[SANTUARIO-509] XMLSignature with a specified security Provider

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: Java 2.0.10, Java 2.1.4
• Fix Version/s: Java 2.2.0
• Component/s: Java
• Assignee: Colm O hEigeartaigh
• Reporter: Giedrius Noreikis
• Created: 15/Aug/19 13:14
• Updated: 04/Jun/20 06:32
• Resolved: 02/Sep/19 09:56

Description

Currently, it is not possible to construct and then sign or verify instances of org.apache.xml.security.signature.XMLSignature with a specified security Provider. The only way to use a custom Provider is to register it in the provider list and then specify its name in org.apache.xml.security.algorithms.JCEMapper, which is inconvenient, may fail because of security permissions, and creates problems in application servers where the same JVM is used by several applications.

The proposal is to add constructors to XMLSignature with Provider as a parameter, like in java.security.Signature.getInstance().