javax.xml.crypto.dsig. *를 사용하여 XML 파일에 서명하는 동안 네임 스페이스를 추가하는 방법.

Question

나는 enveloped signature 및 javax.xml.crypto.dsig. * 클래스를 사용하여 XML 파일에 서명을 시도하고있다. 결과적으로 올바른 서명 내용으로 파일을 가져 오지만 네임 스페이스가 정의되지 않았습니다. xmlns : ds = "http://www.w3.org/2000/09/xmldsig#"네임 스페이스와 해당 ds 접두사를 어떻게 추가 할 수 있습니까? 내가 정의 할 수있는 곳이 보이지 않습니다.

예제 코드 :

XMLSignatureFactory xmlSignatureFactory = XMLSignatureFactory.getInstance("DOM"); 

    (...) 

    XMLSignature signature = xmlSignatureFactory.newXMLSignature(signedInfo, keyInfo); 

    // Marshal, generate, and sign the enveloped signature. 
    signature.sign(domSignContext); 

는 예를 들어, XML 제공 :

<?xml version="1.0" encoding="UTF-8"?> 
<test xmlns="http://different.namespace.com"> 
    <someBody/> 
    <Signature xmlns="http://www.w3.org/2000/09/xmldsig#"> 
     <SignedInfo> 
      <CanonicalizationMethod Algorithm="http://www.w3.org/TR/2001/REC-xml-c14n-20010315"/> 
      <SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>  
      <Reference URI=""> 
       <Transforms> 
        <Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/> 
       </Transforms> 
       <DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/> 
       <DigestValue>base64_digest</DigestValue> 
      </Reference> 
     </SignedInfo> 
     <SignatureValue>some_base64</SignatureValue> 
     <KeyInfo> 
      <X509Data> 
       <X509SubjectName>subject_data</X509SubjectName> 
       <X509Certificate>some_more_base64</X509Certificate> 
      </X509Data> 
      <KeyValue> 
       <RSAKeyValue> 
        <Modulus>another_base64</Modulus> 
        <Exponent>base64_as_well</Exponent> 
       </RSAKeyValue> 
      </KeyValue> 
     </KeyInfo> 
    </Signature> 
</test> 

을하지만 원하는 :

다음

<?xml version="1.0" encoding="UTF-8"?> 
<test xmlns="http://different.namespace.com" xmlns:ds="http://www.w3.org/2000/09/xmldsig#"> 
    <someBody/> 
    <ds:Signature xmlns="http://www.w3.org/2000/09/xmldsig#"> 
     <ds:SignedInfo> 
      <ds:CanonicalizationMethod Algorithm="http://www.w3.org/TR/2001/REC-xml-c14n-20010315"/> 
      <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>  
      <ds:Reference URI=""> 
       <ds:Transforms> 
        <ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/> 
       </ds:Transforms> 
       <ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/> 
       <ds:DigestValue>base64_digest</ds:DigestValue> 
      </ds:Reference> 
     </ds:SignedInfo> 
     <ds:SignatureValue>some_base64</ds:SignatureValue> 
     <ds:KeyInfo> 
      <ds:X509Data> 
       <ds:X509SubjectName>subject_data</ds:X509SubjectName> 
       <ds:X509Certificate>some_more_base64</ds:X509Certificate> 
      </ds:X509Data> 
      <ds:KeyValue> 
       <ds:RSAKeyValue> 
        <ds:Modulus>another_base64</ds:Modulus> 
        <ds:Exponent>base64_as_well</ds:Exponent> 
       </ds:RSAKeyValue> 
      </ds:KeyValue> 
     </ds:KeyInfo> 
    </ds:Signature> 
</test> 

Answer 1

는 싸여 서명을 생성하기위한 오라클에서 샘플 코드입니다. 그리고 당신이 찾고있는 것 같아 dsc.setDefaultNamespacePrefix ("dsig"); 아래 예제와 같이

XMLSignatureFactory fac = XMLSignatureFactory.getInstance("DOM"); 

    Reference ref = fac.newReference 
    ("", fac.newDigestMethod(DigestMethod.SHA1, null), 
      Collections.singletonList 
      (fac.newTransform 
        (Transform.ENVELOPED, (TransformParameterSpec) null)), 
        null, null); 

    // Create the SignedInfo 
    SignedInfo si = fac.newSignedInfo 
    (fac.newCanonicalizationMethod 
      (CanonicalizationMethod.INCLUSIVE_WITH_COMMENTS, 
        (C14NMethodParameterSpec) null), 
        fac.newSignatureMethod(SignatureMethod.DSA_SHA1, null), 
        Collections.singletonList(ref)); 

    // Create a DSA KeyPair 
    KeyPairGenerator kpg = KeyPairGenerator.getInstance("DSA"); 
    kpg.initialize(512); 
    KeyPair kp = kpg.generateKeyPair(); 

    // Create a KeyValue containing the DSA PublicKey that was generated 
    KeyInfoFactory kif = fac.getKeyInfoFactory(); 
    KeyValue kv = kif.newKeyValue(kp.getPublic()); 

    // Create a KeyInfo and add the KeyValue to it 
    KeyInfo ki = kif.newKeyInfo(Collections.singletonList(kv)); 

    // Instantiate the document to be signed 
    DocumentBuilderFactory dbf = DocumentBuilderFactory.newInstance(); 
    dbf.setNamespaceAware(true); 
    Document doc = dbf.newDocumentBuilder().parse(new FileInputStream(sourceFile)); 

    // Create a DOMSignContext and specify the DSA PrivateKey and 
    // location of the resulting XMLSignature's parent element 
    DOMSignContext dsc = new DOMSignContext(kp.getPrivate(), doc.getDocumentElement()); 
    dsc.setDefaultNamespacePrefix("dsig"); 

    // Create the XMLSignature (but don't sign it yet) 
    XMLSignature signature = fac.newXMLSignature(si, ki); 

    // Marshal, generate (and sign) the enveloped signature 
    signature.sign(dsc); 

    // output the resulting document 
    OutputStream os; 
    os = new FileOutputStream(DestinationFile); 

    TransformerFactory tf = TransformerFactory.newInstance(); 
    Transformer trans = tf.newTransformer(); 
    trans.transform(new DOMSource(doc), new StreamResult(os)); 

Answer 2

문자열 algoritmo = XMLSignature.ALGO_ID_SIGNATURE_RSA; 당신이 그런

<ds:Signature ...> ... </ds:Signature> 

형식

아래에 서명 XML을에 갖고 싶어 XMLSignature sig = new XMLSignature(doc, algoritmo);

Answer 3

친절 자바 6 버전 31을 사용하고 당신은 것입니다 필요한 서명 XML.