Bug 48368

Summary: Digest Value of References inside Manifest - calculation order problem
Product: Security - Now in JIRA Reporter: sean.mullan
Component: SignatureAssignee: XML Security Developers Mailing List <security-dev>
Status: RESOLVED FIXED    
Severity: normal    
Priority: P2    
Version: Java 1.4.2   
Target Milestone: ---   
Hardware: All   
OS: All   

Description sean.mullan 2009-12-10 07:33:23 UTC
Digest values of References inside Manifest (in xml Object) are calculated after the digest values of References in SignedInfo are calculated, which causes signature verification failure.

See http://bugs.sun.com/bugdatabase/view_bug.do?bug_id=6867348 for more info.
Comment 1 sean.mullan 2009-12-10 07:39:15 UTC
Fixed in HEAD, will be in v1.4.4.