Reputation: 102
Is there any way to sign Xml document with X.509? I've been looking all over internet but it seems that signing xml document with x.509 is not possible?.
<Signaturexmlns="http://www.w3.org/2000/09/xmldsig#">
<SignedInfo>
<CanonicalizationMethodAlgorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
<SignatureMethodAlgorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
<ReferenceURI="#nana">
<Transforms>
<TransformAlgorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/>
<TransformAlgorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
</Transforms>
<DigestMethodAlgorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>
<DigestValue>VItfxY/A1BITZ/BuWpsGd9gKix4=</DigestValue>
</Reference>
</SignedInfo>
<SignatureValue>0+5U........ many numbers and character.....
</SignatureValue>
<KeyInfo>
<X509Data>
<X509Certificate>MIIEyDCCA7CgAwIBAgIEPssQ2TANBgkqhkiG9w0BAQUFADArMQswCQYDVQQGEwJI
UjENMAsGA1UEChMERklOQTENMAsGA1UECxMEREVNTzAeFw0xMjA5MjcxMDQ5MThaFw0xNDA5Mjc
xMTE5MThaMFkxCGjB623/kdW
.......
</X509Certificate>
<X509IssuerSerial>
<X509IssuerName>blablabla</X509IssuerName>
<X509SerialNumber>1054324313</X509SerialNumber>
</X509IssuerSerial>
</X509Data>
</KeyInfo>
</Signature>
Upvotes: 1
Views: 1533
Reputation: 46080
You can use Java edition of our SecureBlackbox product (XMLBlackbox package) for full scope of XML signing operations.
Also you can find this question useful. In that question signature validation (not signing) is discussed, but maybe you can make use of that suggestions as well.
Upvotes: 2