STR-Transform test vectors & New Issue

[merlin hughes <merlin@baltimore.ie>]

Hi,

Attached is a .tar.gz file containing some STR-Transform
test vectors. They try to exercise the different types of
SecurityTokenReference that we support, along with different
canonicalization scenarios.

A Readme.txt provides a brief explanation.

I have eyeballed the canonical form and it appears okay;
however, I cannot rule out errors.

In producing the transforms I ran across an error in the
STR-Transform specification: 

The bullet point on lines 950-953 (17/merged) is incorrect
and should be removed:

 "If the canonicalization algorithm is inclusive XML canonicalization
  and a node-set is replacing an element from N whose parent element
  is not in N, then its apex elements MUST inherit attributes
  associated with the XML namespace from the parent element, such
  as xml:base, xml:lang and xml:space."

The text is carryover from the decryption transform; it is
inappropriate for this transform; not to mention, there are
scenarios where it cannot be done.

Merlin


-----------------------------------------------------------------------------
The information contained in this message is confidential and is intended
for the addressee(s) only.  If you have received this message in error or
there are any problems please notify the originator immediately.  The 
unauthorised use, disclosure, copying or alteration of this message is 
strictly forbidden. Baltimore Technologies plc will not be liable for
direct, special, indirect or consequential damages arising from alteration
of the contents of this message by a third party or as a result of any 
virus being passed on.

This footnote confirms that this email message has been swept for Content
Security threats, including computer viruses.
http://www.baltimore.com

merlin-wss-one.tar.gz