[SANTUARIO-328] Streaming Signature Validation RSA test-case not working

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: Java 2.0.0
• Component/s: Java
• Security Level: Public (Public issues, viewable by everyone)
• Assignee: Marc Giger
• Reporter: Colm O hEigeartaigh
• Created: 16/Jul/12 14:10
• Updated: 01/May/14 14:18
• Resolved: 17/Jul/12 19:26

Description

A Streaming Signature Validation RSA test-case is not working. See the first @Ignore'd test here:

http://svn.apache.org/viewvc/santuario/xml-security-java/trunk/src/test/java/org/apache/xml/security/test/stax/signature/RSASecurityTest.java?view=markup

I get the following error:

ests in error:
test_enveloping(org.apache.xml.security.test.stax.signature.RSASecurityTest): org.apache.xml.security.stax.ext.XMLSecurityException: The signature or decryption was invalid (Digest verification failed for URI #envelopedData)

At a guess, the namespace declarations in the reference are not being handled correctly:

<dsig:Object Id="envelopedData" xmlns="" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"><FOO xmlns="http://www.foo.org/foo">
foo
</FOO></dsig:Object>

Colm.