[Xml-compile] Question on Signing Elements via XML::Compile::WSS::Signature

[Jacob Petrie]

Hi Mark,

Thanks for your quick response. I've sent you a note off list with the attached WSDL and sample request. Let me know your thoughts. In the meantime will try to hack something together if possible here. 

Thanks again for looking at this!

Jake

On Jul 30, 2013, at 3:29, Mark Overmeer <secretaris at nluug.nl> wrote:

> * Jacob Petrie (jake at silverweb.com) [130730 04:17]:
>> Sorry if this is a really dumb question, but I haven't been able to
>> find the answer by searching.
> 
> Only unasked questions are dumb ;-)
> 
>> First, very excited about using XML::Compile::WSS as we are already
>> ahead of where we were before in trying to get WSS headers and signatures
>> in place.
> 
> Implementing WSS is prety hard: the spec allows for so much freedom and
> there are zillions of extensions, per company at least one :-(
> 
>> The WSDL of the service we are calling as a client requires that we
>> sign with 2 signatures, the first with 6 elements signed (5 of which are
>> in the header, including the tiemstamp, and the other is the body) and
>> then a second signature on the first signature element (<ds:Signature>).
> 
> Quitea unique question!  A signature on the signature... who has invented
> that?  can you send me a real example of this message (probably best
> off-list)... I may need to add something to the interface.
> 
>> Additionally, we must include an EncryptedKey element within the header
>> (xmlenc). Is that something I can do with XML::Compile::WSS or do I need
>> to generate that myself?
> 
> On the moment, only one of the ways to include the key is implemented:
> which seems to be used in bank transactions.  I need real-life examples
> to get other extensions to work.  Please show me.
> -- 
> Regards,
>               MarkOv
> 
> ------------------------------------------------------------------------
>       Mark Overmeer MSc                                MARKOV Solutions
>       Mark at Overmeer.net                          solutions at overmeer.net
> http://Mark.Overmeer.net                   http://solutions.overmeer.net
>