[XML-DEV Mailing List Archive Home] [By Thread] [By Date] [Recent Entries] [Reply To This Message]

Re: XML Digital Signature

• To: Roshan Mani <roshanmani@s...>
• Subject: Re: XML Digital Signature
• From: Farrukh Najmi <Farrukh.Najmi@S...>
• Date: Wed, 29 Jun 2005 12:15:09 -0400
• Cc: xml-dev@l...
• In-reply-to: <iss.cc046fb.59f1.42c22b5d.ab09c.9b@r...>
• References: <iss.cc046fb.59f1.42c22b5d.ab09c.9b@r...>
• User-agent: Mozilla Thunderbird 0.8 (X11/20040913)

Roshan Mani wrote:

>Hi,
>
>Has anyone on this list worked on XML and Digital Signatures? I have a team
>that's doing some work on this area using the MS XML toolkit and we've run
>into a wall with the way XML handles Private Key requests for creating a
>signature using a Crypto USB Token..
>
>If anyone on this forum has some ideas on this topic, let me know and I can
>give more details on what we're doing and the exact nature of our problem..
>Would appreciate all the help we can get on this!
>
>  
>
It seems I live and breath XML Digital Signatures these days in my work 
on freebXML Registry open source project :-) :

    http://ebxmlrr.sourceforge.net/tmp/ebXMLRegistryLinks.html

However, all that I do is within the Java Platform and specifically J2EE 
and Java Web Services.

My experience with Java platform and XML DSIG is decidedly good. There 
is a standard Java API for XML Digital Signatures:

    http://www.jcp.org/jsr/detail/105.jsp

The above API is now an approved JCP standard.

It has several implementations but they should all be the same API. I 
used the one from JWSDP 1.6:

    http://java.sun.com/webservices/downloads/webservicespack.html

which is a free download.

I also used the XML Web Services Security (XWSS) API provided in JWSDP 
1.6 which provided
me with out of box support for OASIS Web Services Security standard:

    http://www.oasis-open.org/news/oasis_news_04_19_04.php

and the XWSS implementation has been through numerous interop tests and 
I believe also supports
WS-I Basic Security Profile 1.0.

And I never hit a brick wall any where.

So, if you want a totally standards based approach to developing XML 
Digital Signature based apps
then you may want to consider switching to Java platform.

I would be glad to share experience if you are open to  Java platform for
your project.

HTH. Best of luck in your implementation.

-- 
Regards,
Farrukh Najmi

Coming to Java ONE 2005? If so check out Sun's Service Registry at Booth #802 in the Java ONE Pavillion.

Sun's Service Registry Web Site:
http://www.sun.com/products/soa/registry/

Press Release:
http://www.sun.com/smi/Press/sunflash/2005-06/sunflash.20050615.1.html

begin:vcard
fn:Farrukh Najmi
n:Najmi;Farrukh
email;internet:farrukh.najmi@s...
tel;work:781-442-9017
url:http://ebxmlrr.sourceforge.net/tmp/DSCN0278.JPG
version:2.1
end:vcard

• Follow-Ups:
  • Re: XML Digital Signature
    • From: "Thi Nguyen" <thichaunguyen@h...>

• Prev by Date: RE: Is XLink Dead? Apparently Not
• Next by Date: Re: XML Digital Signature
• Previous by thread: RE: XML Digital Signature
• Next by thread: Re: XML Digital Signature
• Index(es):
  • Date
  • Thread