Signing multiple references and non-XML content in detached mode
Nobody has claimed this yet.
Assessment
- Difficulty
- 5/5
- Estimated time
- Over a week
- Newbie friendliness
- 25/100
Research direction
Start with XMLSigner.sign in detached mode and trace how reference_uri and uri_resolver are handled during signing. Reproduce the multiple-reference example, including non-XML referenced data, and compare it with the existing verification behavior. Done means the requested references and resolver behavior are supported or their limitation is clearly documented.
Written by the indexing model from the issue text.
Description
Hi
I am trying to port some C code to python that is signing an XML referencing another document, a so called detached signature.
I was told that it is possible to specify "detached" as signature method when creating XMLSigner.
But then I expected that I also had to supply an uri-resolver method to the sign method just like with the verify method to supply the data for the uri specified. Something like the following:
def my_uri_resolver(self, uri):
if uri == 'uri1':
return 'data for uri1'
if uri == 'uri2':
return 'data for uri2'
...
signer = XMLSigner()
signed = signer.sign(
unsigned_xml,
key=my_key,
passphrase=my_passphrase,
cert=my_cert,
reference_uri=['uri1', 'uri2'],
uri_resolver=my_uri_resolver)
...
Am I missing something here?
Regards Asbjørn Oskal
- Dominant language
- Python
- Stars
- 154
- Forks
- 113
- PR merge metrics
- No merged PRs in 30d
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
More from XML-Security/signxml
-
EBICS compatibility Open
Difficulty 5/5 Over a week Newbie friendliness 20/100
XML-Security/signxml#272 ·
-
Difficulty 3/5 1-2 days Newbie friendliness 42/100
XML-Security/signxml#268 · 1 reaction ·
-
Difficulty 3/5 1-2 days Newbie friendliness 45/100
XML-Security/signxml#267 ·
-
Difficulty 3/5 1-2 days Newbie friendliness 25/100
XML-Security/signxml#262 ·
-
Difficulty 5/5 Over a week Newbie friendliness 15/100
XML-Security/signxml#261 ·
All issues in XML-Security/signxml
Similar issues
-
Difficulty 2/5 1-3 hours Newbie friendliness 74/100
bancolombia/sentinel#23 ·
-
test md OpenCI
Difficulty 2/5 1-3 hours Newbie friendliness 74/100
-
integration:quickjs org:external priority:backlog topic:code-interpreter topic:middleware type:feature
Difficulty 2/5 1-3 hours Newbie friendliness 74/100
langchain-ai/deepagents#6450 ·
-
bug client
Difficulty 2/5 1-3 hours Newbie friendliness 88/100
-
Difficulty 2/5 1-3 hours Newbie friendliness 74/100