RE: SOAP-DSIG and OASIS WSS Soap message security
"Martin Gudgin" <[email protected]>
| Newsgroups | gmane.text.xml.distributed |
|---|---|
| Message-ID | <DD35CC66F54D8248B6E04232892B6338020F3684@RED-MSG-43.redmond.corp.microsoft.com> |
Manoj, The OASIS WSS spec provides a framework for securing SOAP messages. This framework is based on the notion of security tokens and the XMLDSIG and XMLENC specs. You should find that the signatures specified by the OASIS WSS spec are perfectly valid per the XMLDSIG spec. There are several implementations of OASIS WSS ( including the XMLDSIG and XMLENC bits ). Are you trying to talk to a particular vendors toolkit? Or are you building your own? Martin ________________________________ From: [email protected] [mailto:[email protected]] On Behalf Of Juneja, Manoj Sent: 08 May 2004 00:31 To: [email protected] Subject: SOAP-DSIG and OASIS WSS Soap message security Hi All, Can someone on this list explain me how the SOAP-DSIG specification (http://www.w3.org/TR/2001/NOTE-SOAP-dsig-20010206/) relate to the OASIS WSS SOAP Message Security 1.0 specification? If I have to make use of XML signature tags in my SOAP envelope then what specification should I follow? Thanks for the help. Regards, manoj.