Plug-in til XML signering

dotnet?

Signing XML Files
The .NET Framework provides the System.Security.Cryptography.XML namespace, which allows you sign XML. Signing XML is important when you want to verify that the XML originates from a certain source. For example, if you are using a stock quote service that uses XML, you can verify the source of the XML if it is signed.

The classes in this namespace follow the World Wide Web Consortium recommendation, "XML-Signature Syntax and Processing", described at www.w3.org.


;)

c# kode (kan evt. konverteres til java, hvis java også har noget kryptering (og det er der vel))

Example
The following example demonstrates how to generate an enveloping XML signature.

using System;
using System.IO;
using System.Security.Cryptography;
using System.Security.Cryptography.Xml;
using System.Xml;


public class XMLdsigsample1 {

static void Main(String[] args)
{
    // Create example data to sign.
    XmlDocument document = new XmlDocument();
    XmlNode  node = document.CreateNode(XmlNodeType.Element, "", "MyElement", "samples");
    node.InnerText = "This is some text";
    document.AppendChild(node);
    Console.Error.WriteLine("Data to sign:\n" + document.OuterXml + "\n");

    // Create the SignedXml message.
    SignedXml signedXml = new SignedXml();
    RSA key = RSA.Create();
    signedXml.SigningKey = key;

    // Create a data object to hold the data to sign.
    DataObject dataObject = new DataObject();
    dataObject.Data = document.ChildNodes;
    dataObject.Id = "MyObjectId";

    // Add the data object to the signature.
    signedXml.AddObject(dataObject);

    // Create a reference to be able to package everything into the
    // message.
    Reference reference = new Reference();
    reference.Uri = "#MyObjectId";

    // Add it to the message.
    signedXml.AddReference(reference);

    // Add a KeyInfo.
    KeyInfo keyInfo = new KeyInfo();
    keyInfo.AddClause(new RSAKeyValue(key));
    signedXml.KeyInfo = keyInfo;

    // Compute the signature.
    signedXml.ComputeSignature();

    // Get the XML representation of the signature.
    XmlElement xmlSignature = signedXml.GetXml();
    Console.WriteLine(xmlSignature.OuterXml);
}

}

The following example demonstrates how to check an XML signature.

using System;
using System.Security.Cryptography;
using System.Security.Cryptography.Xml;
using System.IO;
using System.Xml;

public class Verify {

    public static void Main(String[] args)
    {

        Console.WriteLine("Verifying " + args[0] + "...");

      // Create a SignedXml.
        SignedXml signedXml = new SignedXml();

        // Load the XML.
        XmlDocument xmlDocument = new XmlDocument();
        xmlDocument.PreserveWhitespace = true;
        xmlDocument.Load(new XmlTextReader(args[0]));

        XmlNodeList nodeList = xmlDocument.GetElementsByTagName("Signature");
        signedXml.LoadXml((XmlElement)nodeList[0]);

        if (signedXml.CheckSignature()) {
            Console.WriteLine("Signature check OK");
        } else {
            Console.WriteLine("Signature check FAILED");
        }

    }
}

?

Hej a1
Jeg har ikke haft tid til at oversætte din .net løsning til java, men jeg er enig i, at det må kunne lade sig gøre.

Jeg har på anden vis fundet http://phaos.com/products/category/xml.html
Entrust TruePass (som jeg kender) er del af en større produktportefølge, og VeriSign havde en activeX control (og det måtte man ikke bruge til den ønskede løsning).

Hej A1,
vi deler i porten.
Din udmærkede kode vil sikkert kunne hjælpe nogle andre.
mvh Anne