XML Digital Signature interoperability Issue between DataPower's XS40 and .NET Framework 1.1 and WSE 1.0SP1

From: Guangxi Wu (gwu_at_ch2m.com)
Date: 01/30/04 

Date: Thu, 29 Jan 2004 15:55:04 -0800

I am currently working with a business partner on a B2B application using
SOAP and XML Signature, and have encountered a seemingly interoperability
issue. I am using SignedXML from .NET Framework 1.1 and WSE 1.0SP1. The
partner uses DataPower's XS40 XML Security Gateway. We exchanged
certificates in advance.

Here is what we know so far:

1. The partner can verify the signatures created by the SignedXML class from
WSE 1.0SP1.
2. The partner can verify the singatures created by the XS40 XML Security
Gateway (of courcse).
3. We can verify the signatures created by both WSE 1.0SP1 and .NET
Framework 1.1 using WSE 1.0SP1.
4. We CANNOT verify the signatures created by the XS40 XML Security Gateway.

The SignedInfo element of the signed SOAP messages from the partner is
nicely formatted and includes non-significant white spaces such as CRLF and
tabs. I set PreserveWhitespace to True before loading the SOAP message. The
SOAP message's declaration indicates it is using UTF-8 encoding, but I am
not sure if the SOAP message is actually UTF-8 encoded.

Has anyone encountered similar issues when verifying signatures generated in
Java in general, and by XS40 XML Security Gateway in particular? Can you
share your experience, good or bad?

Can anyone provide pointers to where I can find information to resolve the
issue?

Thanks a million in advance.

--- Guangxi

Relevant Pages

  • XML Digital Signature interoperability Issue between DataPowers XS40 and .NET Framework 1.1 and WSE
    ... SOAP and XML Signature, and have encountered a seemingly interoperability ... partner uses DataPower's XS40 XML Security Gateway. ... The partner can verify the signatures created by the SignedXML class from ... The partner can verify the singatures created by the XS40 XML Security ...
    (microsoft.public.platformsdk.security)
  • SOAP + XMLSec?
    ... Can anyone recommend a PHP SOAP library that covers digital signatures ... currently exploring PEAR::SOAP but am finding its documentation ... verification capabilities, or allows me to feed outgoing payloads ...
    (comp.lang.php)
  • Re: TAN/ Dancing with the (Soap) Stars
    ... my eyes when she and her partner got voted off tonight. ... better dancer than Lisa. ... holding back the tears. ... I wasn't sad to see Lisa go, because I see/hear her more than I want, when I try to watch a guest on Soap Talk. ...
    (rec.arts.tv.soaps.abc)
  • Re: Another survey on the RFC site: Cilantro - love it or hate it?
    ... but only 12 who hate it. ... Guy (my partner) says it tastes mildly of soap to him, but he doesn't mind it in small quantities. ...
    (rec.food.cooking)