RE: [ebxml-msg] Signature Generation Question

["Damodaran, Suresh" <Suresh_Damodaran@stercomm.com>]

Arvola,

 

You are right. It should be "SOAP Envelope" It was corrected in a lot of places

(I had pointed out this bug in a message some time back), but David might have

missed fixing it here. As you are aware, the reason for this change is to secure the contents

of the Manifest that are in the SOAP body as well as the SOAP header.

 

Regards,

-Suresh

-----Original Message-----
From: Arvola Chan [mailto:arvola@tibco.com]
Sent: Thursday, December 06, 2001 6:08 PM
To: ebxml-msg@lists.oasis-open.org
Subject: [ebxml-msg] Signature Generation Question

Section 4.1.3 Signature Generation, line 1068 states:

 

1) Creat a ds:SignedInfo element with ds:SignatureMethod, ds:CanonicalizationMethod, and ds:Reference elements for the SOAP Header and any required payload objects, as prescribed by [XMLDSIG].

 

Shouldn't the phrase "SOAP Header" be replaced with "SOAP Envelope" instead? Don't we want to sign the SOAP Body as well?

 

Thanks,

-Arvola