Home | Contact Us | FAQ | Search & Site Map | Link to Us
Sign In | Join | Other 45 Sites in Network
HomeAnnouncementsFree MagazinesWhite PapersSubmit Content
Discussion GroupsASP.NETWindows FormsLanguages.NET FrameworkVisual Studio.NET
Articles.NET FrameworkASP.NETToolsWindows Forms
.NET DirectoryOpen Source ProjectsUser GroupsWeb Resources
Related Topics
Visual Basic 6SQL ServerMS AccessOther DB ProductsMS Server ProductsMore Topics ...

.NET Forum / ASP.NET / Web Services / December 2005

Tip: Looking for answers? Try searching our database.

Signature Block in the signed message..

Thread view: 
Enable EMail Alerts  Start New Thread
Thread rating: 
SUVANAN - 01 Dec 2005 19:44 GMT
Hi We are generating a Signed and Encrypted message:

There are 2 signature blocks
1. Signing the Timestamp and Body
2. The other one is signing the above Signature Element

How can we turn off the second one.

Thanks
Suvanan

Here is the part of the message:

<Signature Id="Sig-dbb1bfcf-0ea7-4d0a-a691-05fd33ec23bf"
xmlns="http://www.w3.org/2000/09/xmldsig#">
              <SignedInfo>
                 <ds:CanonicalizationMethod
Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"
xmlns:ds="http://www.w3.org/2000/09/xmldsig#" />
                 <SignatureMethod
Algorithm="http://www.w3.org/2000/09/xmldsig#hmac-sha1" />
                 <Reference
URI="#Timestamp-752f3f0e-45f6-4217-91b5-0b3ee9b8e550">
                    <Transforms>
                       <Transform
Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" />
                    </Transforms>
                    <DigestMethod
Algorithm="http://www.w3.org/2000/09/xmldsig#sha1" />
                    <DigestValue>IpSU9DGKcinh22G+H6AaUDVVw3M=</DigestValue>
                 </Reference>
                 <Reference URI="#Id-8d50e426-58a8-4b16-b903-c8c708d6e24d">
                    <Transforms>
                       <Transform
Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" />
                    </Transforms>
                    <DigestMethod
Algorithm="http://www.w3.org/2000/09/xmldsig#sha1" />
                    <DigestValue>EAyHgE37LiXLomLa1um3N/E9eyo=</DigestValue>
                 </Reference>
              </SignedInfo>
              <SignatureValue>WH7zOiE+qnhBBhsBG5yKPqalvTo=</SignatureValue>
              <KeyInfo>
                 <wsse:SecurityTokenReference>
                    <wsse:Reference
URI="#SecurityToken-7ef7c130-eaed-4d40-a42b-5b0028a20201"
ValueType="http://docs.oasis-open.org/wss/oasis-wss-soap-message-security-1.1#EncryptedKey" />
                 </wsse:SecurityTokenReference>
              </KeyInfo>
           </Signature>
           <Signature xmlns="http://www.w3.org/2000/09/xmldsig#">
              <SignedInfo>
                 <ds:CanonicalizationMethod
Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"
xmlns:ds="http://www.w3.org/2000/09/xmldsig#" />
                 <SignatureMethod
Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1" />
                 <Reference URI="#Sig-dbb1bfcf-0ea7-4d0a-a691-05fd33ec23bf">
                    <Transforms>
                       <Transform
Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" />
                    </Transforms>
                    <DigestMethod
Algorithm="http://www.w3.org/2000/09/xmldsig#sha1" />
                    <DigestValue>s7Lvf/kzM0KJYDp6Xg9L4NIXoP4=</DigestValue>
                 </Reference>
              </SignedInfo>
             
<SignatureValue>Hv45BxrQgfUsf0Fa+XdOhjWdBt2kQtfM/T1nW4EiClaC5r5VZAcwIyjjyVIN74DYlmZI5rONHEV/lrwa0oaoVUZHE5E+h2r3eHpAj9MUTpAgesYfer649BfetUqd1YBzCaxx9dsQCKxxsBVT+tLsZUEtX41ZAhBwp9gLXBiB4f0=</SignatureValue>
              <KeyInfo>
                 <wsse:SecurityTokenReference>
                    <wsse:Reference
URI="#SecurityToken-fffe7139-bfeb-41bf-84fd-a24826b3697d"
ValueType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-x509-token-profile-1.0#X509v3" />
                 </wsse:SecurityTokenReference>
              </KeyInfo>
           </Signature>
Signature

SUVANAN DUTTA

Pablo Cibraro - 02 Dec 2005 14:06 GMT
Hi Suvanan,
Are you using WSE 3.0 ?.
The mutualCertificate11Security assertion in WSE 3.0 creates two signatures
by default and you can't avoid that behavior. (The second signature is
called "Endorsed signature").
If you want one signature, then you have to use the
mutualCertificate10Security assertion or create a custom assertion.

Regards,
Pablo Cibraro
http://weblogs.asp.net/cibrax
http://www.lagash.com

> Hi We are generating a Signed and Encrypted message:
>
[quoted text clipped - 81 lines]
>               </KeyInfo>
>            </Signature>

Free Magazines

Get these publications absolutely FREE for up to 12 months. There are no hidden fees and no obligation. Simply choose a title, complete the application form and submit it. Read more ...

Oracle MagazineNetwork ComputingComputer WorldBio-IT WorldeWeekInformation WeekInfosecurity
 
Sign In
Join
My Latest Posts
My Monitored Threads
My Blog
My Photo Gallery
My Profile
My Homepage

Start New Thread
Enable EMail Alerts
Rate this Thread



©2008 Advenet LLC   Privacy Policy - Terms of Use
This website includes both content owned or controlled by Advenet as well as content owned or controlled by third parties.