NonStop SOAP User's Manual

NonStop SOAP with Digital Signatures
NonStop SOAP User’s Manual—520501-012
7-10
NonStop SOAP Header for Digital Signature
Method 3:
URI=""
Identifies the node-set (excluding any comment nodes) of the XML resource
containing the signature.
Method 4:
URI="#BODY"
Identifies a node-set containing the element with ID attribute value 'BODY' of
the XML resource containing the signature. XML Signature (and its
applications) modify this node-set to include the element plus all descendents
including namespaces and attributes, but not comments.
The BODY attribute requires the following elements:
•
<ds:Transforms> < ds:Transform Algorithm>
•
<ds:DigestMethod>
•
<ds:DigestValue>
<ds:Transforms>
< ds:Transform Algorithm>
Requirement Category: OPTIONAL
This element contains an ordered list of Transform elements. The output of each
transform serves as the input to the next one in the list. The input to the first
transform is the result of de-referencing the URI attribute of the Reference
element. The output from the last transform is the input for the DigestMethod
algorithm. Each transform consists of an Algorithm attribute and content
parameters. The Algorithm attribute value specifies the name of the algorithm to be
performed, and the Transform content provides additional data to govern the
algorithm's processing of the transform input. The algorithm attribute may refer to
any of the following transform algorithms:
For XSL Transformations, the following optional algorithm must be used:
http://www.w3.org/TR/1999/REC-xslt-19991116
If transforms consider XPATH node-set as input, the following recommended
algorithm can also be used:
http://www.w3.org/TR/1999/REC-xpath-19991116
For enveloped signatures, the following algorithm must be used:
http://www.w3.org/2000/09/xmldsig#enveloped-signature
The Enveloped Signature transform removes the Signature element from
the calculation of the signature, especially when the signature is within the content
where it is signed.