NonStop SOAP User's Manual

NonStop SOAP with Digital Signatures
NonStop SOAP User’s Manual—520501-012
7-7
NonStop SOAP Header for Digital Signature
The various elements are described as follows:
<SOAP-SEC:Signature>
Requirement Category: Mandatory
The namespace prefix "SOAP-SEC" used in this specification is associated with this
URI. The SOAP-SEC: Signature header along with the namespace defines a
Digital Signature header in NSSOAP message.
The XML namespace URI that must be used by implementations of this
specification is:
http://schemas.xmlsoap.org/soap/security/2000-12
<ds:Signature>
Requirement Category: Mandatory
Various attributes under this element are described as follows:
<ds:Signature xmlns>
Requirement Category: Mandatory
This attribute associates the namespace URI that should be used to sign the
request.
The namespace URI that MUST be used by implementations of this specification
is:
http://www.w3.org/2000/09/xmldsig
The <Signature> element contains a single digital signature. NSSOAP supports the
following elements under the signature element:
•
<ds:SignedInfo>
•
<ds:SignatureValue>
•
<ds:KeyInfo>
<ds:SignedInfo>
Requirement Category: Mandatory
This element contains the information that is actually signed and performs two
mandatory processes:
°
Validation of the signature over SignedInfo
°
Validation of each Reference Digest within SignedInfo
The <ds:SignedInfo> attribute must be equipped with the following elements:
°
<ds:CanonicalizationMethod>
°
<ds:SignatureMethod>
°
<ds:Reference URI>