: diazchelsea@example.net Subject: Re: cvs commit: xml-security/src/org/apache/xml/security/utils/resolver/implementations ResolverFragment.java ResolverXPointer.java References: <diazchelsea@example.net> In-Reply-To: <diazchelsea@example.net> Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit X-Spam-Rating: hermes.apache.org 1.6.2 0/1000/N X-Spam-Rating: minotaur-2.apache.org 1.6.2 0/1000/N This is Raul's patch - it's in there :>. If people could try the code from CVS to double check it would be fantastic. (And thanks Raul!) Cheers, Berin diazchelsea@example.net wrote: > blautenb 2004/05/12 05:00:46 > > Modified: src/org/apache/xml/security/c14n/implementations > Canonicalizer20010315.java > Canonicalizer20010315Excl.java > CanonicalizerBase.java > src/org/apache/xml/security/keys/content KeyValue.java > RetrievalMethod.java > src/org/apache/xml/security/keys/keyresolver/implementations > DSAKeyValueResolver.java RSAKeyValueResolver.java > RetrievalMethodResolver.java > X509CertificateResolver.java X509SKIResolver.java > X509SubjectNameResolver.java > src/org/apache/xml/security/signature Reference.java > SignatureProperties.java SignedInfo.java > XMLSignature.java XMLSignatureInput.java > src/org/apache/xml/security/transforms Transform.java > src/org/apache/xml/security/transforms/implementations > TransformC14N.java TransformC14NExclusive.java > TransformC14NExclusiveWithComments.java > TransformC14NWithComments.java > TransformEnvelopedSignature.java > TransformXPath.java > src/org/apache/xml/security/utils ElementProxy.java > IdResolver.java SignatureElementProxy.java > XMLUtils.java > src/org/apache/xml/security/utils/resolver/implementations > ResolverFragment.java ResolverXPointer.java > Log: > Raul Benito's patches - see Bugzilla #28752 > > Revision Changes Path > 1.31 +123 -314 xml-security/src/org/apache/xml/security/c14n/implementations/Canonicalizer20010315.java > > http://cvs.apache.org/viewcvs/xml-security/src/org/apache/xml/security/c14n/implementations/Canonicalizer20010315.java.diff?r1=1.30&r2=1.31 > > > 1.14 +302 -1157 xml-security/src/org/apache/xml/security/c14n/implementations/Canonicalizer20010315Excl.java > > http://cvs.apache.org/viewcvs/xml-security/src/org/apache/xml/security/c14n/implementations/Canonicalizer20010315Excl.java.diff?r1=1.13&r2=1.14 > > > 1.6 +484 -117 xml-security/src/org/apache/xml/security/c14n/implementations/CanonicalizerBase.java > > http://cvs.apache.org/viewcvs/xml-security/src/org/apache/xml/security/c14n/implementations/CanonicalizerBase.java.diff?r1=1.5&r2=1.6 > > > 1.10 +13 -21 xml-security/src/org/apache/xml/security/keys/content/KeyValue.java > > http://cvs.apache.org/viewcvs/xml-security/src/org/apache/xml/security/keys/content/KeyValue.java.diff?r1=1.9&r2=1.10 > > > 1.12 +5 -12 xml-security/src/org/apache/xml/security/keys/content/RetrievalMethod.java > > http://cvs.apache.org/viewcvs/xml-security/src/org/apache/xml/security/keys/content/RetrievalMethod.java.diff?r1=1.11&r2=1.12 > > > 1.9 +6 -13 xml-security/src/org/apache/xml/security/keys/keyresolver/implementations/DSAKeyValueResolver.java > > http://cvs.apache.org/viewcvs/xml-security/src/org/apache/xml/security/keys/keyresolver/implementations/DSAKeyValueResolver.java.diff?r1=1.8&r2=1.9 > > > 1.8 +5 -11 xml-security/src/org/apache/xml/security/keys/keyresolver/implementations/RSAKeyValueResolver.java > > http://cvs.apache.org/viewcvs/xml-security/src/org/apache/xml/security/keys/keyresolver/implementations/RSAKeyValueResolver.java.diff?r1=1.7&r2=1.8 > > > 1.10 +13 -5 xml-security/src/org/apache/xml/security/keys/keyresolver/implementations/RetrievalMethodResolver.java > > http://cvs.apache.org/viewcvs/xml-security/src/org/apache/xml/security/keys/keyresolver/implementations/RetrievalMethodResolver.java.diff?r1=1.9&r2=1.10 > > > 1.8 +11 -14 xml-security/src/org/apache/xml/security/keys/keyresolver/implementations/X509CertificateResolver.java > > http://cvs.apache.org/viewcvs/xml-security/src/org/apache/xml/security/keys/keyresolver/implementations/X509CertificateResolver.java.diff?r1=1.7&r2=1.8 > > > 1.9 +10 -12 xml-security/src/org/apache/xml/security/keys/keyresolver/implementations/X509SKIResolver.java > > http://cvs.apache.org/viewcvs/xml-security/src/org/apache/xml/security/keys/keyresolver/implementations/X509SKIResolver.java.diff?r1=1.8&r2=1.9 > > > 1.10 +10 -14 xml-security/src/org/apache/xml/security/keys/keyresolver/implementations/X509SubjectNameResolver.java > > http://cvs.apache.org/viewcvs/xml-security/src/org/apache/xml/security/keys/keyresolver/implementations/X509SubjectNameResolver.java.diff?r1=1.9&r2=1.10 > > > 1.33 +18 -12 xml-security/src/org/apache/xml/security/signature/Reference.java > > http://cvs.apache.org/viewcvs/xml-security/src/org/apache/xml/security/signature/Reference.java.diff?r1=1.32&r2=1.33 > > > 1.11 +11 -24 xml-security/src/org/apache/xml/security/signature/SignatureProperties.java > > http://cvs.apache.org/viewcvs/xml-security/src/org/apache/xml/security/signature/SignatureProperties.java.diff?r1=1.10&r2=1.11 > > > 1.20 +9 -4 xml-security/src/org/apache/xml/security/signature/SignedInfo.java > > http://cvs.apache.org/viewcvs/xml-security/src/org/apache/xml/security/signature/SignedInfo.java.diff?r1=1.19&r2=1.20 > > > 1.38 +10 -22 xml-security/src/org/apache/xml/security/signature/XMLSignature.java > > http://cvs.apache.org/viewcvs/xml-security/src/org/apache/xml/security/signature/XMLSignature.java.diff?r1=1.37&r2=1.38 > > > 1.26 +113 -39 xml-security/src/org/apache/xml/security/signature/XMLSignatureInput.java > > http://cvs.apache.org/viewcvs/xml-security/src/org/apache/xml/security/signature/XMLSignatureInput.java.diff?r1=1.25&r2=1.26 > > > 1.14 +1 -0 xml-security/src/org/apache/xml/security/transforms/Transform.java > > http://cvs.apache.org/viewcvs/xml-security/src/org/apache/xml/security/transforms/Transform.java.diff?r1=1.13&r2=1.14 > > > 1.8 +9 -0 xml-security/src/org/apache/xml/security/transforms/implementations/TransformC14N.java > > http://cvs.apache.org/viewcvs/xml-security/src/org/apache/xml/security/transforms/implementations/TransformC14N.java.diff?r1=1.7&r2=1.8 > > > 1.6 +20 -5 xml-security/src/org/apache/xml/security/transforms/implementations/TransformC14NExclusive.java > > http://cvs.apache.org/viewcvs/xml-security/src/org/apache/xml/security/transforms/implementations/TransformC14NExclusive.java.diff?r1=1.5&r2=1.6 > > > 1.5 +15 -1 xml-security/src/org/apache/xml/security/transforms/implementations/TransformC14NExclusiveWithComments.java > > http://cvs.apache.org/viewcvs/xml-security/src/org/apache/xml/security/transforms/implementations/TransformC14NExclusiveWithComments.java.diff?r1=1.4&r2=1.5 > > > 1.7 +12 -1 xml-security/src/org/apache/xml/security/transforms/implementations/TransformC14NWithComments.java > > http://cvs.apache.org/viewcvs/xml-security/src/org/apache/xml/security/transforms/implementations/TransformC14NWithComments.java.diff?r1=1.6&r2=1.7 > > > 1.10 +47 -71 xml-security/src/org/apache/xml/security/transforms/implementations/TransformEnvelopedSignature.java > > http://cvs.apache.org/viewcvs/xml-security/src/org/apache/xml/security/transforms/implementations/TransformEnvelopedSignature.java.diff?r1=1.9&r2=1.10 > > > 1.15 +8 -2 xml-security/src/org/apache/xml/security/transforms/implementations/TransformXPath.java > > http://cvs.apache.org/viewcvs/xml-security/src/org/apache/xml/security/transforms/implementations/TransformXPath.java.diff?r1=1.14&r2=1.15 > > > 1.25 +22 -33 xml-security/src/org/apache/xml/security/utils/ElementProxy.java > > http://cvs.apache.org/viewcvs/xml-security/src/org/apache/xml/security/utils/ElementProxy.java.diff?r1=1.24&r2=1.25 > > > 1.16 +3 -1 xml-security/src/org/apache/xml/security/utils/IdResolver.java > > http://cvs.apache.org/viewcvs/xml-security/src/org/apache/xml/security/utils/IdResolver.java.diff?r1=1.15&r2=1.16 > > > 1.6 +5 -2 xml-security/src/org/apache/xml/security/utils/SignatureElementProxy.java > > http://cvs.apache.org/viewcvs/xml-security/src/org/apache/xml/security/utils/SignatureElementProxy.java.diff?r1=1.5&r2=1.6 > > > 1.36 +140 -0 xml-security/src/org/apache/xml/security/utils/XMLUtils.java > > http://cvs.apache.org/viewcvs/xml-security/src/org/apache/xml/security/utils/XMLUtils.java.diff?r1=1.35&r2=1.36 > > > 1.18 +7 -62 xml-security/src/org/apache/xml/security/utils/resolver/implementations/ResolverFragment.java > > http://cvs.apache.org/viewcvs/xml-security/src/org/apache/xml/security/utils/resolver/implementations/ResolverFragment.java.diff?r1=1.17&r2=1.18 > > > 1.18 +15 -18 xml-security/src/org/apache/xml/security/utils/resolver/implementations/ResolverXPointer.java > > http://cvs.apache.org/viewcvs/xml-security/src/org/apache/xml/security/utils/resolver/implementations/ResolverXPointer.java.diff?r1=1.17&r2=1.18 > > > > From securitydiazchelsea@example.net Tue May 18 11:42:02 2004 Return-Path: <securitydiazchelsea@example.net> Delivered-To: diazchelsea@example.net Received: (qmail 45189 invoked from network); 18 May 2004 11:42:00 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (83.161.120.155) by minotaur-2.apache.org with SMTP; 18 May 2004 11:42:00 -0000 Received: (qmail 22224 invoked by uid 500); 18 May 2004 11:41:04 -0000 Delivered-To: diazchelsea@example.net Received: (qmail 21430 invoked by uid 500); 18 May 2004 11:40:57 -0000 Mailing-List: contact diazchelsea@example.net; run by ezmlm Precedence: bulk X-No-Archive: yes List-Post: <mailto:diazchelsea@example.net> List-Help: <mailto:diazchelsea@example.net> List-Unsubscribe: <mailto:diazchelsea@example.net> List-Subscribe: <mailto:diazchelsea@example.net> Delivered-To: mailing list diazchelsea@example.net Received: (qmail 20375 invoked by uid 98); 18 May 2004 11:40:45 -0000 X-Qmail-Scanner-Mail-From: diazchelsea@example.net via hermes.apache.org X-Qmail-Scanner: 1.20 (Clear:RC:0(83.161.120.155):. Processed in 0.292377 secs) Date: 18 May 2004 11:40:40 -0000 Message-ID: <diazchelsea@example.net> From: diazchelsea@example.net To: diazchelsea@example.net Subject: cvs commit: xml-security/src_samples/org/apache/xml/security/samples/utils/resolver OfflineResolver.java X-Spam-Rating: hermes.apache.org 1.6.2 0/1000/N X-Spam-Rating: minotaur-2.apache.org 1.6.2 0/1000/N blautenb 2004/05/18 04:40:40 Modified: src_samples/org/apache/xml/security/samples/iaik IAIKInterOp.java src_samples/org/apache/xml/security/samples/signature CreateDonaldsAdditionalURISignature.java CreateMerlinsExampleSixteen.java src_samples/org/apache/xml/security/samples/utils/resolver OfflineResolver.java Added: src_samples/org/apache/xml/security/samples/signature CreateMerlinsExampleTwentyThree.java VerifyMerlinsExamplesTwentyThree.java Log: Validation of Merlin 23 provided by dims - Bugzilla #28872 Revision Changes Path 1.7 +15 -1 xml-security/src_samples/org/apache/xml/security/samples/iaik/IAIKInterOp.java Index: IAIKInterOp.java =================================================================== RCS file: /home/cvs/xml-security/src_samples/org/apache/xml/security/samples/iaik/IAIKInterOp.java,v retrieving revision 1.6 retrieving revision 1.7 diff -u -r1.6 -r1.7 --- IAIKInterOp.java 8 Feb 2004 06:08:42 -0000 1.6 +++ IAIKInterOp.java 18 May 2004 11:40:40 -0000 1.7 @@ -128,6 +128,20 @@ System.out.println(); } } + + for (int i = 2; i < filenames.length; i++) { + String signatureFileName = filenames[i]; + + try { + org.apache.xml.security.samples.signature + .VerifyMerlinsExamplesTwentyThree.verify(dbf, signatureFileName); + } catch (Exception ex) { + System.out.println("The XML signature in file " + + signatureFileName + " crashed the application (bad)"); + ex.printStackTrace(); + System.out.println(); + } + } } public static void verifyAnonymous(String gregorsDir, DocumentBuilderFactory dbf) { 1.7 +3 -3 xml-security/src_samples/org/apache/xml/security/samples/signature/CreateDonaldsAdditionalURISignature.java Index: CreateDonaldsAdditionalURISignature.java =================================================================== RCS file: /home/cvs/xml-security/src_samples/org/apache/xml/security/samples/signature/CreateDonaldsAdditionalURISignature.java,v retrieving revision 1.6 retrieving revision 1.7 diff -u -r1.6 -r1.7 --- CreateDonaldsAdditionalURISignature.java 8 Feb 2004 06:08:42 -0000 1.6 +++ CreateDonaldsAdditionalURISignature.java 18 May 2004 11:40:40 -0000 1.7 @@ -47,7 +47,7 @@ /** {@link org.apache.commons.logging} logging facility */ static org.apache.commons.logging.Log log = org.apache.commons.logging.LogFactory.getLog( - CreateMerlinsExampleSixteen.class.getName()); + CreateDonaldsAdditionalURISignature.class.getName()); static Document createDocument(DocumentBuilder db) throws Exception { Document doc = db.newDocument(); 1.15 +1 -2 xml-security/src_samples/org/apache/xml/security/samples/signature/CreateMerlinsExampleSixteen.java Index: CreateMerlinsExampleSixteen.java =================================================================== RCS file: /home/cvs/xml-security/src_samples/org/apache/xml/security/samples/signature/CreateMerlinsExampleSixteen.java,v retrieving revision 1.14 retrieving revision 1.15 diff -u -r1.14 -r1.15 --- CreateMerlinsExampleSixteen.java 8 Feb 2004 06:08:42 -0000 1.14 +++ CreateMerlinsExampleSixteen.java 18 May 2004 11:40:40 -0000 1.15 @@ -524,7 +524,6 @@ manifest.addDocument(BaseURI, "#notaries", transforms, Constants.ALGO_ID_DIGEST_SHA1, null, null); - manifest.generateDigestValues(); return manifest.getElement(); } 1.1 xml-security/src_samples/org/apache/xml/security/samples/signature/CreateMerlinsExampleTwentyThree.java Index: CreateMerlinsExampleTwentyThree.java =================================================================== /* * Copyright 1999-2004 The Apache Software Foundation. * * Licensed under the Apache License, Version 2.0 (the "License"); * you may not use this file except in compliance with the License. * You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. * */ package org.apache.xml.security.samples.signature; import java.io.ByteArrayInputStream; import java.io.File; import java.io.FileInputStream; import java.io.FileOutputStream; import java.security.KeyStore; import java.security.PrivateKey; import java.security.cert.X509Certificate; import org.apache.xml.security.keys.content.RetrievalMethod; import org.apache.xml.security.keys.content.X509Data; import org.apache.xml.security.keys.content.x509.XMLX509Certificate; import org.apache.xml.security.keys.content.x509.XMLX509IssuerSerial; import org.apache.xml.security.keys.content.x509.XMLX509SubjectName; import org.apache.xml.security.samples.utils.resolver.OfflineResolver; import org.apache.xml.security.signature.Manifest; import org.apache.xml.security.signature.ObjectContainer; import org.apache.xml.security.signature.Reference; import org.apache.xml.security.signature.SignatureProperties; import org.apache.xml.security.signature.SignatureProperty; import org.apache.xml.security.signature.SignedInfo; import org.apache.xml.security.signature.XMLSignature; import org.apache.xml.security.transforms.Transforms; import org.apache.xml.security.transforms.params.XPathContainer; import org.apache.xml.security.utils.Constants; import org.apache.xml.security.utils.IdResolver; import org.apache.xml.security.utils.JavaUtils; import org.apache.xml.security.utils.XMLUtils; import org.w3c.dom.Document; import org.w3c.dom.Element; import org.w3c.dom.Node; /** * * @author $Author: blautenb $ */ public class CreateMerlinsExampleTwentyThree { /** {@link org.apache.commons.logging} logging facility */ static org.apache.commons.logging.Log log = org.apache.commons.logging.LogFactory.getLog(CreateMerlinsExampleTwentyThree.class.getName()); /** * Method main * * @param unused * @throws Exception */ public static void main(String unused[]) throws Exception { Constants.setSignatureSpecNSprefix(""); //J- String keystoreType = "JKS"; String keystoreFile = "data/org/apache/xml/security/samples/input/keystore.jks"; String keystorePass = "xmlsecurity"; String privateKeyAlias = "test"; String privateKeyPass = "xmlsecurity"; String certificateAlias = "test"; File signatureFile = new File("merlinsTwentyThreeRecreatedNoRetrievalMethod.xml"); //J+ KeyStore ks = KeyStore.getInstance(keystoreType); FileInputStream fis = new FileInputStream(keystoreFile); ks.load(fis, keystorePass.toCharArray()); PrivateKey privateKey = (PrivateKey) ks.getKey(privateKeyAlias, privateKeyPass.toCharArray()); if (privateKey == null) { throw new RuntimeException("Private key is null"); } X509Certificate cert = (X509Certificate) ks.getCertificate(certificateAlias); javax.xml.parsers.DocumentBuilderFactory dbf = javax.xml.parsers.DocumentBuilderFactory.newInstance(); dbf.setNamespaceAware(true); javax.xml.parsers.DocumentBuilder db = dbf.newDocumentBuilder(); org.w3c.dom.Document doc = db.newDocument(); ////////////////////////////////////////////////// Element envelope = doc.createElementNS("http://www.usps.gov/", "Envelope"); envelope.setAttributeNS(Constants.NamespaceSpecNS, "xmlns", "http://www.usps.gov/"); envelope.setAttributeNS(Constants.NamespaceSpecNS, "xmlns:foo", "http://www.usps.gov/foo"); envelope.appendChild(doc.createTextNode("\n")); doc.appendChild(doc.createComment(" Preamble ")); doc.appendChild(envelope); doc.appendChild(doc.createComment(" Postamble ")); Element dearSir = doc.createElementNS("http://www.usps.gov/", "DearSir"); dearSir.appendChild(doc.createTextNode("foo")); envelope.appendChild(dearSir); envelope.appendChild(doc.createTextNode("\n")); Element body = doc.createElementNS("http://www.usps.gov/", "Body"); body.appendChild(doc.createTextNode("bar")); envelope.appendChild(body); envelope.appendChild(doc.createTextNode("\n")); Element YoursSincerely = doc.createElementNS("http://www.usps.gov/", "YoursSincerely"); YoursSincerely.appendChild(doc.createTextNode("\n")); envelope.appendChild(YoursSincerely); Element PostScript = doc.createElementNS("http://www.usps.gov/", "PostScript"); PostScript.appendChild(doc.createTextNode("bar")); envelope.appendChild(PostScript); Element Notaries = doc.createElementNS(null, "Notaries"); Notaries.setAttributeNS(Constants.NamespaceSpecNS, "xmlns", ""); Notaries.setAttributeNS(null, "Id", "notaries"); IdResolver.registerElementById(Notaries, "Id"); { Element Notary = doc.createElementNS(null, "Notary"); Notary.setAttributeNS(null, "name", "Great, A. T."); Notaries.appendChild(Notary); } { Element Notary = doc.createElementNS(null, "Notary"); Notary.setAttributeNS(null, "name", "Hun, A. T."); Notaries.appendChild(Notary); } envelope.appendChild(Notaries); envelope.appendChild(doc.createComment(" Commentary ")); ////////////////////////////////////////////////// String BaseURI = signatureFile.toURL().toString(); XMLSignature sig = new XMLSignature(doc, BaseURI, XMLSignature.ALGO_ID_SIGNATURE_DSA); YoursSincerely.appendChild(sig.getElement()); sig.setId("signature"); /* * Add the Objects */ // object-1 { ObjectContainer object1 = new ObjectContainer(doc); object1.setId("object-1"); object1.setMimeType("text/plain"); object1.appendChild(doc.createTextNode("I am the text.")); sig.appendObject(object1); } // object-2 { ObjectContainer object2 = new ObjectContainer(doc); object2.setId("object-2"); object2.setMimeType("text/plain"); object2.setEncoding("http://www.w3.org/2000/09/xmldsig#base64"); object2.appendChild(doc.createTextNode("SSBhbSB0aGUgdGV4dC4=")); sig.appendObject(object2); } // object-3 { ObjectContainer object = new ObjectContainer(doc); object.setId("object-3"); Element nonc = doc.createElementNS(null, "NonCommentandus"); nonc.setAttributeNS(Constants.NamespaceSpecNS, "xmlns", ""); nonc.appendChild(doc.createComment(" Commentandum ")); object.appendChild(doc.createTextNode("\n ")); object.appendChild(nonc); object.appendChild(doc.createTextNode("\n ")); sig.appendObject(object); } // object number 4 { ObjectContainer object = new ObjectContainer(doc); object.appendChild(createObject4(sig)); sig.appendObject(object); } // object number 4 { ObjectContainer object = new ObjectContainer(doc); SignatureProperties sps = new SignatureProperties(doc); sps.setId("signature-properties-1"); SignatureProperty sp = new SignatureProperty(doc, "#signature"); Element signedAdress = doc.createElementNS("urn:demo", "SignedAddress"); signedAdress.setAttributeNS(Constants.NamespaceSpecNS, "xmlns", "urn:demo"); Element IP = doc.createElementNS("urn:demo", "IP"); IP.appendChild(doc.createTextNode("83.161.120.155")); signedAdress.appendChild(IP); sp.appendChild(signedAdress); sps.addSignatureProperty(sp); object.appendChild(sps.getElement()); sig.appendObject(object); } { ObjectContainer object = new ObjectContainer(doc); object.setId("object-4"); X509Data x509data = new X509Data(doc); x509data.add(new XMLX509SubjectName(doc, cert)); x509data.add(new XMLX509IssuerSerial(doc, cert)); x509data.add(new XMLX509Certificate(doc, cert)); object.appendChild(x509data.getElement()); sig.appendObject(object); } /* * Add References */ sig.getSignedInfo() .addResourceResolver(new org.apache.xml.security.samples.utils.resolver .OfflineResolver()); sig.addDocument("http://www.w3.org/TR/xml-stylesheet"); { Transforms transforms = new Transforms(doc); transforms.addTransform(Transforms.TRANSFORM_BASE64_DECODE); sig.addDocument("http://xmldsig.pothole.com/xml-stylesheet.txt", transforms, Constants.ALGO_ID_DIGEST_SHA1); } { Transforms transforms = new Transforms(doc); XPathContainer xpathC = new XPathContainer(doc); xpathC.setXPath("sel888a:dbb7:2d49:b3f6:8605:bf4e:caed:e5a4text()"); transforms.addTransform(Transforms.TRANSFORM_XPATH, xpathC.getElementPlusReturns()); sig.addDocument("#object-1", transforms, Constants.ALGO_ID_DIGEST_SHA1, null, "http://www.w3.org/2000/09/xmldsig#Object"); } /* { Transforms transforms = new Transforms(doc); XPathContainer xpathC = new XPathContainer(doc); //J- xpathC.setXPathNamespaceContext("ds", Constants.SignatureSpecNS); xpathC.setXPath("\n" + " ancestor-or-sel888a:dbb7:2d49:b3f6:8605:bf4e:caed:e5a4ds:SignedInfo " + "\n" + " and " + "\n" + " count(ancestor-or-sel888a:dbb7:2d49:b3f6:8605:bf4e:caed:e5a4ds:Reference | " + "\n" + " here()/ancestor888a:dbb7:2d49:b3f6:8605:bf4e:caed:e5a4s:Reference[1]) > " + "\n" + " count(ancestor-or-sel888a:dbb7:2d49:b3f6:8605:bf4e:caed:e5a4ds:Reference) " + "\n" + " or " + "\n" + " count(ancestor-or-sel888a:dbb7:2d49:b3f6:8605:bf4e:caed:e5a4node() | " + "\n" + " id('notaries')) = " + "\n" + " count(ancestor-or-sel888a:dbb7:2d49:b3f6:8605:bf4e:caed:e5a4node()) " + "\n"); //J+ transforms.addTransform(Transforms.TRANSFORM_XPATH, xpathC.getElementPlusReturns()); sig.addDocument("", transforms, Constants.ALGO_ID_DIGEST_SHA1, null, "http://www.w3.org/2000/09/xmldsig#Object"); } */ { Transforms transforms = new Transforms(doc); transforms.addTransform(Transforms.TRANSFORM_BASE64_DECODE); sig.addDocument("#object-2", transforms, Constants.ALGO_ID_DIGEST_SHA1, null, "http://www.w3.org/2000/09/xmldsig#Object"); } sig.addDocument("#manifest-1", null, Constants.ALGO_ID_DIGEST_SHA1, null, "http://www.w3.org/2000/09/xmldsig#Manifest"); sig.addDocument("#signature-properties-1", null, Constants.ALGO_ID_DIGEST_SHA1, null, "http://www.w3.org/2000/09/xmldsig#SignatureProperties"); { Transforms transforms = new Transforms(doc); transforms.addTransform(Transforms.TRANSFORM_ENVELOPED_SIGNATURE); sig.addDocument("", transforms, Constants.ALGO_ID_DIGEST_SHA1); } { Transforms transforms = new Transforms(doc); transforms.addTransform(Transforms.TRANSFORM_ENVELOPED_SIGNATURE); transforms.addTransform(Transforms.TRANSFORM_C14N_WITH_COMMENTS); sig.addDocument("", transforms, Constants.ALGO_ID_DIGEST_SHA1); } { Transforms transforms = new Transforms(doc); transforms.addTransform(Transforms.TRANSFORM_ENVELOPED_SIGNATURE); sig.addDocument("#xpointer(/)", transforms, Constants.ALGO_ID_DIGEST_SHA1); } { Transforms transforms = new Transforms(doc); transforms.addTransform(Transforms.TRANSFORM_ENVELOPED_SIGNATURE); transforms.addTransform(Transforms.TRANSFORM_C14N_WITH_COMMENTS); sig.addDocument("#xpointer(/)", transforms, Constants.ALGO_ID_DIGEST_SHA1); } { sig.addDocument("#object-3", null, Constants.ALGO_ID_DIGEST_SHA1, null, "http://www.w3.org/2000/09/xmldsig#Object"); } { Transforms transforms = new Transforms(doc); transforms.addTransform(Transforms.TRANSFORM_C14N_WITH_COMMENTS); sig.addDocument("#object-3", transforms, Constants.ALGO_ID_DIGEST_SHA1, null, "http://www.w3.org/2000/09/xmldsig#Object"); } { sig.addDocument("#xpointer(id('object-3'))", null, Constants.ALGO_ID_DIGEST_SHA1, null, "http://www.w3.org/2000/09/xmldsig#Object"); } { Transforms transforms = new Transforms(doc); transforms.addTransform(Transforms.TRANSFORM_C14N_WITH_COMMENTS); sig.addDocument("#xpointer(id('object-3'))", transforms, Constants.ALGO_ID_DIGEST_SHA1, null, "http://www.w3.org/2000/09/xmldsig#Object"); } { sig.addDocument("#manifest-reference-1", null, Constants.ALGO_ID_DIGEST_SHA1, "reference-1", "http://www.w3.org/2000/09/xmldsig#Reference"); } { sig.addDocument("#reference-1", null, Constants.ALGO_ID_DIGEST_SHA1, "reference-2", "http://www.w3.org/2000/09/xmldsig#Reference"); } { sig.addDocument("#reference-2", null, Constants.ALGO_ID_DIGEST_SHA1, null, "http://www.w3.org/2000/09/xmldsig#Reference"); } /* * Add KeyInfo and sign() */ { Transforms retrievalTransforms = new Transforms(doc); XPathContainer xpathC = new XPathContainer(doc); xpathC.setXPathNamespaceContext("ds", Constants.SignatureSpecNS); xpathC.setXPath("ancestor-or-sel888a:dbb7:2d49:b3f6:8605:bf4e:caed:e5a4ds:X509Data"); retrievalTransforms.addTransform(Transforms.TRANSFORM_XPATH, xpathC.getElement()); sig.getKeyInfo().add( new RetrievalMethod( doc, "#object-4", retrievalTransforms, "http://www.w3.org/2000/09/xmldsig#X509Data")); /* X509Data x509data = new X509Data(doc); x509data.add(new XMLX509SubjectName(doc, cert)); x509data.add(new XMLX509IssuerSerial(doc, cert)); x509data.add(new XMLX509Certificate(doc, cert)); sig.getKeyInfo().add(x509data); */ System.out.println("Start signing"); sig.sign(privateKey); System.out.println("Finished signing"); } FileOutputStream f = new FileOutputStream(signatureFile); XMLUtils.outputDOMc14nWithComments(doc, f); f.close(); System.out.println("Wrote signature to " + BaseURI); SignedInfo s = sig.getSignedInfo(); for (int i=0; i<s.getLength(); i++) { Reference r = s.item(i); String fn = "merlin16_"+i+".html"; System.out.println("Wrote Reference " + i + " to file " + fn); JavaUtils.writeBytesToFilename(fn, r.getHTMLRepresentation().getBytes()); } /* for (int i=0; i<s.getSignedContentLength(); i++) { if (s.item(i).getType().equals(Reference.MANIFEST_URI)) { System.out.println("################ Signed Manifest " + i + " ################"); } else { System.out.println("################ Signed Resource " + i + " ################"); } System.out.println(new String(s.getSignedContentItem(i))); System.out.println(); } */ } /** * Method createObject4 * * @param sig * * @throws Exception */ public static Element createObject4(XMLSignature sig) throws Exception { Document doc = sig.getElement().getOwnerDocument(); String BaseURI = sig.getBaseURI(); Manifest manifest = new Manifest(doc); manifest.addResourceResolver(new OfflineResolver()); manifest.setId("manifest-1"); manifest.addDocument(BaseURI, "http://www.w3.org/TR/xml-stylesheet", null, Constants.ALGO_ID_DIGEST_SHA1, "manifest-reference-1", null); manifest.addDocument(BaseURI, "#reference-1", null, Constants.ALGO_ID_DIGEST_SHA1, null, "http://www.w3.org/2000/09/xmldsig#Reference"); //J- String xslt = "" + "<xsl:stylesheet xmlns:xsl='http://www.w3.org/1999/XSL/Transform'\n" + " xmlns='http://www.w3.org/TR/xhtml1/strict' \n" + " exclude-result-prefixes='foo' \n" + " version='1.0'>\n" + " <xsl:output encoding='UTF-8' \n" + " indent='no' \n" + " method='xml' />\n" + " <xsl:template match='/'>\n" + " <html>\n" + " <head>\n" + " <title>Notaries</title>\n" + " </head>\n" + " <body>\n" + " <table>\n" + " <xsl:for-each select='Notaries/Notary'>\n" + " <tr>\n" + " <th>\n" + " <xsl:value-of select='@name' />\n" + " </th>\n" + " </tr>\n" + " </xsl:for-each>\n" + " </table>\n" + " </body>\n" + " </html>\n" + " </xsl:template>\n" + "</xsl:stylesheet>\n" ; //J+ javax.xml.parsers.DocumentBuilderFactory dbf = javax.xml.parsers.DocumentBuilderFactory.newInstance(); dbf.setNamespaceAware(true); javax.xml.parsers.DocumentBuilder db = dbf.newDocumentBuilder(); org.w3c.dom.Document docxslt = db.parse(new ByteArrayInputStream(xslt.getBytes())); Node xslElem = docxslt.getDocumentElement(); Node xslElemImported = doc.importNode(xslElem, true); Transforms transforms = new Transforms(doc); transforms.addTransform(Transforms.TRANSFORM_XSLT, (Element) xslElemImported); manifest.addDocument(BaseURI, "#notaries", transforms, Constants.ALGO_ID_DIGEST_SHA1, null, null); return manifest.getElement(); } static { org.apache.xml.security.Init.init(); } } 1.1 xml-security/src_samples/org/apache/xml/security/samples/signature/VerifyMerlinsExamplesTwentyThree.java Index: VerifyMerlinsExamplesTwentyThree.java =================================================================== /* * Copyright 1999-2004 The Apache Software Foundation. * * Licensed under the Apache License, Version 2.0 (the "License"); * you may not use this file except in compliance with the License. * You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. * */ package org.apache.xml.security.samples.signature; import java.io.File; import java.io.FileInputStream; import java.io.FileNotFoundException; import java.security.PublicKey; import java.security.cert.X509Certificate; import javax.xml.parsers.DocumentBuilderFactory; import org.apache.xml.security.keys.KeyInfo; import org.apache.xml.security.signature.XMLSignature; import org.apache.xml.security.utils.Constants; import org.apache.xml.security.utils.XMLUtils; import org.apache.xpath.XPathAPI; import org.w3c.dom.Element; /** * * @author $Author: blautenb $ */ public class VerifyMerlinsExamplesTwentyThree { /** {@link org.apache.commons.logging} logging facility */ static org.apache.commons.logging.Log log = org.apache.commons.logging.LogFactory.getLog( VerifyMerlinsExamplesTwentyThree.class.getName()); /** Field schemaValidate */ static final boolean schemaValidate = false; /** Field signatureSchemaFile */ static final String signatureSchemaFile = "data/xmldsig-core-schema.xsd"; /** * Method main * * @param unused */ public static void main(String unused[]) { if (schemaValidate) { System.out.println("We do schema-validation"); } else { System.out.println("We do not schema-validation"); } javax.xml.parsers.DocumentBuilderFactory dbf = javax.xml.parsers.DocumentBuilderFactory.newInstance(); if (VerifyMerlinsExamplesTwentyThree.schemaValidate) { dbf.setAttribute("http://apache.org/xml/features/validation/schema", Boolean.TRUE); dbf.setAttribute( "http://apache.org/xml/features/dom/defer-node-expansion", Boolean.TRUE); dbf.setValidating(true); dbf.setAttribute("http://xml.org/sax/features/validation", Boolean.TRUE); dbf.setAttribute( "http://apache.org/xml/properties/schema/external-schemaLocation", Constants.SignatureSpecNS + " " + VerifyMerlinsExamplesTwentyThree.signatureSchemaFile); } dbf.setNamespaceAware(true); dbf.setAttribute("http://xml.org/sax/features/namespaces", Boolean.TRUE); //J- String merlinsDir = "data/ie/baltimore/merlin-examples/merlin-xmldsig-twenty-three/"; String filenames[] = { // "23signature.xml" // "merlinsTwentyThreeRecreated.xml" merlinsDir + "signature.xml", merlinsDir + "signature-enveloped-dsa.xml", merlinsDir + "signature-enveloping-b64-dsa.xml", merlinsDir + "signature-enveloping-dsa.xml", merlinsDir + "signature-enveloping-hmac-sha1-40.xml", merlinsDir + "signature-enveloping-hmac-sha1.xml", merlinsDir + "signature-enveloping-rsa.xml", merlinsDir + "signature-external-b64-dsa.xml", merlinsDir + "signature-external-dsa.xml" }; //J+ int start = 0; int end = filenames.length; for (int i = start; i < end; i++) { String signatureFileName = filenames[i]; try { verify(dbf, signatureFileName); } catch (Exception ex) { ex.printStackTrace(); } } } /** * Method verify * * @param dbf * @param filename * @throws Exception */ public static void verify(DocumentBuilderFactory dbf, String filename) throws Exception { File f = new File(filename); System.out.println("Try to verify " + f.toURL().toString()); javax.xml.parsers.DocumentBuilder db = dbf.newDocumentBuilder(); if (VerifyMerlinsExamplesTwentyThree.schemaValidate) { db.setErrorHandler(new org.apache.xml.security.utils .IgnoreAllErrorHandler()); db.setEntityResolver(new org.xml.sax.EntityResolver() { public org.xml.sax .InputSource resolveEntity(String publicId, String systemId) throws org.xml.sax.SAXException { if (systemId.endsWith("xmldsig-core-schema.xsd")) { try { return new org.xml.sax .InputSource(new FileInputStream(signatureSchemaFile)); } catch (FileNotFoundException ex) { throw new org.xml.sax.SAXException(ex); } } else { return null; } } }); } org.w3c.dom.Document doc = db.parse(new java.io.FileInputStream(f)); Element nscontext = XMLUtils.createDSctx(doc, "ds", Constants.SignatureSpecNS); Element sigElement = (Element) XPathAPI.selectSingleNode(doc, "//ds:Signature[1]", nscontext); XMLSignature signature = new XMLSignature(sigElement, f.toURL().toString()); signature.getSignedInfo() .addResourceResolver(new org.apache.xml.security.samples.utils.resolver .OfflineResolver()); signature.setFollowNestedManifests(false); // signature.addResourceResolver(new OfflineResolver()); // XMLUtils.outputDOMc14nWithComments(signature.getElement(), System.out); KeyInfo ki = signature.getKeyInfo(); if (ki != null) { /* if (ki.containsX509Data()) { System.out.println("Could find a X509Data element in the KeyInfo"); } */ X509Certificate cert = signature.getKeyInfo().getX509Certificate(); if (cert != null) { /* System.out.println( "I try to verify the signature using the X509 Certificate: " + cert); */ System.out.println("The XML signature in file " + f.toURL().toString() + " is " + (signature.checkSignatureValue(cert) ? "valid (good)" : "invalid !!!!! (bad)")); } else { // System.out.println("Did not find a Certificate"); PublicKey pk = signature.getKeyInfo().getPublicKey(); if (pk != null) { // System.out.println("I try to verify the signature using the public key: " + pk); System.out.println("The XML signature in file " + f.toURL().toString() + " is " + (signature.checkSignatureValue(pk) ? "valid (good)" : "invalid !!!!! (bad)")); } else { System.out.println( "Did not find a public key, so I can't check the signature"); } } } else { System.out.println("Did not find a KeyInfo"); } /* SignedInfo s = signature.getSignedInfo(); for (int i=0; i<s.getSignedContentLength(); i++) { System.out.println("################ Signed Resource " + i + " ################"); FileOutputStream f2 = new FileOutputStream(filename + "." + i + ".input"); byte[] data = s.getSignedContentItem(i); f2.write(data); f2.close(); System.out.println(new String(data)); System.out.println(); } */ } static { org.apache.xml.security.Init.init(); } } 1.8 +4 -1 xml-security/src_samples/org/apache/xml/security/samples/utils/resolver/OfflineResolver.java Index: OfflineResolver.java =================================================================== RCS file: /home/cvs/xml-security/src_samples/org/apache/xml/security/samples/utils/resolver/OfflineResolver.java,v retrieving revision 1.7 retrieving revision 1.8 diff -u -r1.7 -r1.8 --- OfflineResolver.java 8 Feb 2004 06:08:43 -0000 1.7 +++ OfflineResolver.java 18 May 2004 11:40:40 -0000 1.8 @@ -156,5 +156,8 @@ OfflineResolver.register( "http://xmldsig.pothole.com/xml-stylesheet.txt", "data/com/pothole/xmldsig/xml-stylesheet.txt", "text/xml"); + OfflineResolver.register( + "http://www.w3.org/Signature/2002/04/xml-stylesheet.b64", + "data/ie/baltimore/merlin-examples/merlin-xmldsig-twenty-three/xml-stylesheet.b64", "text/plain"); } } From securitydiazchelsea@example.net Tue May 18 11:42:55 2004 Return-Path: <securitydiazchelsea@example.net> Delivered-To: diazchelsea@example.net Received: (qmail 47898 invoked from network); 18 May 2004 11:42:55 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (83.161.120.155) by minotaur-2.apache.org with SMTP; 18 May 2004 11:42:55 -0000 Received: (qmail 32115 invoked by uid 500); 18 May 2004 11:42:42 -0000 Delivered-To: diazchelsea@example.net Received: (qmail 31924 invoked by uid 500); 18 May 2004 11:42:40 -0000 Mailing-List: contact diazchelsea@example.net; run by ezmlm Precedence: bulk X-No-Archive: yes List-Post: <mailto:diazchelsea@example.net> List-Help: <mailto:diazchelsea@example.net> List-Unsubscribe: <mailto:diazchelsea@example.net> List-Subscribe: <mailto:diazchelsea@example.net> Delivered-To: mailing list diazchelsea@example.net Received: (qmail 31848 invoked by uid 98); 18 May 2004 11:42:39 -0000 X-Qmail-Scanner-Mail-From: diazchelsea@example.net via hermes.apache.org X-Qmail-Scanner: 1.20 (Clear:RC:0(83.161.120.155):. Processed in 0.550653 secs) Date: 18 May 2004 11:42:34 -0000 Message-ID: <diazchelsea@example.net> From: diazchelsea@example.net To: diazchelsea@example.net Subject: cvs commit: xml-security/src_unitTests/org/apache/xml/security/test/utils/resolver OfflineResolver.java X-Spam-Rating: hermes.apache.org 1.6.2 0/1000/N X-Spam-Rating: minotaur-2.apache.org 1.6.2 0/1000/N blautenb 2004/05/18 04:42:34 Modified: src_unitTests/org/apache/xml/security/test/interop BaltimoreTest.java src_unitTests/org/apache/xml/security/test/utils/resolver OfflineResolver.java Log: Validation of Merlin 23 provided by dims - Bugzilla #28872 Revision Changes Path 1.11 +233 -1 xml-security/src_unitTests/org/apache/xml/security/test/interop/BaltimoreTest.java Index: BaltimoreTest.java =================================================================== RCS file: /home/cvs/xml-security/src_unitTests/org/apache/xml/security/test/interop/BaltimoreTest.java,v retrieving revision 1.10 retrieving revision 1.11 diff -u -r1.10 -r1.11 --- BaltimoreTest.java 8 Feb 2004 06:08:22 -0000 1.10 +++ BaltimoreTest.java 18 May 2004 11:42:33 -0000 1.11 @@ -44,6 +44,8 @@ "data/ie/baltimore/merlin-examples/merlin-xmldsig-fifteen/"; static String merlinsDir16 = "data/ie/baltimore/merlin-examples/merlin-xmldsig-sixteen"; + static String merlinsDir23 = + "data/ie/baltimore/merlin-examples/merlin-xmldsig-twenty-three/"; /** * Method suite @@ -305,12 +307,242 @@ assertTrue(filename, verify); } + + /** + * Method test_twenty_three_enveloping_hmac_sha1 + * + * @throws Exception + */ + public void test_twenty_three_enveloping_hmac_sha1() throws Exception { + + String filename = merlinsDir23 + "signature-enveloping-hmac-sha1.xml"; + boolean verify = this.verifyHMAC(filename, new OfflineResolver(), false, + "secret".getBytes("ASCII")); + + if (!verify) { + log.error("Verification failed for " + filename); + } + + assertTrue(filename, verify); + } + + /** + * Method test_twenty_three_enveloping_hmac_sha1_40 + * + * @throws Exception + */ + public void test_twenty_three_enveloping_hmac_sha1_40() throws Exception { + + String filename = merlinsDir23 + "signature-enveloping-hmac-sha1-40.xml"; + ResourceResolverSpi resolver = new OfflineResolver(); + boolean followManifests = false; + byte[] hmacKey = "secret".getBytes("ASCII"); + boolean verify = false; + + try { + verify = this.verifyHMAC(filename, resolver, followManifests, hmacKey); + } catch (RuntimeException ex) { + log.error("Verification crashed for " + filename); + throw ex; + } + + if (!verify) { + log.error("Verification failed for " + filename); + } + + assertTrue(filename, verify); + } + + /** + * Method test_twenty_three_enveloped_dsa + * + * @throws Exception + */ + public void test_twenty_three_enveloped_dsa() throws Exception { + + String filename = merlinsDir23 + "signature-enveloped-dsa.xml"; + ResourceResolverSpi resolver = new OfflineResolver(); + boolean followManifests = false; + boolean verify = false; + + try { + verify = this.verify(filename, resolver, followManifests); + } catch (RuntimeException ex) { + log.error("Verification crashed for " + filename); + throw ex; + } + + if (!verify) { + log.error("Verification failed for " + filename); + } + + assertTrue(filename, verify); + } + + /** + * Method test_twenty_three_enveloping_b64_dsa + * + * @throws Exception + */ + public void test_twenty_three_enveloping_b64_dsa() throws Exception { + + String filename = merlinsDir23 + "signature-enveloping-b64-dsa.xml"; + ResourceResolverSpi resolver = null; + boolean followManifests = false; + boolean verify = false; + + try { + verify = this.verify(filename, resolver, followManifests); + } catch (RuntimeException ex) { + log.error("Verification crashed for " + filename); + throw ex; + } + + if (!verify) { + log.error("Verification failed for " + filename); + } + + assertTrue(filename, verify); + } + + /** + * Method test_twenty_three_enveloping_dsa + * + * @throws Exception + */ + public void test_twenty_three_enveloping_dsa() throws Exception { + + String filename = merlinsDir23 + "signature-enveloping-dsa.xml"; + ResourceResolverSpi resolver = new OfflineResolver(); + boolean followManifests = false; + boolean verify = false; + + try { + verify = this.verify(filename, resolver, followManifests); + } catch (RuntimeException ex) { + log.error("Verification crashed for " + filename); + throw ex; + } + + if (!verify) { + log.error("Verification failed for " + filename); + } + + assertTrue(filename, verify); + } + + /** + * Method test_twenty_three_enveloping_rsa + * + * @throws Exception + */ + public void test_twenty_three_enveloping_rsa() throws Exception { + + String filename = merlinsDir23 + "signature-enveloping-rsa.xml"; + ResourceResolverSpi resolver = new OfflineResolver(); + boolean followManifests = false; + boolean verify = false; + + try { + verify = this.verify(filename, resolver, followManifests); + } catch (RuntimeException ex) { + log.error("Verification crashed for " + filename); + throw ex; + } + + if (!verify) { + log.error("Verification failed for " + filename); + } + + assertTrue(filename, verify); + } + + /** + * Method test_twenty_three_external_b64_dsa + * + * @throws Exception + */ + public void test_twenty_three_external_b64_dsa() throws Exception { + + String filename = merlinsDir23 + "signature-external-b64-dsa.xml"; + ResourceResolverSpi resolver = new OfflineResolver(); + boolean followManifests = false; + boolean verify = false; + + try { + verify = this.verify(filename, resolver, followManifests); + } catch (RuntimeException ex) { + log.error("Verification crashed for " + filename); + throw ex; + } + + if (!verify) { + log.error("Verification failed for " + filename); + } + + assertTrue(filename, verify); + } + + /** + * Method test_twenty_three_external_dsa + * + * @throws Exception + */ + public void test_twenty_three_external_dsa() throws Exception { + + String filename = merlinsDir23 + "signature-external-dsa.xml"; + ResourceResolverSpi resolver = new OfflineResolver(); + boolean followManifests = false; + boolean verify = false; + + try { + verify = this.verify(filename, resolver, followManifests); + } catch (RuntimeException ex) { + log.error("Verification crashed for " + filename); + throw ex; + } + + if (!verify) { + log.error("Verification failed for " + filename); + } + + assertTrue(filename, verify); + } + + /** + * Method test_twenty_three_external_dsa_2 + * + * @throws Exception + */ + public void test_twenty_three_external_dsa_2() throws Exception { + + String filename = + merlinsDir23 + "signature.xml"; + ResourceResolverSpi resolver = new OfflineResolver(); + boolean followManifests = false; + boolean verify = false; + + try { + verify = this.verify(filename, resolver, followManifests); + } catch (RuntimeException ex) { + log.error("Verification crashed for " + filename); + throw ex; + } + + if (!verify) { + log.error("Verification failed for " + filename); + } + + assertTrue(filename, verify); + } + static { String basedir = System.getProperty("basedir"); if(basedir != null && !"".equals(basedir)) { merlinsDir15 = basedir + "/" + merlinsDir15; merlinsDir16 = basedir + "/" + merlinsDir16; + merlinsDir23 = basedir + "/" + merlinsDir23; } org.apache.xml.security.Init.init(); } 1.8 +4 -1 xml-security/src_unitTests/org/apache/xml/security/test/utils/resolver/OfflineResolver.java Index: OfflineResolver.java =================================================================== RCS file: /home/cvs/xml-security/src_unitTests/org/apache/xml/security/test/utils/resolver/OfflineResolver.java,v retrieving revision 1.7 retrieving revision 1.8 diff -u -r1.7 -r1.8 --- OfflineResolver.java 8 Feb 2004 06:08:22 -0000 1.7 +++ OfflineResolver.java 18 May 2004 11:42:33 -0000 1.8 @@ -169,5 +169,8 @@ OfflineResolver.register( "http://xmldsig.pothole.com/xml-stylesheet.txt", basedir + "data/com/pothole/xmldsig/xml-stylesheet.txt", "text/xml"); + OfflineResolver.register( + "http://www.w3.org/Signature/2002/04/xml-stylesheet.b64", + basedir + "data/ie/baltimore/merlin-examples/merlin-xmldsig-twenty-three/xml-stylesheet.b64", "text/plain"); } } From securitydiazchelsea@example.net Tue May 18 11:43:48 2004 Return-Path: <securitydiazchelsea@example.net> Delivered-To: diazchelsea@example.net Received: (qmail 50409 invoked from network); 18 May 2004 11:43:48 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (83.161.120.155) by minotaur-2.apache.org with SMTP; 18 May 2004 11:43:48 -0000 Received: (qmail 38232 invoked by uid 500); 18 May 2004 11:43:51 -0000 Delivered-To: diazchelsea@example.net Received: (qmail 38198 invoked by uid 500); 18 May 2004 11:43:51 -0000 Mailing-List: contact diazchelsea@example.net; run by ezmlm Precedence: bulk X-No-Archive: yes List-Post: <mailto:diazchelsea@example.net> List-Help: <mailto:diazchelsea@example.net> List-Unsubscribe: <mailto:diazchelsea@example.net> List-Subscribe: <mailto:diazchelsea@example.net> Delivered-To: mailing list diazchelsea@example.net Received: (qmail 38164 invoked by uid 98); 18 May 2004 11:43:51 -0000 X-Qmail-Scanner-Mail-From: diazchelsea@example.net via hermes.apache.org X-Qmail-Scanner: 1.20 (Clear:RC:0(83.161.120.155):. Processed in 0.064201 secs) Date: 18 May 2004 11:43:47 -0000 Message-ID: <diazchelsea@example.net> From: diazchelsea@example.net To: diazchelsea@example.net Subject: cvs commit: xml-security/data/ie/baltimore/merlin-examples/merlin-xmldsig-twenty-three - New directory X-Spam-Rating: hermes.apache.org 1.6.2 0/1000/N X-Spam-Rating: minotaur-2.apache.org 1.6.2 0/1000/N blautenb 2004/05/18 04:43:47 xml-security/data/ie/baltimore/merlin-examples/merlin-xmldsig-twenty-three - New directory From securitydiazchelsea@example.net Tue May 18 11:44:36 2004 Return-Path: <securitydiazchelsea@example.net> Delivered-To: diazchelsea@example.net Received: (qmail 51012 invoked from network); 18 May 2004 11:44:36 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (83.161.120.155) by minotaur-2.apache.org with SMTP; 18 May 2004 11:44:36 -0000 Received: (qmail 41894 invoked by uid 500); 18 May 2004 11:44:40 -0000 Delivered-To: diazchelsea@example.net Received: (qmail 41848 invoked by uid 500); 18 May 2004 11:44:39 -0000 Mailing-List: contact diazchelsea@example.net; run by ezmlm Precedence: bulk X-No-Archive: yes List-Post: <mailto:diazchelsea@example.net> List-Help: <mailto:diazchelsea@example.net> List-Unsubscribe: <mailto:diazchelsea@example.net> List-Subscribe: <mailto:diazchelsea@example.net> Delivered-To: mailing list diazchelsea@example.net Received: (qmail 41765 invoked by uid 98); 18 May 2004 11:44:39 -0000 X-Qmail-Scanner-Mail-From: diazchelsea@example.net via hermes.apache.org X-Qmail-Scanner: 1.20 (Clear:RC:0(83.161.120.155):. Processed in 0.26362 secs) Date: 18 May 2004 11:44:34 -0000 Message-ID: <diazchelsea@example.net> From: diazchelsea@example.net To: diazchelsea@example.net Subject: cvs commit: xml-security/data/ie/baltimore/merlin-examples/merlin-xmldsig-twenty-three/certs - New directory X-Spam-Rating: hermes.apache.org 1.6.2 0/1000/N X-Spam-Rating: minotaur-2.apache.org 1.6.2 0/1000/N blautenb 2004/05/18 04:44:34 xml-security/data/ie/baltimore/merlin-examples/merlin-xmldsig-twenty-three/certs - New directory From securitydiazchelsea@example.net Tue May 18 11:46:04 2004 Return-Path: <securitydiazchelsea@example.net> Delivered-To: diazchelsea@example.net Received: (qmail 52428 invoked from network); 18 May 2004 11:46:04 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (83.161.120.155) by minotaur-2.apache.org with SMTP; 18 May 2004 11:46:04 -0000 Received: (qmail 49181 invoked by uid 500); 18 May 2004 11:46:08 -0000 Delivered-To: diazchelsea@example.net Received: (qmail 49135 invoked by uid 500); 18 May 2004 11:46:07 -0000 Mailing-List: contact diazchelsea@example.net; run by ezmlm Precedence: bulk X-No-Archive: yes List-Post: <mailto:diazchelsea@example.net> List-Help: <mailto:diazchelsea@example.net> List-Unsubscribe: <mailto:diazchelsea@example.net> List-Subscribe: <mailto:diazchelsea@example.net> Delivered-To: mailing list diazchelsea@example.net Received: (qmail 49039 invoked by uid 98); 18 May 2004 11:46:06 -0000 X-Qmail-Scanner-Mail-From: diazchelsea@example.net via hermes.apache.org X-Qmail-Scanner: 1.20 (Clear:RC:0(83.161.120.155):. Processed in 0.963575 secs) Date: 18 May 2004 11:46:00 -0000 Message-ID: <diazchelsea@example.net> From: diazchelsea@example.net To: diazchelsea@example.net Subject: cvs commit: xml-security/data/ie/baltimore/merlin-examples/merlin-xmldsig-twenty-three/certs badb.crt balor.crt bres.crt ca.crt lugh.crt macha.crt morigu.crt nemain.crt X-Spam-Rating: hermes.apache.org 1.6.2 0/1000/N X-Spam-Rating: minotaur-2.apache.org 1.6.2 0/1000/N blautenb 2004/05/18 04:46:00 Modified: data/ie/baltimore/merlin-examples urls.txt Added: data/ie/baltimore/merlin-examples/merlin-xmldsig-twenty-three Readme.txt signature-c14n-0.txt signature-c14n-1.txt signature-c14n-10.txt signature-c14n-11.txt signature-c14n-12.txt signature-c14n-13.txt signature-c14n-14.txt signature-c14n-15.txt signature-c14n-16.txt signature-c14n-17.txt signature-c14n-2.txt signature-c14n-3.txt signature-c14n-4.txt signature-c14n-5.txt signature-c14n-6.txt signature-c14n-7.txt signature-c14n-8.txt signature-c14n-9.txt signature-enveloped-dsa-c14n-0.txt signature-enveloped-dsa-c14n-1.txt signature-enveloped-dsa.xml signature-enveloping-b64-dsa-c14n-0.txt signature-enveloping-b64-dsa.xml signature-enveloping-dsa-c14n-0.txt signature-enveloping-dsa-c14n-1.txt signature-enveloping-dsa.xml signature-enveloping-hmac-sha1-40-c14n-0.txt signature-enveloping-hmac-sha1-40-c14n-1.txt signature-enveloping-hmac-sha1-40.xml signature-enveloping-hmac-sha1-c14n-0.txt signature-enveloping-hmac-sha1-c14n-1.txt signature-enveloping-hmac-sha1.xml signature-enveloping-rsa-c14n-0.txt signature-enveloping-rsa-c14n-1.txt signature-enveloping-rsa.xml signature-external-b64-dsa-c14n-0.txt signature-external-b64-dsa.xml signature-external-dsa-c14n-0.txt signature-external-dsa.xml signature-keyname.xml signature-retrievalmethod-rawx509crt.xml signature-x509-crt-crl.xml signature-x509-crt.xml signature-x509-is.xml signature-x509-ski.xml signature-x509-sn.xml signature.tmpl signature.xml xml-stylesheet.b64 data/ie/baltimore/merlin-examples/merlin-xmldsig-twenty-three/certs badb.crt balor.crt bres.crt ca.crt lugh.crt macha.crt morigu.crt nemain.crt Log: Validation of Merlin 23 provided by dims - Bugzilla #28872 Revision Changes Path 1.2 +1 -0 xml-security/data/ie/baltimore/merlin-examples/urls.txt Index: urls.txt =================================================================== RCS file: /home/cvs/xml-security/data/ie/baltimore/merlin-examples/urls.txt,v retrieving revision 1.1 retrieving revision 1.2 diff -u -r1.1 -r1.2 --- urls.txt 1 Oct 2001 08:22:25 -0000 1.1 +++ urls.txt 18 May 2004 11:45:57 -0000 1.2 @@ -12,3 +12,4 @@ http://lists.w3.org/Archives/Public/w3c-ietf-xmldsig/2001AprJun/att-0033/01-merlin-xmldsig-sixteen.tar.gz http://lists.w3.org/Archives/Public/w3c-ietf-xmldsig/2001AprJun/att-0110/01-merlin-xmldsig-seventeen.tar.gz http://lists.w3.org/Archives/Public/w3c-ietf-xmldsig/2001AprJun/att-0124/01-merlin-xmldsig-eighteen.tar.gz +http://lists.w3.org/Archives/Public/w3c-ietf-xmldsig/2002AprJun/att-0016/01-merlin-xmldsig-twenty-three.tar.gz 1.1 xml-security/data/ie/baltimore/merlin-examples/merlin-xmldsig-twenty-three/Readme.txt Index: Readme.txt =================================================================== Sample XML Signatures[1][2] [1] http://www.w3.org/TR/2002/REC-xmldsig-core-20020212/ [2] http://www.w3.org/TR/2001/REC-xml-c14n-20010315 1. A large and complex signature: This includes internal and external base 64, references of the forms "", "#xpointer(/)", "#foo" and "#xpointer(id('foo'))" (with and without comments), manifests, signature properties, simple xpath with here(), xslt, retrieval method and odd interreferential dependencies. signature.xml - A signature signature.tmpl - The template from which the signature was created signature-c14n-*.txt - All intermediate c14n output 2. Some basic signatures: The key for the HMAC-SHA1 signatures is "secret".getBytes("ASCII") which is, in hex, (73 65 63 72 65 74). No key info is provided for these signatures. signature-enveloped-dsa.xml signature-enveloping-b64-dsa.xml signature-enveloping-dsa.xml signature-enveloping-hmac-sha1-40.xml signature-enveloping-hmac-sha1.xml signature-enveloping-rsa.xml signature-external-b64-dsa.xml signature-external-dsa.xml - The signatures signature-*-c14n-*.txt - The intermediate c14n output 3. Varying key information: To resolve the key associated with the KeyName in `signature-keyname.xml' you must perform a cunning transformation from the name `Xxx' to the certificate that resides in the directory `certs/' that has a subject name containing the common name `Xxx', which happens to be in the file `certs/xxx.crt'. To resolve the key associated with the X509Data in `signature-x509-is.xml', `signature-x509-ski.xml' and `signature-x509-sn.xml' you need to resolve the identified certificate from those in the `certs' directory. In `signature-x509-crt-crl.xml' an X.509 CRL is present which has revoked the X.509 certificate used for signing. So verification should be qualified. signature-keyname.xml signature-retrievalmethod-rawx509crt.xml signature-x509-crt-crl.xml signature-x509-crt.xml signature-x509-is.xml signature-x509-ski.xml signature-x509-sn.xml - The signatures certs/*.crt - The certificates Merlin Hughes <diazchelsea@example.net> Baltimore Technologies, Ltd. http://www.baltimore.com/ Thursday, April 4, 2002 1.1 xml-security/data/ie/baltimore/merlin-examples/merlin-xmldsig-twenty-three/signature-c14n-0.txt Index: signature-c14n-0.txt =================================================================== I am the text. 1.1 xml-security/data/ie/baltimore/merlin-examples/merlin-xmldsig-twenty-three/signature-c14n-1.txt Index: signature-c14n-1.txt =================================================================== <SignatureProperties xmlns="http://www.w3.org/2000/09/xmldsig#" xmlns:foo="http://example.org/foo" Id="signature-properties-1"> <SignatureProperty Target="#signature"> <SignerAddress xmlns="urn:demo"><IP>83.161.120.155</IP></SignerAddress> </SignatureProperty> </SignatureProperties> 1.1 xml-security/data/ie/baltimore/merlin-examples/merlin-xmldsig-twenty-three/signature-c14n-10.txt Index: signature-c14n-10.txt =================================================================== <Manifest xmlns="http://www.w3.org/2000/09/xmldsig#" xmlns:foo="http://example.org/foo" Id="manifest-1"> <Reference Id="manifest-reference-1" URI="http://www.w3.org/TR/xml-stylesheet"> <DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"></DigestMethod> <DigestValue>60NvZvtdTB+7UnlLp/H24p7h4bs=</DigestValue> </Reference> <Reference URI="#reference-1"> <DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"></DigestMethod> <DigestValue>qURlo3LSq4TWQtygBZJ0iXQ9E14=</DigestValue> </Reference> <Reference URI="#notaries"> <Transforms> <Transform Algorithm="http://www.w3.org/TR/1999/REC-xslt-19991116"> <xsl:stylesheet xmlns="http://www.w3.org/TR/xhtml1/strict" xmlns:xsl="http://www.w3.org/1999/XSL/Transform" exclude-result-prefixes="foo" version="1.0"> <xsl:output encoding="UTF-8" indent="no" method="xml"></xsl:output> <xsl:template match="/"> <html> <head> <title>Notaries</title> </head> <body> <table> <xsl:for-each select="Notaries/Notary"> <tr> <th> <xsl:value-of select="@name"></xsl:value-of> </th> </tr> </xsl:for-each> </table> </body> </html> </xsl:template> </xsl:stylesheet> </Transform> <Transform Algorithm="http://www.w3.org/TR/2001/REC-xml-c14n-20010315"></Transform> </Transforms> <DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"></DigestMethod> <DigestValue>c7wq5XKos6RqNVJyFy7/fl6+sAs=</DigestValue> </Reference> </Manifest> 1.1 xml-security/data/ie/baltimore/merlin-examples/merlin-xmldsig-twenty-three/signature-c14n-11.txt Index: signature-c14n-11.txt =================================================================== <Reference xmlns="http://www.w3.org/2000/09/xmldsig#" xmlns:foo="http://example.org/foo" Id="reference-2" URI="#reference-1"> <DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"></DigestMethod> <DigestValue>qURlo3LSq4TWQtygBZJ0iXQ9E14=</DigestValue> </Reference> 1.1 xml-security/data/ie/baltimore/merlin-examples/merlin-xmldsig-twenty-three/signature-c14n-12.txt Index: signature-c14n-12.txt =================================================================== <!-- Preamble --> <Envelope xmlns="http://example.org/usps" xmlns:foo="http://example.org/foo"> <DearSir>foo</DearSir> <Body>bar</Body> <YoursSincerely> </YoursSincerely> <PostScript>bar</PostScript> <Notaries xmlns="" Id="notaries"> <Notary name="Great, A. T."></Notary> <Notary name="Hun, A. T."></Notary> </Notaries> <!-- Commentary --> </Envelope> <!-- Postamble --> 1.1 xml-security/data/ie/baltimore/merlin-examples/merlin-xmldsig-twenty-three/signature-c14n-13.txt Index: signature-c14n-13.txt =================================================================== <Envelope xmlns="http://example.org/usps" xmlns:foo="http://example.org/foo"> <DearSir>foo</DearSir> <Body>bar</Body> <YoursSincerely> </YoursSincerely> <PostScript>bar</PostScript> <Notaries xmlns="" Id="notaries"> <Notary name="Great, A. T."></Notary> <Notary name="Hun, A. T."></Notary> </Notaries> </Envelope> 1.1 xml-security/data/ie/baltimore/merlin-examples/merlin-xmldsig-twenty-three/signature-c14n-14.txt Index: signature-c14n-14.txt =================================================================== <Envelope xmlns="http://example.org/usps" xmlns:foo="http://example.org/foo"> <DearSir>foo</DearSir> <Body>bar</Body> <YoursSincerely> </YoursSincerely> <PostScript>bar</PostScript> <Notaries xmlns="" Id="notaries"> <Notary name="Great, A. T."></Notary> <Notary name="Hun, A. T."></Notary> </Notaries> </Envelope> 1.1 xml-security/data/ie/baltimore/merlin-examples/merlin-xmldsig-twenty-three/signature-c14n-15.txt Index: signature-c14n-15.txt =================================================================== <Envelope xmlns="http://example.org/usps" xmlns:foo="http://example.org/foo"> <DearSir>foo</DearSir> <Body>bar</Body> <YoursSincerely> </YoursSincerely> <PostScript>bar</PostScript> <Notaries xmlns="" Id="notaries"> <Notary name="Great, A. T."></Notary> <Notary name="Hun, A. T."></Notary> </Notaries> </Envelope> 1.1 xml-security/data/ie/baltimore/merlin-examples/merlin-xmldsig-twenty-three/signature-c14n-16.txt Index: signature-c14n-16.txt =================================================================== <SignedInfo xmlns="http://www.w3.org/2000/09/xmldsig#" xmlns:foo="http://example.org/foo"> <CanonicalizationMethod Algorithm="http://www.w3.org/TR/2001/REC-xml-c14n-20010315"></CanonicalizationMethod> <SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#dsa-sha1"></SignatureMethod> <Reference URI="http://www.w3.org/TR/xml-stylesheet"> <DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"></DigestMethod> <DigestValue>60NvZvtdTB+7UnlLp/H24p7h4bs=</DigestValue> </Reference> <Reference URI="http://www.w3.org/Signature/2002/04/xml-stylesheet.b64"> <Transforms> <Transform Algorithm="http://www.w3.org/2000/09/xmldsig#base64"></Transform> </Transforms> <DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"></DigestMethod> <DigestValue>60NvZvtdTB+7UnlLp/H24p7h4bs=</DigestValue> </Reference> <Reference Type="http://www.w3.org/2000/09/xmldsig#Object" URI="#object-1"> <Transforms> <Transform Algorithm="http://www.w3.org/TR/1999/REC-xpath-19991116"> <XPath> sel888a:dbb7:2d49:b3f6:8605:bf4e:caed:e5a4text() </XPath> </Transform> </Transforms> <DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"></DigestMethod> <DigestValue>zyjp8GJOX69990Kkqw8ioPXGExk=</DigestValue> </Reference> <Reference Type="http://www.w3.org/2000/09/xmldsig#Object" URI="#object-2"> <Transforms> <Transform Algorithm="http://www.w3.org/2000/09/xmldsig#base64"></Transform> </Transforms> <DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"></DigestMethod> <DigestValue>zyjp8GJOX69990Kkqw8ioPXGExk=</DigestValue> </Reference> <Reference Type="http://www.w3.org/2000/09/xmldsig#Manifest" URI="#manifest-1"> <DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"></DigestMethod> <DigestValue>qg4HFwsN+/WX32uH85WlJU9l45k=</DigestValue> </Reference> <Reference Type="http://www.w3.org/2000/09/xmldsig#SignatureProperties" URI="#signature-properties-1"> <DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"></DigestMethod> <DigestValue>ETlEI3y7hvvAtMe9wQSz7LhbHEE=</DigestValue> </Reference> <Reference URI=""> <Transforms> <Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"></Transform> </Transforms> <DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"></DigestMethod> <DigestValue>J/O0HhdaPXxx49fgGWMESL09GpA=</DigestValue> </Reference> <Reference URI=""> <Transforms> <Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"></Transform> <Transform Algorithm="http://www.w3.org/TR/2001/REC-xml-c14n-20010315#WithComments"></Transform> </Transforms> <DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"></DigestMethod> <DigestValue>J/O0HhdaPXxx49fgGWMESL09GpA=</DigestValue> </Reference> <Reference URI="#xpointer(/)"> <Transforms> <Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"></Transform> </Transforms> <DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"></DigestMethod> <DigestValue>J/O0HhdaPXxx49fgGWMESL09GpA=</DigestValue> </Reference> <Reference URI="#xpointer(/)"> <Transforms> <Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"></Transform> <Transform Algorithm="http://www.w3.org/TR/2001/REC-xml-c14n-20010315#WithComments"></Transform> </Transforms> <DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"></DigestMethod> <DigestValue>MkL9CX8yeABBth1RChyPx58Ls8w=</DigestValue> </Reference> <Reference Type="http://www.w3.org/2000/09/xmldsig#Object" URI="#object-3"> <DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"></DigestMethod> <DigestValue>yamSIokKmjA3hB/s3Fu07wDO3vM=</DigestValue> </Reference> <Reference Type="http://www.w3.org/2000/09/xmldsig#Object" URI="#object-3"> <Transforms> <Transform Algorithm="http://www.w3.org/TR/2001/REC-xml-c14n-20010315#WithComments"></Transform> </Transforms> <DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"></DigestMethod> <DigestValue>yamSIokKmjA3hB/s3Fu07wDO3vM=</DigestValue> </Reference> <Reference Type="http://www.w3.org/2000/09/xmldsig#Object" URI="#xpointer(id('object-3'))"> <DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"></DigestMethod> <DigestValue>yamSIokKmjA3hB/s3Fu07wDO3vM=</DigestValue> </Reference> <Reference Type="http://www.w3.org/2000/09/xmldsig#Object" URI="#xpointer(id('object-3'))"> <Transforms> <Transform Algorithm="http://www.w3.org/TR/2001/REC-xml-c14n-20010315#WithComments"></Transform> </Transforms> <DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"></DigestMethod> <DigestValue>419CYgyTWOTGYGBhzieWklNf7Bk=</DigestValue> </Reference> <Reference URI="#reference-2"> <DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"></DigestMethod> <DigestValue>VzK45P9Ksjqq5oXlKQpkGgB2CNY=</DigestValue> </Reference> <Reference Id="reference-1" URI="#manifest-reference-1"> <DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"></DigestMethod> <DigestValue>7/9fR+NIDz9owc1Lfsxu1JBr8uo=</DigestValue> </Reference> <Reference Id="reference-2" URI="#reference-1"> <DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"></DigestMethod> <DigestValue>qURlo3LSq4TWQtygBZJ0iXQ9E14=</DigestValue> </Reference> </SignedInfo><Notaries xmlns:foo="http://example.org/foo" Id="notaries"> <Notary name="Great, A. T."></Notary> <Notary name="Hun, A. T."></Notary> </Notaries> 1.1 xml-security/data/ie/baltimore/merlin-examples/merlin-xmldsig-twenty-three/signature-c14n-17.txt Index: signature-c14n-17.txt =================================================================== <SignedInfo xmlns="http://www.w3.org/2000/09/xmldsig#" xmlns:foo="http://example.org/foo"> <CanonicalizationMethod Algorithm="http://www.w3.org/TR/2001/REC-xml-c14n-20010315"></CanonicalizationMethod> <SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#dsa-sha1"></SignatureMethod> <Reference URI="http://www.w3.org/TR/xml-stylesheet"> <DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"></DigestMethod> <DigestValue>60NvZvtdTB+7UnlLp/H24p7h4bs=</DigestValue> </Reference> <Reference URI="http://www.w3.org/Signature/2002/04/xml-stylesheet.b64"> <Transforms> <Transform Algorithm="http://www.w3.org/2000/09/xmldsig#base64"></Transform> </Transforms> <DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"></DigestMethod> <DigestValue>60NvZvtdTB+7UnlLp/H24p7h4bs=</DigestValue> </Reference> <Reference Type="http://www.w3.org/2000/09/xmldsig#Object" URI="#object-1"> <Transforms> <Transform Algorithm="http://www.w3.org/TR/1999/REC-xpath-19991116"> <XPath> sel888a:dbb7:2d49:b3f6:8605:bf4e:caed:e5a4text() </XPath> </Transform> </Transforms> <DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"></DigestMethod> <DigestValue>zyjp8GJOX69990Kkqw8ioPXGExk=</DigestValue> </Reference> <Reference Type="http://www.w3.org/2000/09/xmldsig#Object" URI=""> <Transforms> <Transform Algorithm="http://www.w3.org/TR/1999/REC-xpath-19991116"> <XPath xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"> ancestor-or-sel888a:dbb7:2d49:b3f6:8605:bf4e:caed:e5a4dsig:SignedInfo and count(ancestor-or-sel888a:dbb7:2d49:b3f6:8605:bf4e:caed:e5a4dsig:Reference | here()/ancestor888a:dbb7:2d49:b3f6:8605:bf4e:caed:e5a4sig:Reference[1]) &gt; count(ancestor-or-sel888a:dbb7:2d49:b3f6:8605:bf4e:caed:e5a4dsig:Reference) or count(ancestor-or-sel888a:dbb7:2d49:b3f6:8605:bf4e:caed:e5a4node() | id('notaries')) = count(ancestor-or-sel888a:dbb7:2d49:b3f6:8605:bf4e:caed:e5a4node()) </XPath> </Transform> </Transforms> <DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"></DigestMethod> <DigestValue>tQiE3GUKiBenPyp3J0Ei6rJMFv4=</DigestValue> </Reference> <Reference Type="http://www.w3.org/2000/09/xmldsig#Object" URI="#object-2"> <Transforms> <Transform Algorithm="http://www.w3.org/2000/09/xmldsig#base64"></Transform> </Transforms> <DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"></DigestMethod> <DigestValue>zyjp8GJOX69990Kkqw8ioPXGExk=</DigestValue> </Reference> <Reference Type="http://www.w3.org/2000/09/xmldsig#Manifest" URI="#manifest-1"> <DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"></DigestMethod> <DigestValue>qg4HFwsN+/WX32uH85WlJU9l45k=</DigestValue> </Reference> <Reference Type="http://www.w3.org/2000/09/xmldsig#SignatureProperties" URI="#signature-properties-1"> <DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"></DigestMethod> <DigestValue>ETlEI3y7hvvAtMe9wQSz7LhbHEE=</DigestValue> </Reference> <Reference URI=""> <Transforms> <Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"></Transform> </Transforms> <DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"></DigestMethod> <DigestValue>J/O0HhdaPXxx49fgGWMESL09GpA=</DigestValue> </Reference> <Reference URI=""> <Transforms> <Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"></Transform> <Transform Algorithm="http://www.w3.org/TR/2001/REC-xml-c14n-20010315#WithComments"></Transform> </Transforms> <DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"></DigestMethod> <DigestValue>J/O0HhdaPXxx49fgGWMESL09GpA=</DigestValue> </Reference> <Reference URI="#xpointer(/)"> <Transforms> <Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"></Transform> </Transforms> <DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"></DigestMethod> <DigestValue>J/O0HhdaPXxx49fgGWMESL09GpA=</DigestValue> </Reference> <Reference URI="#xpointer(/)"> <Transforms> <Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"></Transform> <Transform Algorithm="http://www.w3.org/TR/2001/REC-xml-c14n-20010315#WithComments"></Transform> </Transforms> <DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"></DigestMethod> <DigestValue>MkL9CX8yeABBth1RChyPx58Ls8w=</DigestValue> </Reference> <Reference Type="http://www.w3.org/2000/09/xmldsig#Object" URI="#object-3"> <DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"></DigestMethod> <DigestValue>yamSIokKmjA3hB/s3Fu07wDO3vM=</DigestValue> </Reference> <Reference Type="http://www.w3.org/2000/09/xmldsig#Object" URI="#object-3"> <Transforms> <Transform Algorithm="http://www.w3.org/TR/2001/REC-xml-c14n-20010315#WithComments"></Transform> </Transforms> <DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"></DigestMethod> <DigestValue>yamSIokKmjA3hB/s3Fu07wDO3vM=</DigestValue> </Reference> <Reference Type="http://www.w3.org/2000/09/xmldsig#Object" URI="#xpointer(id('object-3'))"> <DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"></DigestMethod> <DigestValue>yamSIokKmjA3hB/s3Fu07wDO3vM=</DigestValue> </Reference> <Reference Type="http://www.w3.org/2000/09/xmldsig#Object" URI="#xpointer(id('object-3'))"> <Transforms> <Transform Algorithm="http://www.w3.org/TR/2001/REC-xml-c14n-20010315#WithComments"></Transform> </Transforms> <DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"></DigestMethod> <DigestValue>419CYgyTWOTGYGBhzieWklNf7Bk=</DigestValue> </Reference> <Reference URI="#reference-2"> <DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"></DigestMethod> <DigestValue>VzK45P9Ksjqq5oXlKQpkGgB2CNY=</DigestValue> </Reference> <Reference Id="reference-1" URI="#manifest-reference-1"> <DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"></DigestMethod> <DigestValue>7/9fR+NIDz9owc1Lfsxu1JBr8uo=</DigestValue> </Reference> <Reference Id="reference-2" URI="#reference-1"> <DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"></DigestMethod> <DigestValue>qURlo3LSq4TWQtygBZJ0iXQ9E14=</DigestValue> </Reference> </SignedInfo> 1.1 xml-security/data/ie/baltimore/merlin-examples/merlin-xmldsig-twenty-three/signature-c14n-2.txt Index: signature-c14n-2.txt =================================================================== <Object xmlns="http://www.w3.org/2000/09/xmldsig#" xmlns:foo="http://example.org/foo" Id="object-3"> <NonCommentandus xmlns=""></NonCommentandus> </Object> 1.1 xml-security/data/ie/baltimore/merlin-examples/merlin-xmldsig-twenty-three/signature-c14n-3.txt Index: signature-c14n-3.txt =================================================================== <Object xmlns="http://www.w3.org/2000/09/xmldsig#" xmlns:foo="http://example.org/foo" Id="object-3"> <NonCommentandus xmlns=""></NonCommentandus> </Object> 1.1 xml-security/data/ie/baltimore/merlin-examples/merlin-xmldsig-twenty-three/signature-c14n-4.txt Index: signature-c14n-4.txt =================================================================== <Object xmlns="http://www.w3.org/2000/09/xmldsig#" xmlns:foo="http://example.org/foo" Id="object-3"> <NonCommentandus xmlns=""></NonCommentandus> </Object> 1.1 xml-security/data/ie/baltimore/merlin-examples/merlin-xmldsig-twenty-three/signature-c14n-5.txt Index: signature-c14n-5.txt =================================================================== <Object xmlns="http://www.w3.org/2000/09/xmldsig#" xmlns:foo="http://example.org/foo" Id="object-3"> <NonCommentandus xmlns=""><!-- Commentandum --></NonCommentandus> </Object> 1.1 xml-security/data/ie/baltimore/merlin-examples/merlin-xmldsig-twenty-three/signature-c14n-6.txt Index: signature-c14n-6.txt =================================================================== <Reference xmlns="http://www.w3.org/2000/09/xmldsig#" xmlns:foo="http://example.org/foo" Id="manifest-reference-1" URI="http://www.w3.org/TR/xml-stylesheet"> <DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"></DigestMethod> <DigestValue>60NvZvtdTB+7UnlLp/H24p7h4bs=</DigestValue> </Reference> 1.1 xml-security/data/ie/baltimore/merlin-examples/merlin-xmldsig-twenty-three/signature-c14n-7.txt Index: signature-c14n-7.txt =================================================================== <Notaries xmlns:foo="http://example.org/foo" Id="notaries"> <Notary name="Great, A. T."></Notary> <Notary name="Hun, A. T."></Notary> </Notaries> 1.1 xml-security/data/ie/baltimore/merlin-examples/merlin-xmldsig-twenty-three/signature-c14n-8.txt Index: signature-c14n-8.txt =================================================================== <Reference xmlns="http://www.w3.org/2000/09/xmldsig#" xmlns:foo="http://example.org/foo" Id="reference-1" URI="#manifest-reference-1"> <DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"></DigestMethod> <DigestValue>7/9fR+NIDz9owc1Lfsxu1JBr8uo=</DigestValue> </Reference> 1.1 xml-security/data/ie/baltimore/merlin-examples/merlin-xmldsig-twenty-three/signature-c14n-9.txt Index: signature-c14n-9.txt =================================================================== <Reference xmlns="http://www.w3.org/2000/09/xmldsig#" xmlns:foo="http://example.org/foo" Id="reference-1" URI="#manifest-reference-1"> <DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"></DigestMethod> <DigestValue>7/9fR+NIDz9owc1Lfsxu1JBr8uo=</DigestValue> </Reference> 1.1 xml-security/data/ie/baltimore/merlin-examples/merlin-xmldsig-twenty-three/signature-enveloped-dsa-c14n-0.txt Index: signature-enveloped-dsa-c14n-0.txt =================================================================== <Envelope xmlns="http://example.org/envelope"> </Envelope> 1.1 xml-security/data/ie/baltimore/merlin-examples/merlin-xmldsig-twenty-three/signature-enveloped-dsa-c14n-1.txt Index: signature-enveloped-dsa-c14n-1.txt =================================================================== <SignedInfo xmlns="http://www.w3.org/2000/09/xmldsig#"> <CanonicalizationMethod Algorithm="http://www.w3.org/TR/2001/REC-xml-c14n-20010315"></CanonicalizationMethod> <SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#dsa-sha1"></SignatureMethod> <Reference URI=""> <Transforms> <Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"></Transform> </Transforms> <DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"></DigestMethod> <DigestValue>fdy6S2NLpnT4fMdokUHSHsmpcvo=</DigestValue> </Reference> </SignedInfo> 1.1 xml-security/data/ie/baltimore/merlin-examples/merlin-xmldsig-twenty-three/signature-enveloped-dsa.xml Index: signature-enveloped-dsa.xml =================================================================== <?xml version="1.0" encoding="UTF-8"?> <Envelope xmlns="http://example.org/envelope"> <Signature xmlns="http://www.w3.org/2000/09/xmldsig#"> <SignedInfo> <CanonicalizationMethod Algorithm="http://www.w3.org/TR/2001/REC-xml-c14n-20010315" /> <SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#dsa-sha1" /> <Reference URI=""> <Transforms> <Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature" /> </Transforms> <DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1" /> <DigestValue>fdy6S2NLpnT4fMdokUHSHsmpcvo=</DigestValue> </Reference> </SignedInfo> <SignatureValue> Z4pBb+o+XOKWME7CpLyXuNqyIYdXOcGvthfUf+ZDLL5immPx+3tK8Q== </SignatureValue> <KeyInfo> <KeyValue> <DSAKeyValue> <P> 3eOeAvqnEyFpW+uTSgrdj7YLjaTkpyHecKFIoLu8QZNkGTQI1ciITBH0lqfIkdCH Si8fiUC3DTq3J9FsJef4YVtDF7JpUvHTOQqtq7Zgx6KC8Wxkz6rQCxOr7F0ApOYi 89zLRoe4MkDGe6ux0+WtyOTQoVIGNTDDUFXrUQNbLrE= </P> <Q> hDLcFK0GO/Hz1arxOOvsgM/VLyU= </Q> <G> nnx7hbdWozGbtnFgnbFnopfRl7XRacpkPJRGf5P2IUgVspEUSUoN6i1fDBfBg43z Kt7dlEaQL7b5+JTZt3MhZNPosxsgxVuT7Ts/g5k7EnpdYv0a5hw5Bw29fjbGHfgM 8d2rhd2Ui0xHbk0D451nhLxVWulviOSPhzKKvXrbySA= </G> <Y> cfYpihpAQeepbNFS4MAbQRhdXpDi5wLrwxE5hIvoYqo1L8BQVu8fY1TFAPtoae1i Bg/GIJyP3iLfyuBJaDvJJLP30wBH9i/s5J3656PevpOVdTfi777Fi9Gj6y/ib2Vv +OZfJkkp4L50+p5TUhPmQLJtREsgtl+tnIOyJT++G9U= </Y> </DSAKeyValue> </KeyValue> </KeyInfo> </Signature> </Envelope> 1.1 xml-security/data/ie/baltimore/merlin-examples/merlin-xmldsig-twenty-three/signature-enveloping-b64-dsa-c14n-0.txt Index: signature-enveloping-b64-dsa-c14n-0.txt =================================================================== <SignedInfo xmlns="http://www.w3.org/2000/09/xmldsig#"> <CanonicalizationMethod Algorithm="http://www.w3.org/TR/2001/REC-xml-c14n-20010315"></CanonicalizationMethod> <SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#dsa-sha1"></SignatureMethod> <Reference URI="#object"> <Transforms> <Transform Algorithm="http://www.w3.org/2000/09/xmldsig#base64"></Transform> </Transforms> <DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"></DigestMethod> <DigestValue>N6pjx3OY2VRHMmLhoAV8HmMu2nc=</DigestValue> </Reference> </SignedInfo> 1.1 xml-security/data/ie/baltimore/merlin-examples/merlin-xmldsig-twenty-three/signature-enveloping-b64-dsa.xml Index: signature-enveloping-b64-dsa.xml =================================================================== <?xml version="1.0" encoding="UTF-8"?> <Signature xmlns="http://www.w3.org/2000/09/xmldsig#"> <SignedInfo> <CanonicalizationMethod Algorithm="http://www.w3.org/TR/2001/REC-xml-c14n-20010315" /> <SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#dsa-sha1" /> <Reference URI="#object"> <Transforms> <Transform Algorithm="http://www.w3.org/2000/09/xmldsig#base64" /> </Transforms> <DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1" /> <DigestValue>N6pjx3OY2VRHMmLhoAV8HmMu2nc=</DigestValue> </Reference> </SignedInfo> <SignatureValue> KgAeq8e0yUNfFz+mFlZ3QgyQNMciV+Z3BoDQDvQNker7pazEnJmOIA== </SignatureValue> <KeyInfo> <KeyValue> <DSAKeyValue> <P> 3eOeAvqnEyFpW+uTSgrdj7YLjaTkpyHecKFIoLu8QZNkGTQI1ciITBH0lqfIkdCH Si8fiUC3DTq3J9FsJef4YVtDF7JpUvHTOQqtq7Zgx6KC8Wxkz6rQCxOr7F0ApOYi 89zLRoe4MkDGe6ux0+WtyOTQoVIGNTDDUFXrUQNbLrE= </P> <Q> hDLcFK0GO/Hz1arxOOvsgM/VLyU= </Q> <G> nnx7hbdWozGbtnFgnbFnopfRl7XRacpkPJRGf5P2IUgVspEUSUoN6i1fDBfBg43z Kt7dlEaQL7b5+JTZt3MhZNPosxsgxVuT7Ts/g5k7EnpdYv0a5hw5Bw29fjbGHfgM 8d2rhd2Ui0xHbk0D451nhLxVWulviOSPhzKKvXrbySA= </G> <Y> cfYpihpAQeepbNFS4MAbQRhdXpDi5wLrwxE5hIvoYqo1L8BQVu8fY1TFAPtoae1i Bg/GIJyP3iLfyuBJaDvJJLP30wBH9i/s5J3656PevpOVdTfi777Fi9Gj6y/ib2Vv +OZfJkkp4L50+p5TUhPmQLJtREsgtl+tnIOyJT++G9U= </Y> </DSAKeyValue> </KeyValue> </KeyInfo> <Object Id="object">c29tZSB0ZXh0</Object> </Signature> 1.1 xml-security/data/ie/baltimore/merlin-examples/merlin-xmldsig-twenty-three/signature-enveloping-dsa-c14n-0.txt Index: signature-enveloping-dsa-c14n-0.txt =================================================================== <Object xmlns="http://www.w3.org/2000/09/xmldsig#" Id="object">some text</Object> 1.1 xml-security/data/ie/baltimore/merlin-examples/merlin-xmldsig-twenty-three/signature-enveloping-dsa-c14n-1.txt Index: signature-enveloping-dsa-c14n-1.txt =================================================================== <SignedInfo xmlns="http://www.w3.org/2000/09/xmldsig#"> <CanonicalizationMethod Algorithm="http://www.w3.org/TR/2001/REC-xml-c14n-20010315"></CanonicalizationMethod> <SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#dsa-sha1"></SignatureMethod> <Reference URI="#object"> <DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"></DigestMethod> <DigestValue>7/XTsHaBSOnJ/jXD5v0zL6VKYsk=</DigestValue> </Reference> </SignedInfo> 1.1 xml-security/data/ie/baltimore/merlin-examples/merlin-xmldsig-twenty-three/signature-enveloping-dsa.xml Index: signature-enveloping-dsa.xml =================================================================== <?xml version="1.0" encoding="UTF-8"?> <Signature xmlns="http://www.w3.org/2000/09/xmldsig#"> <SignedInfo> <CanonicalizationMethod Algorithm="http://www.w3.org/TR/2001/REC-xml-c14n-20010315" /> <SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#dsa-sha1" /> <Reference URI="#object"> <DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1" /> <DigestValue>7/XTsHaBSOnJ/jXD5v0zL6VKYsk=</DigestValue> </Reference> </SignedInfo> <SignatureValue> PfD92lkxKgc2OKvF4p0ba6cJj6d1eqIDx5Q1hvVYTviotje23Snunw== </SignatureValue> <KeyInfo> <KeyValue> <DSAKeyValue> <P> 3eOeAvqnEyFpW+uTSgrdj7YLjaTkpyHecKFIoLu8QZNkGTQI1ciITBH0lqfIkdCH Si8fiUC3DTq3J9FsJef4YVtDF7JpUvHTOQqtq7Zgx6KC8Wxkz6rQCxOr7F0ApOYi 89zLRoe4MkDGe6ux0+WtyOTQoVIGNTDDUFXrUQNbLrE= </P> <Q> hDLcFK0GO/Hz1arxOOvsgM/VLyU= </Q> <G> nnx7hbdWozGbtnFgnbFnopfRl7XRacpkPJRGf5P2IUgVspEUSUoN6i1fDBfBg43z Kt7dlEaQL7b5+JTZt3MhZNPosxsgxVuT7Ts/g5k7EnpdYv0a5hw5Bw29fjbGHfgM 8d2rhd2Ui0xHbk0D451nhLxVWulviOSPhzKKvXrbySA= </G> <Y> cfYpihpAQeepbNFS4MAbQRhdXpDi5wLrwxE5hIvoYqo1L8BQVu8fY1TFAPtoae1i Bg/GIJyP3iLfyuBJaDvJJLP30wBH9i/s5J3656PevpOVdTfi777Fi9Gj6y/ib2Vv +OZfJkkp4L50+p5TUhPmQLJtREsgtl+tnIOyJT++G9U= </Y> </DSAKeyValue> </KeyValue> </KeyInfo> <Object Id="object">some text</Object> </Signature> 1.1 xml-security/data/ie/baltimore/merlin-examples/merlin-xmldsig-twenty-three/signature-enveloping-hmac-sha1-40-c14n-0.txt Index: signature-enveloping-hmac-sha1-40-c14n-0.txt =================================================================== <Object xmlns="http://www.w3.org/2000/09/xmldsig#" Id="object">some text</Object> 1.1 xml-security/data/ie/baltimore/merlin-examples/merlin-xmldsig-twenty-three/signature-enveloping-hmac-sha1-40-c14n-1.txt Index: signature-enveloping-hmac-sha1-40-c14n-1.txt =================================================================== <SignedInfo xmlns="http://www.w3.org/2000/09/xmldsig#"> <CanonicalizationMethod Algorithm="http://www.w3.org/TR/2001/REC-xml-c14n-20010315"></CanonicalizationMethod> <SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#hmac-sha1"> <HMACOutputLength>40</HMACOutputLength> </SignatureMethod> <Reference URI="#object"> <DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"></DigestMethod> <DigestValue>7/XTsHaBSOnJ/jXD5v0zL6VKYsk=</DigestValue> </Reference> </SignedInfo> 1.1 xml-security/data/ie/baltimore/merlin-examples/merlin-xmldsig-twenty-three/signature-enveloping-hmac-sha1-40.xml Index: signature-enveloping-hmac-sha1-40.xml =================================================================== <?xml version="1.0" encoding="UTF-8"?> <Signature xmlns="http://www.w3.org/2000/09/xmldsig#"> <SignedInfo> <CanonicalizationMethod Algorithm="http://www.w3.org/TR/2001/REC-xml-c14n-20010315" /> <SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#hmac-sha1"> <HMACOutputLength>40</HMACOutputLength> </SignatureMethod> <Reference URI="#object"> <DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1" /> <DigestValue>7/XTsHaBSOnJ/jXD5v0zL6VKYsk=</DigestValue> </Reference> </SignedInfo> <SignatureValue> HHiqvCU= </SignatureValue> <Object Id="object">some text</Object> </Signature> 1.1 xml-security/data/ie/baltimore/merlin-examples/merlin-xmldsig-twenty-three/signature-enveloping-hmac-sha1-c14n-0.txt Index: signature-enveloping-hmac-sha1-c14n-0.txt =================================================================== <Object xmlns="http://www.w3.org/2000/09/xmldsig#" Id="object">some text</Object> 1.1 xml-security/data/ie/baltimore/merlin-examples/merlin-xmldsig-twenty-three/signature-enveloping-hmac-sha1-c14n-1.txt Index: signature-enveloping-hmac-sha1-c14n-1.txt =================================================================== <SignedInfo xmlns="http://www.w3.org/2000/09/xmldsig#"> <CanonicalizationMethod Algorithm="http://www.w3.org/TR/2001/REC-xml-c14n-20010315"></CanonicalizationMethod> <SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#hmac-sha1"></SignatureMethod> <Reference URI="#object"> <DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"></DigestMethod> <DigestValue>7/XTsHaBSOnJ/jXD5v0zL6VKYsk=</DigestValue> </Reference> </SignedInfo> 1.1 xml-security/data/ie/baltimore/merlin-examples/merlin-xmldsig-twenty-three/signature-enveloping-hmac-sha1.xml Index: signature-enveloping-hmac-sha1.xml =================================================================== <?xml version="1.0" encoding="UTF-8"?> <Signature xmlns="http://www.w3.org/2000/09/xmldsig#"> <SignedInfo> <CanonicalizationMethod Algorithm="http://www.w3.org/TR/2001/REC-xml-c14n-20010315" /> <SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#hmac-sha1" /> <Reference URI="#object"> <DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1" /> <DigestValue>7/XTsHaBSOnJ/jXD5v0zL6VKYsk=</DigestValue> </Reference> </SignedInfo> <SignatureValue> JElPttIT4Am7Q+MNoMyv+WDfAZw= </SignatureValue> <Object Id="object">some text</Object> </Signature> 1.1 xml-security/data/ie/baltimore/merlin-examples/merlin-xmldsig-twenty-three/signature-enveloping-rsa-c14n-0.txt Index: signature-enveloping-rsa-c14n-0.txt =================================================================== <Object xmlns="http://www.w3.org/2000/09/xmldsig#" Id="object">some text</Object> 1.1 xml-security/data/ie/baltimore/merlin-examples/merlin-xmldsig-twenty-three/signature-enveloping-rsa-c14n-1.txt Index: signature-enveloping-rsa-c14n-1.txt =================================================================== <SignedInfo xmlns="http://www.w3.org/2000/09/xmldsig#"> <CanonicalizationMethod Algorithm="http://www.w3.org/TR/2001/REC-xml-c14n-20010315"></CanonicalizationMethod> <SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"></SignatureMethod> <Reference URI="#object"> <DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"></DigestMethod> <DigestValue>7/XTsHaBSOnJ/jXD5v0zL6VKYsk=</DigestValue> </Reference> </SignedInfo> 1.1 xml-security/data/ie/baltimore/merlin-examples/merlin-xmldsig-twenty-three/signature-enveloping-rsa.xml Index: signature-enveloping-rsa.xml =================================================================== <?xml version="1.0" encoding="UTF-8"?> <Signature xmlns="http://www.w3.org/2000/09/xmldsig#"> <SignedInfo> <CanonicalizationMethod Algorithm="http://www.w3.org/TR/2001/REC-xml-c14n-20010315" /> <SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1" /> <Reference URI="#object"> <DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1" /> <DigestValue>7/XTsHaBSOnJ/jXD5v0zL6VKYsk=</DigestValue> </Reference> </SignedInfo> <SignatureValue> ov3HOoPN0w71N3DdGNhN+dSzQm6NJFUB5qGKRp9Q986nVzMb8wCIVxCQu+x3vMtq p4/R3KEcPtEJSaoR+thGq++GPIh2mZXyWJs3xHy9P4xmoTVwli7/l7s8ebDSmnbZ 7xZU4Iy1BSMZSxGKnRG+Z/0GJIfTz8jhH6wCe3l03L4= </SignatureValue> <KeyInfo> <KeyValue> <RSAKeyValue> <Modulus> q07hpxA5DGFfvJFZueFl/LI85XxQxrvqgVugL25V090A9MrlLBg5PmAsxFTe+G6a xvWJQwYOVHj/nuiCnNLa9a7uAtPFiTtW+v5H3wlLaY3ws4atRBNOQlYkIBp38sTf QBkk4i8PEU1GQ2M0CLIJq4/2Akfv1wxzSQ9+8oWkArc= </Modulus> <Exponent> AQAB </Exponent> </RSAKeyValue> </KeyValue> </KeyInfo> <Object Id="object">some text</Object> </Signature> 1.1 xml-security/data/ie/baltimore/merlin-examples/merlin-xmldsig-twenty-three/signature-external-b64-dsa-c14n-0.txt Index: signature-external-b64-dsa-c14n-0.txt =================================================================== <SignedInfo xmlns="http://www.w3.org/2000/09/xmldsig#"> <CanonicalizationMethod Algorithm="http://www.w3.org/TR/2001/REC-xml-c14n-20010315"></CanonicalizationMethod> <SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#dsa-sha1"></SignatureMethod> <Reference URI="http://www.w3.org/Signature/2002/04/xml-stylesheet.b64"> <Transforms> <Transform Algorithm="http://www.w3.org/2000/09/xmldsig#base64"></Transform> </Transforms> <DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"></DigestMethod> <DigestValue>60NvZvtdTB+7UnlLp/H24p7h4bs=</DigestValue> </Reference> </SignedInfo> 1.1 xml-security/data/ie/baltimore/merlin-examples/merlin-xmldsig-twenty-three/signature-external-b64-dsa.xml Index: signature-external-b64-dsa.xml =================================================================== <?xml version="1.0" encoding="UTF-8"?> <Signature xmlns="http://www.w3.org/2000/09/xmldsig#"> <SignedInfo> <CanonicalizationMethod Algorithm="http://www.w3.org/TR/2001/REC-xml-c14n-20010315" /> <SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#dsa-sha1" /> <Reference URI="http://www.w3.org/Signature/2002/04/xml-stylesheet.b64"> <Transforms> <Transform Algorithm="http://www.w3.org/2000/09/xmldsig#base64" /> </Transforms> <DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1" /> <DigestValue>60NvZvtdTB+7UnlLp/H24p7h4bs=</DigestValue> </Reference> </SignedInfo> <SignatureValue> IhOlAjMFaZtkEju5R5bi528h1HpDa4A21sudZynhJRRLjZuQIHZ3eQ== </SignatureValue> <KeyInfo> <KeyValue> <DSAKeyValue> <P> 3eOeAvqnEyFpW+uTSgrdj7YLjaTkpyHecKFIoLu8QZNkGTQI1ciITBH0lqfIkdCH Si8fiUC3DTq3J9FsJef4YVtDF7JpUvHTOQqtq7Zgx6KC8Wxkz6rQCxOr7F0ApOYi 89zLRoe4MkDGe6ux0+WtyOTQoVIGNTDDUFXrUQNbLrE= </P> <Q> hDLcFK0GO/Hz1arxOOvsgM/VLyU= </Q> <G> nnx7hbdWozGbtnFgnbFnopfRl7XRacpkPJRGf5P2IUgVspEUSUoN6i1fDBfBg43z Kt7dlEaQL7b5+JTZt3MhZNPosxsgxVuT7Ts/g5k7EnpdYv0a5hw5Bw29fjbGHfgM 8d2rhd2Ui0xHbk0D451nhLxVWulviOSPhzKKvXrbySA= </G> <Y> cfYpihpAQeepbNFS4MAbQRhdXpDi5wLrwxE5hIvoYqo1L8BQVu8fY1TFAPtoae1i Bg/GIJyP3iLfyuBJaDvJJLP30wBH9i/s5J3656PevpOVdTfi777Fi9Gj6y/ib2Vv +OZfJkkp4L50+p5TUhPmQLJtREsgtl+tnIOyJT++G9U= </Y> </DSAKeyValue> </KeyValue> </KeyInfo> </Signature> 1.1 xml-security/data/ie/baltimore/merlin-examples/merlin-xmldsig-twenty-three/signature-external-dsa-c14n-0.txt Index: signature-external-dsa-c14n-0.txt =================================================================== <SignedInfo xmlns="http://www.w3.org/2000/09/xmldsig#"> <CanonicalizationMethod Algorithm="http://www.w3.org/TR/2001/REC-xml-c14n-20010315"></CanonicalizationMethod> <SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#dsa-sha1"></SignatureMethod> <Reference URI="http://www.w3.org/TR/xml-stylesheet"> <DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"></DigestMethod> <DigestValue>60NvZvtdTB+7UnlLp/H24p7h4bs=</DigestValue> </Reference> </SignedInfo> 1.1 xml-security/data/ie/baltimore/merlin-examples/merlin-xmldsig-twenty-three/signature-external-dsa.xml Index: signature-external-dsa.xml =================================================================== <?xml version="1.0" encoding="UTF-8"?> <Signature xmlns="http://www.w3.org/2000/09/xmldsig#"> <SignedInfo> <CanonicalizationMethod Algorithm="http://www.w3.org/TR/2001/REC-xml-c14n-20010315" /> <SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#dsa-sha1" /> <Reference URI="http://www.w3.org/TR/xml-stylesheet"> <DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1" /> <DigestValue>60NvZvtdTB+7UnlLp/H24p7h4bs=</DigestValue> </Reference> </SignedInfo> <SignatureValue> LaL1/t/XodYvDJDgSEbq47GX8ltnlx3FFURdi7o+UFVi+zLf0WyWaQ== </SignatureValue> <KeyInfo> <KeyValue> <DSAKeyValue> <P> 3eOeAvqnEyFpW+uTSgrdj7YLjaTkpyHecKFIoLu8QZNkGTQI1ciITBH0lqfIkdCH Si8fiUC3DTq3J9FsJef4YVtDF7JpUvHTOQqtq7Zgx6KC8Wxkz6rQCxOr7F0ApOYi 89zLRoe4MkDGe6ux0+WtyOTQoVIGNTDDUFXrUQNbLrE= </P> <Q> hDLcFK0GO/Hz1arxOOvsgM/VLyU= </Q> <G> nnx7hbdWozGbtnFgnbFnopfRl7XRacpkPJRGf5P2IUgVspEUSUoN6i1fDBfBg43z Kt7dlEaQL7b5+JTZt3MhZNPosxsgxVuT7Ts/g5k7EnpdYv0a5hw5Bw29fjbGHfgM 8d2rhd2Ui0xHbk0D451nhLxVWulviOSPhzKKvXrbySA= </G> <Y> cfYpihpAQeepbNFS4MAbQRhdXpDi5wLrwxE5hIvoYqo1L8BQVu8fY1TFAPtoae1i Bg/GIJyP3iLfyuBJaDvJJLP30wBH9i/s5J3656PevpOVdTfi777Fi9Gj6y/ib2Vv +OZfJkkp4L50+p5TUhPmQLJtREsgtl+tnIOyJT++G9U= </Y> </DSAKeyValue> </KeyValue> </KeyInfo> </Signature> 1.1 xml-security/data/ie/baltimore/merlin-examples/merlin-xmldsig-twenty-three/signature-keyname.xml Index: signature-keyname.xml =================================================================== <?xml version="1.0" encoding="UTF-8"?> <Signature xmlns="http://www.w3.org/2000/09/xmldsig#"> <SignedInfo> <CanonicalizationMethod Algorithm="http://www.w3.org/TR/2001/REC-xml-c14n-20010315" /> <SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#dsa-sha1" /> <Reference URI="http://www.w3.org/TR/xml-stylesheet"> <DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1" /> <DigestValue>60NvZvtdTB+7UnlLp/H24p7h4bs=</DigestValue> </Reference> </SignedInfo> <SignatureValue> JkJ3GplEU0iDbqSv7ZOXhvv3zeM1KmP+CLphhoc+NPYqpGYQiW6O6w== </SignatureValue> <KeyInfo> <KeyName>Lugh</KeyName> </KeyInfo> </Signature> 1.1 xml-security/data/ie/baltimore/merlin-examples/merlin-xmldsig-twenty-three/signature-retrievalmethod-rawx509crt.xml Index: signature-retrievalmethod-rawx509crt.xml =================================================================== <?xml version="1.0" encoding="UTF-8"?> <Signature xmlns="http://www.w3.org/2000/09/xmldsig#"> <SignedInfo> <CanonicalizationMethod Algorithm="http://www.w3.org/TR/2001/REC-xml-c14n-20010315" /> <SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#dsa-sha1" /> <Reference URI="http://www.w3.org/TR/xml-stylesheet"> <DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1" /> <DigestValue>60NvZvtdTB+7UnlLp/H24p7h4bs=</DigestValue> </Reference> </SignedInfo> <SignatureValue> SNB5FI193RFXoG2j8Z9bXWgW7BMPICqNob4Hjh08oou4tkhGxz4+pg== </SignatureValue> <KeyInfo> <RetrievalMethod Type="http://www.w3.org/2000/09/xmldsig#rawX509Certificate" URI="certs/balor.crt" /> </KeyInfo> </Signature> 1.1 xml-security/data/ie/baltimore/merlin-examples/merlin-xmldsig-twenty-three/signature-x509-crt-crl.xml Index: signature-x509-crt-crl.xml =================================================================== <?xml version="1.0" encoding="UTF-8"?> <Signature xmlns="http://www.w3.org/2000/09/xmldsig#"> <SignedInfo> <CanonicalizationMethod Algorithm="http://www.w3.org/TR/2001/REC-xml-c14n-20010315" /> <SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#dsa-sha1" /> <Reference URI="http://www.w3.org/TR/xml-stylesheet"> <DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1" /> <DigestValue>60NvZvtdTB+7UnlLp/H24p7h4bs=</DigestValue> </Reference> </SignedInfo> <SignatureValue> WF6EaX66f8CdGE6NafmzdLpb/1OVYX4kBNsqgGIqHR5JZAu4HpbVQQ== </SignatureValue> <KeyInfo> <X509Data> <X509Certificate> MIIDTjCCAw6gAwIBAgIGAOz5Id5/MAkGByqGSM44BAMwdjELMAkGA1UEBhMCSUUx DzANBgNVBAgTBkR1YmxpbjEkMCIGA1UEChMbQmFsdGltb3JlIFRlY2hub2xvZ2ll cyBMdGQuMREwDwYDVQQLEwhYL1NlY3VyZTEdMBsGA1UEAxMUQW5vdGhlciBUcmFu c2llbnQgQ0EwHhcNMDIwNDAzMDAwMDI4WhcNMTIwNDAyMjI1OTQ2WjBmMQswCQYD VQQGEwJJRTEPMA0GA1UECBMGRHVibGluMSQwIgYDVQQKExtCYWx0aW1vcmUgVGVj aG5vbG9naWVzIEx0ZC4xETAPBgNVBAsTCFgvU2VjdXJlMQ0wCwYDVQQDEwRCcmVz MIIBtjCCASsGByqGSM44BAEwggEeAoGBAISKsEonjNGgHs/uh+9YKgnwZ8Bt3T7u yQBJW9dxpMF0cPUXz4dFbSFY4QyW8igCLswpOa+eHHEYsWvE0Nr1lcKHUPXq7u41 JJwHNq1RAFeZiU6wa+1FL3v1/T1rAgzepV7xS4iafz4vxdHMlfwgKfoyKfq6JU1z oVM/ahI5xWDDAhUAmEv6eIJrB4KN0fPRABPx3NHYclkCgYAlhuYZ/AzPta7+bE5C QasmSVzc8uM/e+LN7ABlEXwQRk6QfZBcX8TbePNE8ZFng4Uft/QzAOUxALET7kKA ek4Jeytpzc0XYCYyuGJATm4F9ZY1pAJ5yQmUmwvDYdlaZJ4ldGzO/R57Evngn/G4 tqjjoi0sx3jq7czvDwdGHnky0AOBhAACgYBgvDFxw1U6Ou2G6P/+347Jfk2wPB1/ atr4p3JUVLuT0ExZG6np+rKiXmcBbYKbAhMY37zVkroR9bwo+NgaJGubQ4ex5Y1X N2Q5gIHNhNfKr8G4LPVqWGxf/lFPDYxX3ezqBJPpJCJTREX7s6Hp/VTV2SpQlySv +GRcFKJFPlhD9aM6MDgwDgYDVR0PAQH/BAQDAgeAMBEGA1UdDgQKBAiC+5gx0MHL hTATBgNVHSMEDDAKgAiKHFYwWjISfTAJBgcqhkjOOAQDAy8AMCwCFDTcM5i61uqq /aveERhOJ6NG/LubAhREVDtAeNbTEywXr4O7KvEEvFLUjg== </X509Certificate> <X509CRL> MIIBJDCB5AIBATAJBgcqhkjOOAQDMHYxCzAJBgNVBAYTAklFMQ8wDQYDVQQIEwZE dWJsaW4xJDAiBgNVBAoTG0JhbHRpbW9yZSBUZWNobm9sb2dpZXMgTHRkLjERMA8G A1UECxMIWC9TZWN1cmUxHTAbBgNVBAMTFEFub3RoZXIgVHJhbnNpZW50IENBFw0w MjA0MDQwMjE2NThaFw0xMTA0MDIwMjE2NThaMBkwFwIGAOz5Id5/Fw0wMjA0MDQw MjE2NThaoCMwITATBgNVHSMEDDAKgAiKHFYwWjISfTAKBgNVHRQEAwIBADAJBgcq hkjOOAQDAzAAMC0CFCEIm38fvGzSJHms284hUs9dNB8nAhUAjEtZr0TGgc6sVRVk krEgltdo7Jw= </X509CRL> </X509Data> </KeyInfo> </Signature> 1.1 xml-security/data/ie/baltimore/merlin-examples/merlin-xmldsig-twenty-three/signature-x509-crt.xml Index: signature-x509-crt.xml =================================================================== <?xml version="1.0" encoding="UTF-8"?> <Signature xmlns="http://www.w3.org/2000/09/xmldsig#"> <SignedInfo> <CanonicalizationMethod Algorithm="http://www.w3.org/TR/2001/REC-xml-c14n-20010315" /> <SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#dsa-sha1" /> <Reference URI="http://www.w3.org/TR/xml-stylesheet"> <DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1" /> <DigestValue>60NvZvtdTB+7UnlLp/H24p7h4bs=</DigestValue> </Reference> </SignedInfo> <SignatureValue> GCQVmBq+1H7e9IjvKfe+egLM1Jlp3L1JCGkl9SlJ0eaDh2MKYUUnHA== </SignatureValue> <KeyInfo> <X509Data> <X509Certificate> MIIDUDCCAxCgAwIBAgIGAOz5IVHTMAkGByqGSM44BAMwdjELMAkGA1UEBhMCSUUx DzANBgNVBAgTBkR1YmxpbjEkMCIGA1UEChMbQmFsdGltb3JlIFRlY2hub2xvZ2ll cyBMdGQuMREwDwYDVQQLEwhYL1NlY3VyZTEdMBsGA1UEAxMUQW5vdGhlciBUcmFu c2llbnQgQ0EwHhcNMDIwNDAyMjM1OTUyWhcNMTIwNDAyMjI1OTQ2WjBoMQswCQYD VQQGEwJJRTEPMA0GA1UECBMGRHVibGluMSQwIgYDVQQKExtCYWx0aW1vcmUgVGVj aG5vbG9naWVzIEx0ZC4xETAPBgNVBAsTCFgvU2VjdXJlMQ8wDQYDVQQDEwZNb3Jp Z3UwggG2MIIBKwYHKoZIzjgEATCCAR4CgYEAhIqwSieM0aAez+6H71gqCfBnwG3d Pu7JAElb13GkwXRw9RfPh0VtIVjhDJbyKAIuzCk5r54ccRixa8TQ2vWVwodQ9eru 7jUknAc2rVEAV5mJTrBr7UUve/X9PWsCDN6lXvFLiJp/Pi/F0cyV/CAp+jIp+rol TXOhUz9qEjnFYMMCFQCYS/p4gmsHgo3R89EAE/Hc0dhyWQKBgCWG5hn8DM+1rv5s TkJBqyZJXNzy4z974s3sAGURfBBGTpB9kFxfxNt480TxkWeDhR+39DMA5TEAsRPu QoB6Tgl7K2nNzRdgJjK4YkBObgX1ljWkAnnJCZSbC8Nh2VpkniV0bM79HnsS+eCf 8bi2qOOiLSzHeOrtzO8PB0YeeTLQA4GEAAKBgH1NBJ9Az5TwY4tDE0dPYVHHABt+ yLspnT3k9G6YWUMFhZ/+3RuqEPjnKrPfUoXTTJGIACgPU3/PkqwrPVD0JMdpOcnZ LHiJ/P7QRQeMwDRoBrs7genB1bDd4pSJrEUcjrkA5uRrIj2Z5fL+UuLiLGPO2rM7 BNQRIq3QFPdX++NuozowODAOBgNVHQ8BAf8EBAMCB4AwEQYDVR0OBAoECIK7Ljjh +EsfMBMGA1UdIwQMMAqACIocVjBaMhJ9MAkGByqGSM44BAMDLwAwLAIUEJJCOHw8 ppxoRyz3s+Vmb4NKIfMCFDgJoZn9zh/3WoYNBURODwLvyBOy </X509Certificate> </X509Data> </KeyInfo> </Signature> 1.1 xml-security/data/ie/baltimore/merlin-examples/merlin-xmldsig-twenty-three/signature-x509-is.xml Index: signature-x509-is.xml =================================================================== <?xml version="1.0" encoding="UTF-8"?> <Signature xmlns="http://www.w3.org/2000/09/xmldsig#"> <SignedInfo> <CanonicalizationMethod Algorithm="http://www.w3.org/TR/2001/REC-xml-c14n-20010315" /> <SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#dsa-sha1" /> <Reference URI="http://www.w3.org/TR/xml-stylesheet"> <DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1" /> <DigestValue>60NvZvtdTB+7UnlLp/H24p7h4bs=</DigestValue> </Reference> </SignedInfo> <SignatureValue> bmKMy/w1DO9dHA6E7Dt0B8IFkYAj1/UD3TqcdqIcfkMT7evE8+NBgg== </SignatureValue> <KeyInfo> <X509Data> <X509IssuerSerial> <X509IssuerName> CN=Another Transient CA,OU=X/Secure,O=Baltimore Technologies Ltd.,ST=Dublin,C=IE </X509IssuerName> <X509SerialNumber>1017792003066</X509SerialNumber> </X509IssuerSerial> </X509Data> </KeyInfo> </Signature> 1.1 xml-security/data/ie/baltimore/merlin-examples/merlin-xmldsig-twenty-three/signature-x509-ski.xml Index: signature-x509-ski.xml =================================================================== <?xml version="1.0" encoding="UTF-8"?> <Signature xmlns="http://www.w3.org/2000/09/xmldsig#"> <SignedInfo> <CanonicalizationMethod Algorithm="http://www.w3.org/TR/2001/REC-xml-c14n-20010315" /> <SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#dsa-sha1" /> <Reference URI="http://www.w3.org/TR/xml-stylesheet"> <DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1" /> <DigestValue>60NvZvtdTB+7UnlLp/H24p7h4bs=</DigestValue> </Reference> </SignedInfo> <SignatureValue> F9nEU1Us48iKTml8n7E4wt7HtFJ5gaLIgox0J9WbujGndW0oQJbeGg== </SignatureValue> <KeyInfo> <X509Data> <X509SKI> hf10xKfSnIg= </X509SKI> </X509Data> </KeyInfo> </Signature> 1.1 xml-security/data/ie/baltimore/merlin-examples/merlin-xmldsig-twenty-three/signature-x509-sn.xml Index: signature-x509-sn.xml =================================================================== <?xml version="1.0" encoding="UTF-8"?> <Signature xmlns="http://www.w3.org/2000/09/xmldsig#"> <SignedInfo> <CanonicalizationMethod Algorithm="http://www.w3.org/TR/2001/REC-xml-c14n-20010315" /> <SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#dsa-sha1" /> <Reference URI="http://www.w3.org/TR/xml-stylesheet"> <DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1" /> <DigestValue>60NvZvtdTB+7UnlLp/H24p7h4bs=</DigestValue> </Reference> </SignedInfo> <SignatureValue> MUOjiqG0dbjvR6+qYYPL85nKSt2FeZGQBQkYudv48KyJhJLG1Bp+bA== </SignatureValue> <KeyInfo> <X509Data> <X509SubjectName> CN=Badb,OU=X/Secure,O=Baltimore Technologies Ltd.,ST=Dublin,C=IE </X509SubjectName> </X509Data> </KeyInfo> </Signature> 1.1 xml-security/data/ie/baltimore/merlin-examples/merlin-xmldsig-twenty-three/signature.tmpl Index: signature.tmpl =================================================================== <?xml version="1.0"?> <!DOCTYPE envelope [ <!ENTITY dsig "http://www.w3.org/2000/09/xmldsig#"> <!ENTITY c14n "http://www.w3.org/TR/2001/REC-xml-c14n-20010315"> <!ENTITY xpath "http://www.w3.org/TR/1999/REC-xpath-19991116"> <!ENTITY xslt "http://www.w3.org/TR/1999/REC-xslt-19991116"> <!ATTLIST Notaries Id ID #IMPLIED> ]> <!-- Preamble --> <Envelope xmlns="http://example.org/usps" xmlns:foo="http://example.org/foo"> <DearSir>foo</DearSir> <Body>bar</Body> <YoursSincerely> <Signature Id="signature" xmlns="&dsig;"> <SignedInfo> <CanonicalizationMethod Algorithm="" /> <SignatureMethod Algorithm="" /> <Reference URI="http://www.w3.org/TR/xml-stylesheet"> <DigestMethod Algorithm="" /> <DigestValue>aaaa</DigestValue> </Reference> <Reference URI="http://www.w3.org/Signature/2002/04/xml-stylesheet.b64"> <Transforms> <Transform Algorithm="&dsig;base64" /> </Transforms> <DigestMethod Algorithm="" /> <DigestValue>aaaa</DigestValue> </Reference> <Reference URI="#object-1" Type="&dsig;Object"> <Transforms> <Transform Algorithm="&xpath;"> <XPath> sel888a:dbb7:2d49:b3f6:8605:bf4e:caed:e5a4text() </XPath> </Transform> </Transforms> <DigestMethod Algorithm="" /> <DigestValue>aaaa</DigestValue> </Reference> <Reference URI="" Type="&dsig;Object"> <Transforms> <Transform Algorithm="&xpath;"> <XPath xmlns:dsig="&dsig;"> ancestor-or-sel888a:dbb7:2d49:b3f6:8605:bf4e:caed:e5a4dsig:SignedInfo and count(ancestor-or-sel888a:dbb7:2d49:b3f6:8605:bf4e:caed:e5a4dsig:Reference | here()/ancestor888a:dbb7:2d49:b3f6:8605:bf4e:caed:e5a4sig:Reference[1]) &gt; count(ancestor-or-sel888a:dbb7:2d49:b3f6:8605:bf4e:caed:e5a4dsig:Reference) or count(ancestor-or-sel888a:dbb7:2d49:b3f6:8605:bf4e:caed:e5a4node() | id('notaries')) = count(ancestor-or-sel888a:dbb7:2d49:b3f6:8605:bf4e:caed:e5a4node()) </XPath> </Transform> </Transforms> <DigestMethod Algorithm="" /> <DigestValue>aaaa</DigestValue> </Reference> <Reference URI="#object-2" Type="&dsig;Object"> <Transforms> <Transform Algorithm="&dsig;base64" /> </Transforms> <DigestMethod Algorithm="" /> <DigestValue>aaaa</DigestValue> </Reference> <Reference URI="#manifest-1" Type="&dsig;Manifest"> <DigestMethod Algorithm="" /> <DigestValue>aaaa</DigestValue> </Reference> <Reference URI="#signature-properties-1" Type="&dsig;SignatureProperties"> <DigestMethod Algorithm="" /> <DigestValue>aaaa</DigestValue> </Reference> <Reference URI=""> <Transforms> <Transform Algorithm="&dsig;enveloped-signature" /> </Transforms> <DigestMethod Algorithm="" /> <DigestValue>aaaa</DigestValue> </Reference> <Reference URI=""> <Transforms> <Transform Algorithm="&dsig;enveloped-signature" /> <Transform Algorithm="&c14n;#WithComments" /> </Transforms> <DigestMethod Algorithm="" /> <DigestValue>aaaa</DigestValue> </Reference> <Reference URI="#xpointer(/)"> <Transforms> <Transform Algorithm="&dsig;enveloped-signature" /> </Transforms> <DigestMethod Algorithm="" /> <DigestValue>aaaa</DigestValue> </Reference> <Reference URI="#xpointer(/)"> <Transforms> <Transform Algorithm="&dsig;enveloped-signature" /> <Transform Algorithm="&c14n;#WithComments" /> </Transforms> <DigestMethod Algorithm="" /> <DigestValue>aaaa</DigestValue> </Reference> <Reference URI="#object-3" Type="&dsig;Object"> <DigestMethod Algorithm="" /> <DigestValue>aaaa</DigestValue> </Reference> <Reference URI="#object-3" Type="&dsig;Object"> <Transforms> <Transform Algorithm="&c14n;#WithComments" /> </Transforms> <DigestMethod Algorithm="" /> <DigestValue>aaaa</DigestValue> </Reference> <Reference URI="#xpointer(id('object-3'))" Type="&dsig;Object"> <DigestMethod Algorithm="" /> <DigestValue>aaaa</DigestValue> </Reference> <Reference URI="#xpointer(id('object-3'))" Type="&dsig;Object"> <Transforms> <Transform Algorithm="&c14n;#WithComments" /> </Transforms> <DigestMethod Algorithm="" /> <DigestValue>aaaa</DigestValue> </Reference> <Reference URI="#reference-2"> <DigestMethod Algorithm="" /> <DigestValue>aaaa</DigestValue> </Reference> <Reference Id="reference-1" URI="#manifest-reference-1"> <DigestMethod Algorithm="" /> <DigestValue>aaaa</DigestValue> </Reference> <Reference Id="reference-2" URI="#reference-1"> <DigestMethod Algorithm="" /> <DigestValue>aaaa</DigestValue> </Reference> </SignedInfo> <SignatureValue>aaaa</SignatureValue> <KeyInfo> <RetrievalMethod URI="#object-4" Type="&dsig;X509Data"> <Transforms> <Transform Algorithm="&xpath;"> <XPath xmlns:dsig="&dsig;"> ancestor-or-sel888a:dbb7:2d49:b3f6:8605:bf4e:caed:e5a4dsig:X509Data </XPath> </Transform> </Transforms> </RetrievalMethod> </KeyInfo> <Object Id="object-1" MimeType="text/plain">I am the text.</Object> <Object Id="object-2" MimeType="text/plain" Encoding="&dsig;base64">SSBhbSB0aGUgdGV4dC4=</Object> <Object Id="object-3"><NonCommentandus xmlns=""><!-- Commentandum --></NonCommentandus></Object> <Object> <Manifest Id="manifest-1"> <Reference Id="manifest-reference-1" URI="http://www.w3.org/TR/xml-stylesheet"> <DigestMethod Algorithm="" /> <DigestValue>aaaa</DigestValue> </Reference> <Reference URI="#reference-1"> <DigestMethod Algorithm="" /> <DigestValue>aaaa</DigestValue> </Reference> <Reference URI="#notaries"> <Transforms> <Transform Algorithm="&xslt;"> <xsl:stylesheet version="1.0" xmlns="http://www.w3.org/TR/xhtml1/strict" xmlns:xsl="http://www.w3.org/1999/XSL/Transform" exclude-result-prefixes="foo"> <xsl:output method="xml" indent="no" encoding="UTF-8"/> <xsl:template match="/"> <html> <head> <title>Notaries</title> </head> <body> <table> <xsl:for-each select="Notaries/Notary"> <tr> <th> <xsl:value-of select="@name"/> </th> </tr> </xsl:for-each> </table> </body> </html> </xsl:template> </xsl:stylesheet> </Transform> <Transform Algorithm="&c14n;" /> </Transforms> <DigestMethod Algorithm="" /> <DigestValue>aaaa</DigestValue> </Reference> </Manifest> </Object> <Object> <SignatureProperties Id="signature-properties-1"> <SignatureProperty Target="#signature"> <SignerAddress xmlns="urn:demo"><IP>83.161.120.155</IP></SignerAddress> </SignatureProperty> </SignatureProperties> </Object> <Object Id="object-4"> <X509Data> <X509SubjectName> CN=Merlin Hughes,OU=X/Secure,O=Baltimore Technologies Ltd.,ST=Dublin,C=IE </X509SubjectName> <X509IssuerSerial> <X509IssuerName> CN=Transient CA,OU=X/Secure,O=Baltimore Technologies Ltd.,ST=Dublin,C=IE </X509IssuerName> <X509SerialNumber>1017788370348</X509SerialNumber> </X509IssuerSerial> <X509Certificate> MIIDUDCCAxCgAwIBAgIGAOz46g2sMAkGByqGSM44BAMwbjELMAkGA1UEBhMCSUUx DzANBgNVBAgTBkR1YmxpbjEkMCIGA1UEChMbQmFsdGltb3JlIFRlY2hub2xvZ2ll cyBMdGQuMREwDwYDVQQLEwhYL1NlY3VyZTEVMBMGA1UEAxMMVHJhbnNpZW50IENB MB4XDTAyMDQwMjIyNTkzMFoXDTEyMDQwMjIxNTkyNVowbzELMAkGA1UEBhMCSUUx DzANBgNVBAgTBkR1YmxpbjEkMCIGA1UEChMbQmFsdGltb3JlIFRlY2hub2xvZ2ll cyBMdGQuMREwDwYDVQQLEwhYL1NlY3VyZTEWMBQGA1UEAxMNTWVybGluIEh1Z2hl czCCAbcwggEsBgcqhkjOOAQBMIIBHwKBgQDd454C+qcTIWlb65NKCt2PtguNpOSn Id5woUigu7xBk2QZNAjVyIhMEfSWp8iR0IdKLx+JQLcNOrcn0Wwl5/hhW0MXsmlS 8dM5Cq2rtmDHooLxbGTPqtALE6vsXQCk5iLz3MtGh7gyQMZ7q7HT5a3I5NChUgY1 MMNQVetRA1susQIVAIQy3BStBjvx89Wq8Tjr7IDP1S8lAoGBAJ58e4W3VqMxm7Zx YJ2xZ6KX0Ze10WnKZDyURn+T9iFIFbKRFElKDeotXwwXwYON8yre3ZRGkC+2+fiU 2bdzIWTT6LMbIMVbk+07P4OZOxJ6XWL9GuYcOQcNvX42xh34DPHdq4XdlItMR25N A+OdZ4S8VVrpb4jkj4cyir1628kgA4GEAAKBgHH2KYoaQEHnqWzRUuDAG0EYXV6Q 4ucC68MROYSL6GKqNS/AUFbvH2NUxQD7aGntYgYPxiCcj94i38rgSWg7ySSz99MA R/Yv7OSd+uej3r6TlXU34u++xYvRo+sv4m9lb/jmXyZJKeC+dPqeU1IT5kCybURL ILZfrZyDsiU/vhvVozowODAOBgNVHQ8BAf8EBAMCB4AwEQYDVR0OBAoECIatY7SE lXEOMBMGA1UdIwQMMAqACIOGPkB2MuKTMAkGByqGSM44BAMDLwAwLAIUSvT02iQj Q5da4Wpe0Bvs7GuCcVsCFCEcQpbjUfnxXFXNWiFyQ49ZrWqn </X509Certificate> <X509Certificate> MIIDSzCCAwugAwIBAgIGAOz46fwJMAkGByqGSM44BAMwbjELMAkGA1UEBhMCSUUx DzANBgNVBAgTBkR1YmxpbjEkMCIGA1UEChMbQmFsdGltb3JlIFRlY2hub2xvZ2ll cyBMdGQuMREwDwYDVQQLEwhYL1NlY3VyZTEVMBMGA1UEAxMMVHJhbnNpZW50IENB MB4XDTAyMDQwMjIyNTkyNVoXDTEyMDQwMjIxNTkyNVowbjELMAkGA1UEBhMCSUUx DzANBgNVBAgTBkR1YmxpbjEkMCIGA1UEChMbQmFsdGltb3JlIFRlY2hub2xvZ2ll cyBMdGQuMREwDwYDVQQLEwhYL1NlY3VyZTEVMBMGA1UEAxMMVHJhbnNpZW50IENB MIIBtzCCASwGByqGSM44BAEwggEfAoGBAN3jngL6pxMhaVvrk0oK3Y+2C42k5Kch 3nChSKC7vEGTZBk0CNXIiEwR9JanyJHQh0ovH4lAtw06tyfRbCXn+GFbQxeyaVLx 0zkKrau2YMeigvFsZM+q0AsTq+xdAKTmIvPcy0aHuDJAxnursdPlrcjk0KFSBjUw w1BV61EDWy6xAhUAhDLcFK0GO/Hz1arxOOvsgM/VLyUCgYEAnnx7hbdWozGbtnFg nbFnopfRl7XRacpkPJRGf5P2IUgVspEUSUoN6i1fDBfBg43zKt7dlEaQL7b5+JTZ t3MhZNPosxsgxVuT7Ts/g5k7EnpdYv0a5hw5Bw29fjbGHfgM8d2rhd2Ui0xHbk0D 451nhLxVWulviOSPhzKKvXrbySADgYQAAoGAfag+HCABIJadDD9Aarhgc2QR3Lp7 PpMOh0lAwLiIsvkO4UlbeOS0IJC8bcqLjM1fVw6FGSaxmq+4y1ag2m9k6IdE0Qh5 NxB/xFkmdwqXFRIJVp44OeUygB47YK76NmUIYG3DdfiPPU3bqzjvtOtETiCHvo25 4D6UjwPpYErXRUajNjA0MA4GA1UdDwEB/wQEAwICBDAPBgNVHRMECDAGAQH/AgEA MBEGA1UdDgQKBAiDhj5AdjLikzAJBgcqhkjOOAQDAy8AMCwCFELu0nuweqW7Wf0s gk/CAGGL0BGKAhRNdgQGr5iyZKoH4oqPm0VJ9TjXLg== </X509Certificate> </X509Data> </Object> </Signature> </YoursSincerely> <PostScript>bar</PostScript> <Notaries Id="notaries" xmlns=""> <Notary name="Great, A. T." /> <Notary name="Hun, A. T." /> </Notaries> <!-- Commentary --> </Envelope> <!-- Postamble --> 1.1 xml-security/data/ie/baltimore/merlin-examples/merlin-xmldsig-twenty-three/signature.xml Index: signature.xml =================================================================== <?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE Envelope [ <!ENTITY dsig 'http://www.w3.org/2000/09/xmldsig#'> <!ENTITY c14n 'http://www.w3.org/TR/2001/REC-xml-c14n-20010315'> <!ENTITY xpath 'http://www.w3.org/TR/1999/REC-xpath-19991116'> <!ENTITY xslt 'http://www.w3.org/TR/1999/REC-xslt-19991116'> <!ATTLIST Notaries Id ID #IMPLIED> ]> <!-- Preamble --> <Envelope xmlns:foo="http://example.org/foo" xmlns="http://example.org/usps"> <DearSir>foo</DearSir> <Body>bar</Body> <YoursSincerely> <Signature xmlns="http://www.w3.org/2000/09/xmldsig#" Id="signature"> <SignedInfo> <CanonicalizationMethod Algorithm="http://www.w3.org/TR/2001/REC-xml-c14n-20010315" /> <SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#dsa-sha1" /> <Reference URI="http://www.w3.org/TR/xml-stylesheet"> <DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1" /> <DigestValue>60NvZvtdTB+7UnlLp/H24p7h4bs=</DigestValue> </Reference> <Reference URI="http://www.w3.org/Signature/2002/04/xml-stylesheet.b64"> <Transforms> <Transform Algorithm="http://www.w3.org/2000/09/xmldsig#base64" /> </Transforms> <DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1" /> <DigestValue>60NvZvtdTB+7UnlLp/H24p7h4bs=</DigestValue> </Reference> <Reference Type="http://www.w3.org/2000/09/xmldsig#Object" URI="#object-1"> <Transforms> <Transform Algorithm="http://www.w3.org/TR/1999/REC-xpath-19991116"> <XPath> sel888a:dbb7:2d49:b3f6:8605:bf4e:caed:e5a4text() </XPath> </Transform> </Transforms> <DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1" /> <DigestValue>zyjp8GJOX69990Kkqw8ioPXGExk=</DigestValue> </Reference> <Reference Type="http://www.w3.org/2000/09/xmldsig#Object" URI=""> <Transforms> <Transform Algorithm="http://www.w3.org/TR/1999/REC-xpath-19991116"> <XPath xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"> ancestor-or-sel888a:dbb7:2d49:b3f6:8605:bf4e:caed:e5a4dsig:SignedInfo and count(ancestor-or-sel888a:dbb7:2d49:b3f6:8605:bf4e:caed:e5a4dsig:Reference | here()/ancestor888a:dbb7:2d49:b3f6:8605:bf4e:caed:e5a4sig:Reference[1]) &gt; count(ancestor-or-sel888a:dbb7:2d49:b3f6:8605:bf4e:caed:e5a4dsig:Reference) or count(ancestor-or-sel888a:dbb7:2d49:b3f6:8605:bf4e:caed:e5a4node() | id('notaries')) = count(ancestor-or-sel888a:dbb7:2d49:b3f6:8605:bf4e:caed:e5a4node()) </XPath> </Transform> </Transforms> <DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1" /> <DigestValue>tQiE3GUKiBenPyp3J0Ei6rJMFv4=</DigestValue> </Reference> <Reference Type="http://www.w3.org/2000/09/xmldsig#Object" URI="#object-2"> <Transforms> <Transform Algorithm="http://www.w3.org/2000/09/xmldsig#base64" /> </Transforms> <DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1" /> <DigestValue>zyjp8GJOX69990Kkqw8ioPXGExk=</DigestValue> </Reference> <Reference Type="http://www.w3.org/2000/09/xmldsig#Manifest" URI="#manifest-1"> <DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1" /> <DigestValue>qg4HFwsN+/WX32uH85WlJU9l45k=</DigestValue> </Reference> <Reference Type="http://www.w3.org/2000/09/xmldsig#SignatureProperties" URI="#signature-properties-1"> <DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1" /> <DigestValue>ETlEI3y7hvvAtMe9wQSz7LhbHEE=</DigestValue> </Reference> <Reference URI=""> <Transforms> <Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature" /> </Transforms> <DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1" /> <DigestValue>J/O0HhdaPXxx49fgGWMESL09GpA=</DigestValue> </Reference> <Reference URI=""> <Transforms> <Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature" /> <Transform Algorithm="http://www.w3.org/TR/2001/REC-xml-c14n-20010315#WithComments" /> </Transforms> <DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1" /> <DigestValue>J/O0HhdaPXxx49fgGWMESL09GpA=</DigestValue> </Reference> <Reference URI="#xpointer(/)"> <Transforms> <Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature" /> </Transforms> <DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1" /> <DigestValue>J/O0HhdaPXxx49fgGWMESL09GpA=</DigestValue> </Reference> <Reference URI="#xpointer(/)"> <Transforms> <Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature" /> <Transform Algorithm="http://www.w3.org/TR/2001/REC-xml-c14n-20010315#WithComments" /> </Transforms> <DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1" /> <DigestValue>MkL9CX8yeABBth1RChyPx58Ls8w=</DigestValue> </Reference> <Reference Type="http://www.w3.org/2000/09/xmldsig#Object" URI="#object-3"> <DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1" /> <DigestValue>yamSIokKmjA3hB/s3Fu07wDO3vM=</DigestValue> </Reference> <Reference Type="http://www.w3.org/2000/09/xmldsig#Object" URI="#object-3"> <Transforms> <Transform Algorithm="http://www.w3.org/TR/2001/REC-xml-c14n-20010315#WithComments" /> </Transforms> <DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1" /> <DigestValue>yamSIokKmjA3hB/s3Fu07wDO3vM=</DigestValue> </Reference> <Reference Type="http://www.w3.org/2000/09/xmldsig#Object" URI="#xpointer(id('object-3'))"> <DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1" /> <DigestValue>yamSIokKmjA3hB/s3Fu07wDO3vM=</DigestValue> </Reference> <Reference Type="http://www.w3.org/2000/09/xmldsig#Object" URI="#xpointer(id('object-3'))"> <Transforms> <Transform Algorithm="http://www.w3.org/TR/2001/REC-xml-c14n-20010315#WithComments" /> </Transforms> <DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1" /> <DigestValue>419CYgyTWOTGYGBhzieWklNf7Bk=</DigestValue> </Reference> <Reference URI="#reference-2"> <DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1" /> <DigestValue>VzK45P9Ksjqq5oXlKQpkGgB2CNY=</DigestValue> </Reference> <Reference Id="reference-1" URI="#manifest-reference-1"> <DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1" /> <DigestValue>7/9fR+NIDz9owc1Lfsxu1JBr8uo=</DigestValue> </Reference> <Reference Id="reference-2" URI="#reference-1"> <DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1" /> <DigestValue>qURlo3LSq4TWQtygBZJ0iXQ9E14=</DigestValue> </Reference> </SignedInfo> <SignatureValue> WvZUJAJ/3QNqzQvwne2vvy7U5Pck8ZZ5UTa6pIwR7GE+PoGi6A1kyw== </SignatureValue> <KeyInfo> <RetrievalMethod Type="http://www.w3.org/2000/09/xmldsig#X509Data" URI="#object-4"> <Transforms> <Transform Algorithm="http://www.w3.org/TR/1999/REC-xpath-19991116"> <XPath xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"> ancestor-or-sel888a:dbb7:2d49:b3f6:8605:bf4e:caed:e5a4dsig:X509Data </XPath> </Transform> </Transforms> </RetrievalMethod> </KeyInfo> <Object Id="object-1" MimeType="text/plain">I am the text.</Object> <Object Encoding="http://www.w3.org/2000/09/xmldsig#base64" Id="object-2" MimeType="text/plain">SSBhbSB0aGUgdGV4dC4=</Object> <Object Id="object-3"> <NonCommentandus xmlns=""><!-- Commentandum --></NonCommentandus> </Object> <Object> <Manifest Id="manifest-1"> <Reference Id="manifest-reference-1" URI="http://www.w3.org/TR/xml-stylesheet"> <DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1" /> <DigestValue>60NvZvtdTB+7UnlLp/H24p7h4bs=</DigestValue> </Reference> <Reference URI="#reference-1"> <DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1" /> <DigestValue>qURlo3LSq4TWQtygBZJ0iXQ9E14=</DigestValue> </Reference> <Reference URI="#notaries"> <Transforms> <Transform Algorithm="http://www.w3.org/TR/1999/REC-xslt-19991116"> <xsl:stylesheet xmlns:xsl="http://www.w3.org/1999/XSL/Transform" xmlns="http://www.w3.org/TR/xhtml1/strict" exclude-result-prefixes="foo" version="1.0"> <xsl:output encoding="UTF-8" indent="no" method="xml" /> <xsl:template match="/"> <html> <head> <title>Notaries</title> </head> <body> <table> <xsl:for-each select="Notaries/Notary"> <tr> <th> <xsl:value-of select="@name" /> </th> </tr> </xsl:for-each> </table> </body> </html> </xsl:template> </xsl:stylesheet> </Transform> <Transform Algorithm="http://www.w3.org/TR/2001/REC-xml-c14n-20010315" /> </Transforms> <DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1" /> <DigestValue>c7wq5XKos6RqNVJyFy7/fl6+sAs=</DigestValue> </Reference> </Manifest> </Object> <Object> <SignatureProperties Id="signature-properties-1"> <SignatureProperty Target="#signature"> <SignerAddress xmlns="urn:demo"><IP>83.161.120.155</IP></SignerAddress> </SignatureProperty> </SignatureProperties> </Object> <Object Id="object-4"> <X509Data> <X509SubjectName> CN=Merlin Hughes,OU=X/Secure,O=Baltimore Technologies Ltd.,ST=Dublin,C=IE </X509SubjectName> <X509IssuerSerial> <X509IssuerName> CN=Transient CA,OU=X/Secure,O=Baltimore Technologies Ltd.,ST=Dublin,C=IE </X509IssuerName> <X509SerialNumber>1017788370348</X509SerialNumber> </X509IssuerSerial> <X509Certificate> MIIDUDCCAxCgAwIBAgIGAOz46g2sMAkGByqGSM44BAMwbjELMAkGA1UEBhMCSUUx DzANBgNVBAgTBkR1YmxpbjEkMCIGA1UEChMbQmFsdGltb3JlIFRlY2hub2xvZ2ll cyBMdGQuMREwDwYDVQQLEwhYL1NlY3VyZTEVMBMGA1UEAxMMVHJhbnNpZW50IENB MB4XDTAyMDQwMjIyNTkzMFoXDTEyMDQwMjIxNTkyNVowbzELMAkGA1UEBhMCSUUx DzANBgNVBAgTBkR1YmxpbjEkMCIGA1UEChMbQmFsdGltb3JlIFRlY2hub2xvZ2ll cyBMdGQuMREwDwYDVQQLEwhYL1NlY3VyZTEWMBQGA1UEAxMNTWVybGluIEh1Z2hl czCCAbcwggEsBgcqhkjOOAQBMIIBHwKBgQDd454C+qcTIWlb65NKCt2PtguNpOSn Id5woUigu7xBk2QZNAjVyIhMEfSWp8iR0IdKLx+JQLcNOrcn0Wwl5/hhW0MXsmlS 8dM5Cq2rtmDHooLxbGTPqtALE6vsXQCk5iLz3MtGh7gyQMZ7q7HT5a3I5NChUgY1 MMNQVetRA1susQIVAIQy3BStBjvx89Wq8Tjr7IDP1S8lAoGBAJ58e4W3VqMxm7Zx YJ2xZ6KX0Ze10WnKZDyURn+T9iFIFbKRFElKDeotXwwXwYON8yre3ZRGkC+2+fiU 2bdzIWTT6LMbIMVbk+07P4OZOxJ6XWL9GuYcOQcNvX42xh34DPHdq4XdlItMR25N A+OdZ4S8VVrpb4jkj4cyir1628kgA4GEAAKBgHH2KYoaQEHnqWzRUuDAG0EYXV6Q 4ucC68MROYSL6GKqNS/AUFbvH2NUxQD7aGntYgYPxiCcj94i38rgSWg7ySSz99MA R/Yv7OSd+uej3r6TlXU34u++xYvRo+sv4m9lb/jmXyZJKeC+dPqeU1IT5kCybURL ILZfrZyDsiU/vhvVozowODAOBgNVHQ8BAf8EBAMCB4AwEQYDVR0OBAoECIatY7SE lXEOMBMGA1UdIwQMMAqACIOGPkB2MuKTMAkGByqGSM44BAMDLwAwLAIUSvT02iQj Q5da4Wpe0Bvs7GuCcVsCFCEcQpbjUfnxXFXNWiFyQ49ZrWqn </X509Certificate> <X509Certificate> MIIDSzCCAwugAwIBAgIGAOz46fwJMAkGByqGSM44BAMwbjELMAkGA1UEBhMCSUUx DzANBgNVBAgTBkR1YmxpbjEkMCIGA1UEChMbQmFsdGltb3JlIFRlY2hub2xvZ2ll cyBMdGQuMREwDwYDVQQLEwhYL1NlY3VyZTEVMBMGA1UEAxMMVHJhbnNpZW50IENB MB4XDTAyMDQwMjIyNTkyNVoXDTEyMDQwMjIxNTkyNVowbjELMAkGA1UEBhMCSUUx DzANBgNVBAgTBkR1YmxpbjEkMCIGA1UEChMbQmFsdGltb3JlIFRlY2hub2xvZ2ll cyBMdGQuMREwDwYDVQQLEwhYL1NlY3VyZTEVMBMGA1UEAxMMVHJhbnNpZW50IENB MIIBtzCCASwGByqGSM44BAEwggEfAoGBAN3jngL6pxMhaVvrk0oK3Y+2C42k5Kch 3nChSKC7vEGTZBk0CNXIiEwR9JanyJHQh0ovH4lAtw06tyfRbCXn+GFbQxeyaVLx 0zkKrau2YMeigvFsZM+q0AsTq+xdAKTmIvPcy0aHuDJAxnursdPlrcjk0KFSBjUw w1BV61EDWy6xAhUAhDLcFK0GO/Hz1arxOOvsgM/VLyUCgYEAnnx7hbdWozGbtnFg nbFnopfRl7XRacpkPJRGf5P2IUgVspEUSUoN6i1fDBfBg43zKt7dlEaQL7b5+JTZ t3MhZNPosxsgxVuT7Ts/g5k7EnpdYv0a5hw5Bw29fjbGHfgM8d2rhd2Ui0xHbk0D 451nhLxVWulviOSPhzKKvXrbySADgYQAAoGAfag+HCABIJadDD9Aarhgc2QR3Lp7 PpMOh0lAwLiIsvkO4UlbeOS0IJC8bcqLjM1fVw6FGSaxmq+4y1ag2m9k6IdE0Qh5 NxB/xFkmdwqXFRIJVp44OeUygB47YK76NmUIYG3DdfiPPU3bqzjvtOtETiCHvo25 4D6UjwPpYErXRUajNjA0MA4GA1UdDwEB/wQEAwICBDAPBgNVHRMECDAGAQH/AgEA MBEGA1UdDgQKBAiDhj5AdjLikzAJBgcqhkjOOAQDAy8AMCwCFELu0nuweqW7Wf0s gk/CAGGL0BGKAhRNdgQGr5iyZKoH4oqPm0VJ9TjXLg== </X509Certificate> </X509Data> </Object> </Signature> </YoursSincerely> <PostScript>bar</PostScript> <Notaries xmlns="" Id="notaries"> <Notary name="Great, A. T." /> <Notary name="Hun, A. T." /> </Notaries> <!-- Commentary --> </Envelope> <!-- Postamble --> 1.1 xml-security/data/ie/baltimore/merlin-examples/merlin-xmldsig-twenty-three/xml-stylesheet.b64 Index: xml-stylesheet.b64 =================================================================== PCFET0NUWVBFIGh0bWwgUFVCTElDICItLy9XM0MvL0RURCBIVE1MIDQuMCBUcmFu c2l0aW9uYWwvL0VOIj4KPGh0bWw+CjxoZWFkPgo8dGl0bGU+QXNzb2NpYXRpbmcg U3R5bGUgU2hlZXRzIHdpdGggWE1MIGRvY3VtZW50czwvdGl0bGU+CjxsaW5rIHJl bD0ic3R5bGVzaGVldCIgdHlwZT0idGV4dC9jc3MiIGhyZWY9Imh0dHA6Ly93d3cu dzMub3JnL1N0eWxlU2hlZXRzL1RSL1czQy1SRUMiPgo8c3R5bGUgdHlwZT0idGV4 dC9jc3MiPmNvZGUgeyBmb250LWZhbWlseTogbW9ub3NwYWNlIH08L3N0eWxlPgo8 L2hlYWQ+Cjxib2R5Pgo8ZGl2IGNsYXNzPSJoZWFkIj4KPGEgaHJlZj0iaHR0cDov L3d3dy53My5vcmcvIj48aW1nIHNyYz0iaHR0cDovL3d3dy53My5vcmcvSWNvbnMv V1dXL3czY19ob21lIiBhbHQ9IlczQyIgaGVpZ2h0PSI0OCIgd2lkdGg9IjcyIj48 L2E+CjxoMT5Bc3NvY2lhdGluZyBTdHlsZSBTaGVldHMgd2l0aCBYTUwgZG9jdW1l bnRzPGJyPlZlcnNpb24gMS4wPC9oMT4KPGgyPlczQyBSZWNvbW1lbmRhdGlvbiAy OSBKdW5lIDE5OTk8L2gyPgo8ZGw+CjxkdD5UaGlzIHZlcnNpb246PC9kdD4KPGRk Pgo8YSBocmVmPSJodHRwOi8vd3d3LnczLm9yZy8xOTk5LzA2L1JFQy14bWwtc3R5 bGVzaGVldC0xOTk5MDYyOSI+aHR0cDovL3d3dy53My5vcmcvMTk5OS8wNi9SRUMt eG1sLXN0eWxlc2hlZXQtMTk5OTA2Mjk8L2E+Cjxicj4KPC9kZD4KPGR0PkxhdGVz dCB2ZXJzaW9uOjwvZHQ+CjxkZD4KPGEgaHJlZj0iaHR0cDovL3d3dy53My5vcmcv VFIveG1sLXN0eWxlc2hlZXQiPmh0dHA6Ly93d3cudzMub3JnL1RSL3htbC1zdHls ZXNoZWV0PC9hPgo8YnI+CjwvZGQ+CjxkdD5QcmV2aW91cyB2ZXJzaW9uOjwvZHQ+ CjxkZD4KPGEgaHJlZj0iaHR0cDovL3d3dy53My5vcmcvVFIvMTk5OS94bWwtc3R5 bGVzaGVldC0xOTk5MDQyOCI+aHR0cDovL3d3dy53My5vcmcvVFIvMTk5OS94bWwt c3R5bGVzaGVldC0xOTk5MDQyODwvYT4KPGJyPgo8L2RkPgo8ZHQ+RWRpdG9yOjwv ZHQ+CjxkZD4KCkphbWVzIENsYXJrCjxhIGhyZWY9Im1haWx0bzpqamNAamNsYXJr LmNvbSI+Jmx0O2pqY0BqY2xhcmsuY29tJmd0OzwvYT4KPGJyPgo8L2RkPgo8L2Rs Pgo8cCBjbGFzcz0iY29weXJpZ2h0Ij4KPGEgaHJlZj0iaHR0cDovL3d3dy53My5v cmcvQ29uc29ydGl1bS9MZWdhbC9pcHItbm90aWNlLmh0bWwjQ29weXJpZ2h0Ij4K CQlDb3B5cmlnaHQ8L2E+ICZuYnNwOyZjb3B5OyZuYnNwOyAxOTk5IDxhIGhyZWY9 Imh0dHA6Ly93d3cudzMub3JnIj5XM0M8L2E+CgkJKDxhIGhyZWY9Imh0dHA6Ly93 d3cubGNzLm1pdC5lZHUiPk1JVDwvYT4sCgkJPGEgaHJlZj0iaHR0cDovL3d3dy5p bnJpYS5mci8iPklOUklBPC9hPiwKCQk8YSBocmVmPSJodHRwOi8vd3d3LmtlaW8u YWMuanAvIj5LZWlvPC9hPiApLCBBbGwgUmlnaHRzIFJlc2VydmVkLiBXM0MKCQk8 YSBocmVmPSJodHRwOi8vd3d3LnczLm9yZy9Db25zb3J0aXVtL0xlZ2FsL2lwci1u b3RpY2UuaHRtbCNMZWdhbCBEaXNjbGFpbWVyIj5saWFiaWxpdHksPC9hPjxhIGhy ZWY9Imh0dHA6Ly93d3cudzMub3JnL0NvbnNvcnRpdW0vTGVnYWwvaXByLW5vdGlj ZS5odG1sI1czQyBUcmFkZW1hcmtzIj50cmFkZW1hcms8L2E+LAoJCTxhIGhyZWY9 Imh0dHA6Ly93d3cudzMub3JnL0NvbnNvcnRpdW0vTGVnYWwvY29weXJpZ2h0LWRv Y3VtZW50cy5odG1sIj5kb2N1bWVudCB1c2UgPC9hPmFuZAoJCTxhIGhyZWY9Imh0 dHA6Ly93d3cudzMub3JnL0NvbnNvcnRpdW0vTGVnYWwvY29weXJpZ2h0LXNvZnR3 YXJlLmh0bWwiPnNvZnR3YXJlIGxpY2Vuc2luZyA8L2E+cnVsZXMgYXBwbHkuCgk8 L3A+CjxociB0aXRsZT0iU2VwYXJhdG9yIGZvciBoZWFkZXIiPgo8L2Rpdj4KPGgy Pgo8YSBuYW1lPSJhYnN0cmFjdCI+QWJzdHJhY3Q8L2E+CjwvaDI+Cgo8cD5UaGlz IGRvY3VtZW50IGFsbG93cyBhIHN0eWxlIHNoZWV0IHRvIGJlIGFzc29jaWF0ZWQg d2l0aCBhbiBYTUwKZG9jdW1lbnQgYnkgaW5jbHVkaW5nIG9uZSBvciBtb3JlIHBy b2Nlc3NpbmcgaW5zdHJ1Y3Rpb25zIHdpdGggYQp0YXJnZXQgb2YgPGNvZGU+eG1s LXN0eWxlc2hlZXQ8L2NvZGU+IGluIHRoZSBkb2N1bWVudCdzIHByb2xvZy48L3A+ Cgo8aDI+CjxhIG5hbWU9InN0YXR1cyI+U3RhdHVzIG9mIHRoaXMgZG9jdW1lbnQ8 L2E+CjwvaDI+Cgo8cD5UaGlzIGRvY3VtZW50IGhhcyBiZWVuIHJldmlld2VkIGJ5 IFczQyBNZW1iZXJzIGFuZCBvdGhlciBpbnRlcmVzdGVkCnBhcnRpZXMgYW5kIGhh cyBiZWVuIGVuZG9yc2VkIGJ5IHRoZSBEaXJlY3RvciBhcyBhIFczQyA8YSBocmVm PSJodHRwOi8vd3d3LnczLm9yZy9Db25zb3J0aXVtL1Byb2Nlc3MvI1JlY3NXM0Mi PlJlY29tbWVuZGF0aW9uPC9hPi4gSXQKaXMgYSBzdGFibGUgZG9jdW1lbnQgYW5k IG1heSBiZSB1c2VkIGFzIHJlZmVyZW5jZSBtYXRlcmlhbCBvciBjaXRlZCBhcwph IG5vcm1hdGl2ZSByZWZlcmVuY2UgZnJvbSBvdGhlciBkb2N1bWVudHMuIFczQydz IHJvbGUgaW4gbWFraW5nIHRoZQpSZWNvbW1lbmRhdGlvbiBpcyB0byBkcmF3IGF0 dGVudGlvbiB0byB0aGUgc3BlY2lmaWNhdGlvbiBhbmQgdG8KcHJvbW90ZSBpdHMg d2lkZXNwcmVhZCBkZXBsb3ltZW50LiBUaGlzIGVuaGFuY2VzIHRoZSBmdW5jdGlv bmFsaXR5IGFuZAppbnRlcm9wZXJhYmlsaXR5IG9mIHRoZSBXZWIuPC9wPgoKPHA+ VGhlIGxpc3Qgb2Yga25vd24gZXJyb3JzIGluIHRoaXMgc3BlY2lmaWNhdGlvbnMg aXMgYXZhaWxhYmxlIGF0CjxhIGhyZWY9Imh0dHA6Ly93d3cudzMub3JnLzE5OTkv MDYvUkVDLXhtbC1zdHlsZXNoZWV0LTE5OTkwNjI5L2VycmF0YSI+aHR0cDovL3d3 dy53My5vcmcvVFIvMTk5OS94bWwtc3R5bGVzaGVldC0xOTk5MDYyOS9lcnJhdGE8 L2E+LjwvcD4KCjxwPkNvbW1lbnRzIG9uIHRoaXMgc3BlY2lmaWNhdGlvbiBtYXkg YmUgc2VudCB0byAmbHQ7PGEgaHJlZj0ibWFpbHRvOnd3dy14bWwtc3R5bGVzaGVl dC1jb21tZW50c0B3My5vcmciPnd3dy14bWwtc3R5bGVzaGVldC1jb21tZW50c0B3 My5vcmc8L2E+Jmd0Oy4gVGhlIGFyY2hpdmUgb2YgcHVibGljCmNvbW1lbnRzIGlz IGF2YWlsYWJsZSBhdCA8YSBocmVmPSJodHRwOi8vd3d3LnczLm9yZy9BcmNoaXZl cy9QdWJsaWMvd3d3LXhtbC1zdHlsZXNoZWV0LWNvbW1lbnRzIj5odHRwOi8vdzMu b3JnL0FyY2hpdmVzL1B1YmxpYy93d3cteG1sLXN0eWxlc2hlZXQtY29tbWVudHM8 L2E+LjwvcD4KCjxwPkEgbGlzdCBvZiBjdXJyZW50IFczQyBSZWNvbW1lbmRhdGlv bnMgYW5kIG90aGVyIHRlY2huaWNhbCBkb2N1bWVudHMKY2FuIGJlIGZvdW5kIGF0 IDxhIGhyZWY9Imh0dHA6Ly93d3cudzMub3JnL1RSIj5odHRwOi8vd3d3LnczLm9y Zy9UUjwvYT4uPC9wPgoKPHA+VGhlIFdvcmtpbmcgR3JvdXAgZXhwZWN0cyBhZGRp dGlvbmFsIG1lY2hhbmlzbXMgZm9yIGxpbmtpbmcgc3R5bGUKc2hlZXRzIHRvIFhN TCBkb2N1bWVudCB0byBiZSBkZWZpbmVkIGluIGEgZnV0dXJlIHNwZWNpZmljYXRp b24uPC9wPgoKPHA+VGhlIHVzZSBvZiBYTUwgcHJvY2Vzc2luZyBpbnN0cnVjdGlv bnMgaW4gdGhpcyBzcGVjaWZpY2F0aW9uIHNob3VsZApub3QgYmUgdGFrZW4gYXMg YSBwcmVjZWRlbnQuICBUaGUgVzNDIGRvZXMgbm90IGFudGljaXBhdGUgcmVjb21t ZW5kaW5nCnRoZSB1c2Ugb2YgcHJvY2Vzc2luZyBpbnN0cnVjdGlvbnMgaW4gYW55 IGZ1dHVyZSBzcGVjaWZpY2F0aW9uLiAgVGhlCjxhIGhyZWY9IiNyYXRpb25hbGUi PlJhdGlvbmFsZTwvYT4gZXhwbGFpbnMgd2h5IHRoZXkgd2VyZSB1c2VkIGluCnRo aXMgc3BlY2lmaWNhdGlvbi48L3A+Cgo8cD5UaGlzIGRvY3VtZW50IHdhcyBwcm9k dWNlZCBhcyBwYXJ0IG9mIHRoZSA8YSBocmVmPSJodHRwOi8vd3d3LnczLm9yZy9Y TUwvQWN0aXZpdHkiPlczQyBYTUwgQWN0aXZpdHk8L2E+LjwvcD4KCgo8aDI+Cjxh IG5hbWU9ImNvbnRlbnRzIj5UYWJsZSBvZiBjb250ZW50czwvYT4KPC9oMj4xIDxh IGhyZWY9IiNUaGUgeG1sLXN0eWxlc2hlZXQgcHJvY2Vzc2luZyBpbnN0cnVjdGlv biI+VGhlIHhtbC1zdHlsZXNoZWV0IHByb2Nlc3NpbmcgaW5zdHJ1Y3Rpb248L2E+ Cjxicj4KPGgzPkFwcGVuZGljZXM8L2gzPkEgPGEgaHJlZj0iI1JlZmVyZW5jZXMi PlJlZmVyZW5jZXM8L2E+Cjxicj5CIDxhIGhyZWY9IiNyYXRpb25hbGUiPlJhdGlv bmFsZTwvYT4KPGJyPgo8aHI+Cgo8aDI+CjxhIG5hbWU9IlRoZSB4bWwtc3R5bGVz aGVldCBwcm9jZXNzaW5nIGluc3RydWN0aW9uIj48L2E+MSBUaGUgPGNvZGU+eG1s LXN0eWxlc2hlZXQ8L2NvZGU+IHByb2Nlc3NpbmcgaW5zdHJ1Y3Rpb248L2gyPgoK PHA+U3R5bGUgU2hlZXRzIGNhbiBiZSBhc3NvY2lhdGVkIHdpdGggYW4gWE1MPGEg aHJlZj0iI1hNTCI+W1hNTDEwXTwvYT4KZG9jdW1lbnQgYnkgdXNpbmcgYSBwcm9j ZXNzaW5nIGluc3RydWN0aW9uIHdob3NlIHRhcmdldCBpcwo8Y29kZT54bWwtc3R5 bGVzaGVldDwvY29kZT4uICBUaGlzIHByb2Nlc3NpbmcgaW5zdHJ1Y3Rpb24gZm9s bG93cyB0aGUKYmVoYXZpb3VyIG9mIHRoZSBIVE1MIDQuMCA8Y29kZT4mbHQ7TElO SwpSRUw9InN0eWxlc2hlZXQiJmd0OzwvY29kZT48YSBocmVmPSIjSFRNTCI+W0hU TUw0MF08L2E+LjwvcD4KCjxwPlRoZSA8Y29kZT54bWwtc3R5bGVzaGVldDwvY29k ZT4gcHJvY2Vzc2luZyBpbnN0cnVjdGlvbiBpcyBwYXJzZWQgaW4KdGhlIHNhbWUg d2F5IGFzIGEgc3RhcnQtdGFnLCB3aXRoIHRoZSBleGNlcHRpb24gdGhhdCBlbnRp dGllcyBvdGhlcgp0aGFuIHByZWRlZmluZWQgZW50aXRpZXMgbXVzdCBub3QgYmUg cmVmZXJlbmNlZC48L3A+Cgo8cD5UaGUgZm9sbG93aW5nIGdyYW1tYXIgaXMgZ2l2 ZW4gdXNpbmcgdGhlIHNhbWUgbm90YXRpb24gYXMgdGhlCmdyYW1tYXIgaW4gdGhl IFhNTCBSZWNvbW1lbmRhdGlvbjxhIGhyZWY9IiNYTUwiPltYTUwxMF08L2E+LiAg U3ltYm9scyBpbiB0aGUKZ3JhbW1hciB0aGF0IGFyZSBub3QgZGVmaW5lZCBoZXJl IGFyZSBkZWZpbmVkIGluIHRoZSBYTUwKUmVjb21tZW5kYXRpb24uPC9wPgoKPGg1 PnhtbC1zdHlsZXNoZWV0IHByb2Nlc3NpbmcgaW5zdHJ1Y3Rpb248L2g1Pgo8dGFi bGUgY2xhc3M9InNjcmFwIj4KPHRib2R5Pgo8dHIgdmFsaWduPSJiYXNlbGluZSI+ Cjx0ZD4KPGEgbmFtZT0iTlQtU3R5bGVTaGVldFBJIj48L2E+WzFdJm5ic3A7Jm5i c3A7Jm5ic3A7PC90ZD4KPHRkPlN0eWxlU2hlZXRQSTwvdGQ+Cjx0ZD4mbmJzcDsm bmJzcDsmbmJzcDs6Oj0mbmJzcDsmbmJzcDsmbmJzcDs8L3RkPgo8dGQ+JyZsdDs/ eG1sLXN0eWxlc2hlZXQnICg8YSBocmVmPSJodHRwOi8vd3d3LnczLm9yZy9UUi9S RUMteG1sI05ULVMiPlM8L2E+IDxhIGhyZWY9IiNOVC1Qc2V1ZG9BdHQiPlBzZXVk b0F0dDwvYT4pKiA8YSBocmVmPSJodHRwOi8vd3d3LnczLm9yZy9UUi9SRUMteG1s I05ULVMiPlM8L2E+PyAnPyZndDsnPC90ZD4KPHRkPgo8L3RkPgo8L3RyPgo8dHIg dmFsaWduPSJiYXNlbGluZSI+Cjx0ZD4KPGEgbmFtZT0iTlQtUHNldWRvQXR0Ij48 L2E+WzJdJm5ic3A7Jm5ic3A7Jm5ic3A7PC90ZD4KPHRkPlBzZXVkb0F0dDwvdGQ+ Cjx0ZD4mbmJzcDsmbmJzcDsmbmJzcDs6Oj0mbmJzcDsmbmJzcDsmbmJzcDs8L3Rk Pgo8dGQ+CjxhIGhyZWY9Imh0dHA6Ly93d3cudzMub3JnL1RSL1JFQy14bWwjTlQt TmFtZSI+TmFtZTwvYT4gPGEgaHJlZj0iaHR0cDovL3d3dy53My5vcmcvVFIvUkVD LXhtbCNOVC1TIj5TPC9hPj8gJz0nIDxhIGhyZWY9Imh0dHA6Ly93d3cudzMub3Jn L1RSL1JFQy14bWwjTlQtUyI+UzwvYT4/IDxhIGhyZWY9IiNOVC1Qc2V1ZG9BdHRW YWx1ZSI+UHNldWRvQXR0VmFsdWU8L2E+CjwvdGQ+Cjx0ZD4KPC90ZD4KPC90cj4K PHRyIHZhbGlnbj0iYmFzZWxpbmUiPgo8dGQ+CjxhIG5hbWU9Ik5ULVBzZXVkb0F0 dFZhbHVlIj48L2E+WzNdJm5ic3A7Jm5ic3A7Jm5ic3A7PC90ZD4KPHRkPlBzZXVk b0F0dFZhbHVlPC90ZD4KPHRkPiZuYnNwOyZuYnNwOyZuYnNwOzo6PSZuYnNwOyZu YnNwOyZuYnNwOzwvdGQ+Cjx0ZD4oJyInIChbXiImbHQ7JmFtcDtdIHwgPGEgaHJl Zj0iaHR0cDovL3d3dy53My5vcmcvVFIvUkVDLXhtbCNOVC1DaGFyUmVmIj5DaGFy UmVmPC9hPiB8IDxhIGhyZWY9IiNOVC1QcmVkZWZFbnRpdHlSZWYiPlByZWRlZkVu dGl0eVJlZjwvYT4pKiAnIic8L3RkPgo8dGQ+CjwvdGQ+CjwvdHI+Cjx0ciB2YWxp Z249ImJhc2VsaW5lIj4KPHRkPgo8L3RkPgo8dGQ+CjwvdGQ+Cjx0ZD4KPC90ZD4K PHRkPnwgIiciIChbXicmbHQ7JmFtcDtdIHwgPGEgaHJlZj0iaHR0cDovL3d3dy53 My5vcmcvVFIvUkVDLXhtbCNOVC1DaGFyUmVmIj5DaGFyUmVmPC9hPiB8IDxhIGhy ZWY9IiNOVC1QcmVkZWZFbnRpdHlSZWYiPlByZWRlZkVudGl0eVJlZjwvYT4pKiAi JyIpPC90ZD4KPHRkPgo8L3RkPgo8L3RyPgo8dHIgdmFsaWduPSJiYXNlbGluZSI+ Cjx0ZD4KPC90ZD4KPHRkPgo8L3RkPgo8dGQ+CjwvdGQ+Cjx0ZD4tICg8YSBocmVm PSJodHRwOi8vd3d3LnczLm9yZy9UUi9SRUMteG1sI05ULUNoYXIiPkNoYXI8L2E+ KiAnPyZndDsnIDxhIGhyZWY9Imh0dHA6Ly93d3cudzMub3JnL1RSL1JFQy14bWwj TlQtQ2hhciI+Q2hhcjwvYT4qKTwvdGQ+Cjx0ZD4KPC90ZD4KPC90cj4KPHRyIHZh bGlnbj0iYmFzZWxpbmUiPgo8dGQ+CjxhIG5hbWU9Ik5ULVByZWRlZkVudGl0eVJl ZiI+PC9hPls0XSZuYnNwOyZuYnNwOyZuYnNwOzwvdGQ+Cjx0ZD5QcmVkZWZFbnRp dHlSZWY8L3RkPgo8dGQ+Jm5ic3A7Jm5ic3A7Jm5ic3A7Ojo9Jm5ic3A7Jm5ic3A7 Jm5ic3A7PC90ZD4KPHRkPicmYW1wO2FtcDsnIHwgJyZhbXA7bHQ7JyB8ICcmYW1w O2d0OycgfCAnJmFtcDtxdW90OycgfCAnJmFtcDthcG9zOyc8L3RkPgo8dGQ+Cjwv dGQ+CjwvdHI+CjwvdGJvZHk+CjwvdGFibGU+Cgo8cD5JbiA8YSBocmVmPSIjTlQt UHNldWRvQXR0VmFsdWUiPlBzZXVkb0F0dFZhbHVlPC9hPiwgYSA8YSBocmVmPSJo dHRwOi8vd3d3LnczLm9yZy9UUi9SRUMteG1sI05ULUNoYXJSZWYiPkNoYXJSZWY8 L2E+IG9yIGEgPGEgaHJlZj0iI05ULVByZWRlZkVudGl0eVJlZiI+UHJlZGVmRW50 aXR5UmVmPC9hPiBpcyBpbnRlcnByZXRlZCBpbiB0aGUKc2FtZSBtYW5uZXIgYXMg aW4gYSBub3JtYWwgWE1MIGF0dHJpYnV0ZSB2YWx1ZS4gIFRoZSBhY3R1YWwgdmFs dWUgb2YKdGhlIHBzZXVkby1hdHRyaWJ1dGUgaXMgdGhlIHZhbHVlIGFmdGVyIGVh Y2ggcmVmZXJlbmNlIGlzIHJlcGxhY2VkIGJ5CnRoZSBjaGFyYWN0ZXIgaXQgcmVm ZXJlbmNlcy4gIFRoaXMgcmVwbGFjZW1lbnQgaXMgbm90IHBlcmZvcm1lZAphdXRv bWF0aWNhbGx5IGJ5IGFuIFhNTCBwcm9jZXNzb3IuPC9wPgoKPHA+VGhlIDxjb2Rl PnhtbC1zdHlsZXNoZWV0PC9jb2RlPiBwcm9jZXNzaW5nIGluc3RydWN0aW9uIGlz IGFsbG93ZWQKb25seSBpbiB0aGUgcHJvbG9nIG9mIGFuIFhNTCBkb2N1bWVudC4g VGhlIHN5bnRheCBvZiBYTUwgY29uc3RyYWlucwp3aGVyZSBwcm9jZXNzaW5nIGlu c3RydWN0aW9ucyBhcmUgYWxsb3dlZCBpbiB0aGUgcHJvbG9nOyB0aGUKPGNvZGU+ eG1sLXN0eWxlc2hlZXQ8L2NvZGU+IHByb2Nlc3NpbmcgaW5zdHJ1Y3Rpb24gaXMg YWxsb3dlZCBhbnl3aGVyZQppbiB0aGUgcHJvbG9nIHRoYXQgbWVldHMgdGhlc2Ug Y29uc3RyYWludHMuPC9wPgoKPGJsb2NrcXVvdGU+CjxiPk5PVEU6IDwvYj5JZiB0 aGUgPGNvZGU+eG1sLXN0eWxlc2hlZXQ8L2NvZGU+IHByb2Nlc3NpbmcgaW5zdHJ1 Y3Rpb24Kb2NjdXJzIGluIHRoZSBleHRlcm5hbCBEVEQgc3Vic2V0IG9yIGluIGEg cGFyYW1ldGVyIGVudGl0eSwgaXQgaXMKcG9zc2libGUgdGhhdCBpdCBtYXkgbm90 IGJlIHByb2Nlc3NlZCBieSBhIG5vbi12YWxpZGF0aW5nIFhNTApwcm9jZXNzb3Ig KHNlZSA8YSBocmVmPSIjWE1MIj5bWE1MMTBdPC9hPikuPC9ibG9ja3F1b3RlPgoK PHA+VGhlIGZvbGxvd2luZyBwc2V1ZG8gYXR0cmlidXRlcyBhcmUgZGVmaW5lZDwv cD4KCjxwcmU+aHJlZiBDREFUQSAjUkVRVUlSRUQKdHlwZSBDREFUQSAjUkVRVUlS RUQKdGl0bGUgQ0RBVEEgI0lNUExJRUQKbWVkaWEgQ0RBVEEgI0lNUExJRUQKY2hh cnNldCBDREFUQSAjSU1QTElFRAphbHRlcm5hdGUgKHllc3xubykgIm5vIjwvcHJl PgoKPHA+VGhlIHNlbWFudGljcyBvZiB0aGUgcHNldWRvLWF0dHJpYnV0ZXMgYXJl IGV4YWN0bHkgYXMgd2l0aAo8Y29kZT4mbHQ7TElOSyBSRUw9InN0eWxlc2hlZXQi Jmd0OzwvY29kZT4gaW4gSFRNTCA0LjAsIHdpdGggdGhlCmV4Y2VwdGlvbiBvZiB0 aGUgPGNvZGU+YWx0ZXJuYXRlPC9jb2RlPiBwc2V1ZG8tYXR0cmlidXRlLiAgSWYK PGNvZGU+YWx0ZXJuYXRlPSJ5ZXMiPC9jb2RlPiBpcyBzcGVjaWZpZWQsIHRoZW4g dGhlIHByb2Nlc3NpbmcKaW5zdHJ1Y3Rpb24gaGFzIHRoZSBzZW1hbnRpY3Mgb2Yg PGNvZGU+Jmx0O0xJTksgUkVMPSJhbHRlcm5hdGUKc3R5bGVzaGVldCImZ3Q7PC9j b2RlPiBpbnN0ZWFkIG9mIDxjb2RlPiZsdDtMSU5LClJFTD0ic3R5bGVzaGVldCIm Z3Q7PC9jb2RlPi48L3A+Cgo8YmxvY2txdW90ZT4KPGI+Tk9URTogPC9iPlNpbmNl IHRoZSB2YWx1ZSBvZiB0aGUgPGNvZGU+aHJlZjwvY29kZT4gYXR0cmlidXRlIGlz IGEgVVJJCnJlZmVyZW5jZSwgaXQgbWF5IGJlIGEgcmVsYXRpdmUgVVJJIGFuZCBp dCBtYXkgY29udGFpbiBhIGZyYWdtZW50CmlkZW50aWZpZXIuIEluIHBhcnRpY3Vs YXIgdGhlIFVSSSByZWZlcmVuY2UgbWF5IGNvbnRhaW4gb25seSBhCmZyYWdtZW50 IGlkZW50aWZpZXIuICBTdWNoIGEgVVJJIHJlZmVyZW5jZSBpcyBhIHJlZmVyZW5j ZSB0byBhIHBhcnQgb2YKdGhlIGRvY3VtZW50IGNvbnRhaW5pbmcgdGhlIDxjb2Rl PnhtbC1zdHlsZXNoZWV0PC9jb2RlPiBwcm9jZXNzaW5nCmluc3RydWN0aW9uIChz ZWUgPGEgaHJlZj0iI1JGQzIzOTYiPltSRkMyMzk2XTwvYT4pLiBUaGUgY29uc2Vx dWVuY2UgaXMgdGhhdCB0aGUKPGNvZGU+eG1sLXN0eWxlc2hlZXQ8L2NvZGU+IHBy b2Nlc3NpbmcgaW5zdHJ1Y3Rpb24gYWxsb3dzIHN0eWxlIHNoZWV0cwp0byBiZSBl bWJlZGRlZCBpbiB0aGUgc2FtZSBkb2N1bWVudCBhcyB0aGUgPGNvZGU+eG1sLXN0 eWxlc2hlZXQ8L2NvZGU+CnByb2Nlc3NpbmcgaW5zdHJ1Y3Rpb24uPC9ibG9ja3F1 b3RlPgoKPHA+SW4gc29tZSBjYXNlcywgc3R5bGUgc2hlZXRzIG1heSBiZSBsaW5r ZWQgd2l0aCBhbiBYTUwgZG9jdW1lbnQgYnkKbWVhbnMgZXh0ZXJuYWwgdG8gdGhl IGRvY3VtZW50LiBGb3IgZXhhbXBsZSwgZWFybGllciB2ZXJzaW9ucyBvZiBIVFRQ CjxhIGhyZWY9IiNSRkMyMDY4Ij5bUkZDMjA2OF08L2E+IChzZWN0aW9uIDE5LjYu Mi40KSBhbGxvd2VkIHN0eWxlIHNoZWV0cyB0byBiZQphc3NvY2lhdGVkIHdpdGgg WE1MIGRvY3VtZW50cyBieSBtZWFucyBvZiB0aGUgPGNvZGU+TGluazwvY29kZT4K aGVhZGVyLiAgQW55IGxpbmtzIHRvIHN0eWxlIHNoZWV0cyB0aGF0IGFyZSBzcGVj aWZpZWQgZXh0ZXJuYWxseSB0byB0aGUKZG9jdW1lbnQgYXJlIGNvbnNpZGVyZWQg dG8gb2NjdXIgYmVmb3JlIHRoZSBsaW5rcyBzcGVjaWZpZWQgYnkgdGhlCjxjb2Rl PnhtbC1zdHlsZXNoZWV0PC9jb2RlPiBwcm9jZXNzaW5nIGluc3RydWN0aW9ucy4g IFRoaXMgaXMgdGhlIHNhbWUKYXMgaW4gSFRNTCA0LjAgKHNlZSA8YSBocmVmPSJo dHRwOi8vd3d3LnczLm9yZy9UUi9SRUMtaHRtbDQwL3ByZXNlbnQvc3R5bGVzLmh0 bWwjaC0xNC42Ij5zZWN0aW9uCjE0LjY8L2E+KS48L3A+Cgo8cD5IZXJlIGFyZSBz b21lIGV4YW1wbGVzIGZyb20gSFRNTCA0LjAgd2l0aCB0aGUgY29ycmVzcG9uZGlu Zwpwcm9jZXNzaW5nIGluc3RydWN0aW9uOjwvcD4KCjxwcmU+Jmx0O0xJTksgaHJl Zj0ibXlzdHlsZS5jc3MiIHJlbD0ic3R5bGUgc2hlZXQiIHR5cGU9InRleHQvY3Nz IiZndDsKJmx0Oz94bWwtc3R5bGVzaGVldCBocmVmPSJteXN0eWxlLmNzcyIgdHlw ZT0idGV4dC9jc3MiPyZndDsKCiZsdDtMSU5LIGhyZWY9Im15c3R5bGUuY3NzIiB0 aXRsZT0iQ29tcGFjdCIgcmVsPSJzdHlsZXNoZWV0Igp0eXBlPSJ0ZXh0L2NzcyIm Z3Q7CiZsdDs/eG1sLXN0eWxlc2hlZXQgaHJlZj0ibXlzdHlsZS5jc3MiIHRpdGxl PSJDb21wYWN0IiB0eXBlPSJ0ZXh0L2NzcyI/Jmd0OwoKJmx0O0xJTksgaHJlZj0i bXlzdHlsZS5jc3MiIHRpdGxlPSJNZWRpdW0iIHJlbD0iYWx0ZXJuYXRlIHN0eWxl c2hlZXQiCnR5cGU9InRleHQvY3NzIiZndDsKJmx0Oz94bWwtc3R5bGVzaGVldCBh bHRlcm5hdGU9InllcyIgaHJlZj0ibXlzdHlsZS5jc3MiIHRpdGxlPSJNZWRpdW0i CnR5cGU9InRleHQvY3NzIj8mZ3Q7PC9wcmU+Cgo8cD5NdWx0aXBsZSA8Y29kZT54 bWwtc3R5bGVzaGVldDwvY29kZT4gcHJvY2Vzc2luZyBpbnN0cnVjdGlvbnMgYXJl CmFsc28gYWxsb3dlZCB3aXRoIGV4YWN0bHkgdGhlIHNhbWUgc2VtYW50aWNzIGFz IHdpdGggPGNvZGU+TElOSwpSRUw9InN0eWxlc2hlZXQiPC9jb2RlPi4gRm9yIGV4 YW1wbGUsPC9wPgoKPHByZT4mbHQ7TElOSyByZWw9ImFsdGVybmF0ZSBzdHlsZXNo ZWV0IiB0aXRsZT0iY29tcGFjdCIgaHJlZj0ic21hbGwtYmFzZS5jc3MiCnR5cGU9 InRleHQvY3NzIiZndDsKJmx0O0xJTksgcmVsPSJhbHRlcm5hdGUgc3R5bGVzaGVl dCIgdGl0bGU9ImNvbXBhY3QiIGhyZWY9InNtYWxsLWV4dHJhcy5jc3MiCnR5cGU9 InRleHQvY3NzIiZndDsKJmx0O0xJTksgcmVsPSJhbHRlcm5hdGUgc3R5bGVzaGVl dCIgdGl0bGU9ImJpZyBwcmludCIgaHJlZj0iYmlncHJpbnQuY3NzIgp0eXBlPSJ0 ZXh0L2NzcyImZ3Q7CiZsdDtMSU5LIHJlbD0ic3R5bGVzaGVldCIgaHJlZj0iY29t bW9uLmNzcyIgdHlwZT0idGV4dC9jc3MiJmd0OzwvcHJlPgoKPHA+d291bGQgYmUg ZXF1aXZhbGVudCB0bzo8L3A+Cgo8cHJlPiZsdDs/eG1sLXN0eWxlc2hlZXQgYWx0 ZXJuYXRlPSJ5ZXMiIHRpdGxlPSJjb21wYWN0IiBocmVmPSJzbWFsbC1iYXNlLmNz cyIKdHlwZT0idGV4dC9jc3MiPyZndDsKJmx0Oz94bWwtc3R5bGVzaGVldCBhbHRl cm5hdGU9InllcyIgdGl0bGU9ImNvbXBhY3QiIGhyZWY9InNtYWxsLWV4dHJhcy5j c3MiCnR5cGU9InRleHQvY3NzIj8mZ3Q7CiZsdDs/eG1sLXN0eWxlc2hlZXQgYWx0 ZXJuYXRlPSJ5ZXMiIHRpdGxlPSJiaWcgcHJpbnQiIGhyZWY9ImJpZ3ByaW50LmNz cyIKdHlwZT0idGV4dC9jc3MiPyZndDsKJmx0Oz94bWwtc3R5bGVzaGVldCBocmVm PSJjb21tb24uY3NzIiB0eXBlPSJ0ZXh0L2NzcyI/Jmd0OzwvcHJlPgoKCgo8aHIg dGl0bGU9IlNlcGFyYXRvciBmcm9tIGZvb3RlciI+Cgo8aDI+CjxhIG5hbWU9IlJl ZmVyZW5jZXMiPjwvYT5BIFJlZmVyZW5jZXM8L2gyPgoKPGRsPgoKPGR0Pgo8YSBu YW1lPSJIVE1MIj5IVE1MNDA8L2E+CjwvZHQ+CjxkZD5Xb3JsZCBXaWRlIFdlYgpD b25zb3J0aXVtLiA8aT5IVE1MIDQuMCBTcGVjaWZpY2F0aW9uLjwvaT4gVzNDIFJl Y29tbWVuZGF0aW9uLiBTZWUKPGEgaHJlZj0iaHR0cDovL3d3dy53My5vcmcvVFIv UkVDLWh0bWw0MCI+aHR0cDovL3d3dy53My5vcmcvVFIvUkVDLWh0bWw0MDwvYT4K PC9kZD4KCjxkdD4KPGEgbmFtZT0iUkZDMjA2OCI+UkZDMjA2ODwvYT4KPC9kdD4K PGRkPlIuIEZpZWxkaW5nLCBKLiBHZXR0eXMsIEouIE1vZ3VsLApILiBGcnlzdHlr IE5pZWxzZW4sIGFuZCBULiBCZXJuZXJzLUxlZS4gIDxpPkh5cGVydGV4dCBUcmFu c2ZlcgpQcm90b2NvbCAtLSBIVFRQLzEuMS48L2k+LiBJRVRGIFJGQyAyMDY4LiBT ZWUgPGEgaHJlZj0iaHR0cDovL3d3dy5pZXRmLm9yZy9yZmMvcmZjMjA2OC50eHQi Pmh0dHA6Ly93d3cuaWV0Zi5vcmcvcmZjL3JmYzIwNjgudHh0PC9hPi48L2RkPgoK PGR0Pgo8YSBuYW1lPSJSRkMyMzk2Ij5SRkMyMzk2PC9hPgo8L2R0Pgo8ZGQ+VC4g QmVybmVycy1MZWUsIFIuIEZpZWxkaW5nLCBhbmQKTC4gTWFzaW50ZXIuICA8aT5V bmlmb3JtIFJlc291cmNlIElkZW50aWZpZXJzIChVUkkpOiBHZW5lcmljClN5bnRh eDwvaT4uIElFVEYgUkZDIDIzOTYuIFNlZSA8YSBocmVmPSJodHRwOi8vd3d3Lmll dGYub3JnL3JmYy9yZmMyMzk2LnR4dCI+aHR0cDovL3d3dy5pZXRmLm9yZy9yZmMv cmZjMjM5Ni50eHQ8L2E+LjwvZGQ+Cgo8ZHQ+CjxhIG5hbWU9IlhNTCI+WE1MMTA8 L2E+CjwvZHQ+CjxkZD5Xb3JsZCBXaWRlIFdlYiBDb25zb3J0aXVtLiA8aT5FeHRl bnNpYmxlCk1hcmt1cCBMYW5ndWFnZSAoWE1MKSAxLjAuPC9pPiBXM0MgUmVjb21t ZW5kYXRpb24uIFNlZSA8YSBocmVmPSJodHRwOi8vd3d3LnczLm9yZy9UUi8xOTk4 L1JFQy14bWwtMTk5ODAyMTAiPmh0dHA6Ly93d3cudzMub3JnL1RSLzE5OTgvUkVD LXhtbC0xOTk4MDIxMDwvYT4KPC9kZD4KCjwvZGw+CgoKCgo8aDI+CjxhIG5hbWU9 InJhdGlvbmFsZSI+PC9hPkIgUmF0aW9uYWxlPC9oMj4KCjxwPlRoZXJlIHdhcyBh biB1cmdlbnQgcmVxdWlyZW1lbnQgZm9yIGEgc3BlY2lmaWNhdGlvbiBmb3Igc3R5 bGUgc2hlZXQKbGlua2luZyB0aGF0IGNvdWxkIGJlIGNvbXBsZXRlZCBpbiB0aW1l IGZvciB0aGUgbmV4dCByZWxlYXNlIGZyb20KbWFqb3IgYnJvd3NlciB2ZW5kb3Jz LiAgT25seSBieSBjaG9vc2luZyBhIHNpbXBsZSBtZWNoYW5pc20gY2xvc2VseQpi YXNlZCBvbiBhIHByb3ZlbiBleGlzdGluZyBtZWNoYW5pc20gY291bGQgdGhlIHNw ZWNpZmljYXRpb24gYmUKY29tcGxldGVkIGluIHRpbWUgdG8gbWVldCB0aGlzIHJl cXVpcmVtZW50LjwvcD4KCjxwPlVzZSBvZiBhIHByb2Nlc3NpbmcgaW5zdHJ1Y3Rp b24gYXZvaWRzIHBvbGx1dGluZyB0aGUgbWFpbiBkb2N1bWVudApzdHJ1Y3R1cmUg d2l0aCBhcHBsaWNhdGlvbiBzcGVjaWZpYyBwcm9jZXNzaW5nIGluZm9ybWF0aW9u LjwvcD4KCjxwPlRoZSBtZWNoYW5pc20gY2hvc2VuIGZvciB0aGlzIHZlcnNpb24g b2YgdGhlIHNwZWNpZmljYXRpb24gaXMgbm90IGEKY29uc3RyYWludCBvbiB0aGUg YWRkaXRpb25hbCBtZWNoYW5pc21zIHBsYW5uZWQgZm9yIGZ1dHVyZSB2ZXJzaW9u cy4KVGhlcmUgaXMgbm8gZXhwZWN0YXRpb24gdGhhdCB0aGVzZSB3aWxsIHVzZSBw cm9jZXNzaW5nIGluc3RydWN0aW9uczsKaW5kZWVkIHRoZXkgbWF5IG5vdCBpbmNs dWRlIHRoZSBsaW5raW5nIGluZm9ybWF0aW9uIGluIHRoZSBzb3VyY2UKZG9jdW1l bnQuPC9wPgoKCgoKPC9ib2R5Pgo8L2h0bWw+Cg== 1.1 xml-security/data/ie/baltimore/merlin-examples/merlin-xmldsig-twenty-three/certs/badb.crt <<Binary file>> 1.1 xml-security/data/ie/baltimore/merlin-examples/merlin-xmldsig-twenty-three/certs/balor.crt <<Binary file>> 1.1 xml-security/data/ie/baltimore/merlin-examples/merlin-xmldsig-twenty-three/certs/bres.crt <<Binary file>> 1.1 xml-security/data/ie/baltimore/merlin-examples/merlin-xmldsig-twenty-three/certs/ca.crt <<Binary file>> 1.1 xml-security/data/ie/baltimore/merlin-examples/merlin-xmldsig-twenty-three/certs/lugh.crt <<Binary file>> 1.1 xml-security/data/ie/baltimore/merlin-examples/merlin-xmldsig-twenty-three/certs/macha.crt <<Binary file>> 1.1 xml-security/data/ie/baltimore/merlin-examples/merlin-xmldsig-twenty-three/certs/morigu.crt <<Binary file>> 1.1 xml-security/data/ie/baltimore/merlin-examples/merlin-xmldsig-twenty-three/certs/nemain.crt <<Binary file>> From securitydiazchelsea@example.net Tue May 18 11:49:24 2004 Return-Path: <securitydiazchelsea@example.net> Delivered-To: diazchelsea@example.net Received: (qmail 54832 invoked from network); 18 May 2004 11:49:24 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (83.161.120.155) by minotaur-2.apache.org with SMTP; 18 May 2004 11:49:24 -0000 Received: (qmail 66706 invoked by uid 500); 18 May 2004 11:49:28 -0000 Delivered-To: diazchelsea@example.net Received: (qmail 66650 invoked by uid 500); 18 May 2004 11:49:26 -0000 Mailing-List: contact diazchelsea@example.net; run by ezmlm Precedence: bulk X-No-Archive: yes List-Post: <mailto:diazchelsea@example.net> List-Help: <mailto:diazchelsea@example.net> List-Unsubscribe: <mailto:diazchelsea@example.net> List-Subscribe: <mailto:diazchelsea@example.net> Delivered-To: mailing list diazchelsea@example.net Received: (qmail 66624 invoked by uid 98); 18 May 2004 11:49:26 -0000 X-Qmail-Scanner-Mail-From: diazchelsea@example.net via hermes.apache.org X-Qmail-Scanner: 1.20 (Clear:RC:0(83.161.120.155):. Processed in 0.033435 secs) Date: 18 May 2004 11:49:22 -0000 Message-ID: <diazchelsea@example.net> From: diazchelsea@example.net To: diazchelsea@example.net Subject: cvs commit: xml-security build.xml X-Spam-Rating: hermes.apache.org 1.6.2 0/1000/N X-Spam-Rating: minotaur-2.apache.org 1.6.2 0/1000/N
{'source': 'Apache Software Foundation Public Mail Archives'}