Hi
@DChiesa @dchiesa1
I am able to sign the soap message with an attachment in Java using wss4j
Following is the signature value tag that contains the transform algorithm as Attachment-Content-Signature-Transform
<ds:SignedInfo>
<ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#">
<ec:InclusiveNamespaces xmlns:ec="http://www.w3.org/2001/10/xml-exc-c14n#"
PrefixList="S12 eb wsse wsu"/>
</ds:CanonicalizationMethod>
<ds:SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/>
<ds:Reference URI="#id-1f05ce86-4b25-41f6-b2a4-78da73ca6bb0">
<ds:Transforms>
<ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#">
<ec:InclusiveNamespaces xmlns:ec="http://www.w3.org/2001/10/xml-exc-c14n#"
PrefixList="eb wsse"/>
</ds:Transform>
</ds:Transforms>
<ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
<ds:DigestValue>D7IAoE12N6sn4YJv/tk7+JqEXLOVZfduVsYEn2d6m3M=</ds:DigestValue>
</ds:Reference>
<ds:Reference URI="cid:ExampleSendMessage.xml">
<ds:Transforms>
<ds:Transform Algorithm="http://docs.oasis-open.org/wss/oasis-wss-SwAProfile-1.1#Attachment-Content-Signature-Transform"/>
</ds:Transforms>
<ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
<ds:DigestValue>doO7iAh/kjib7oDyEZjM4u7GWKR0c/ZNxQegFgsmrwU=</ds:DigestValue>
</ds:Reference>
</ds:SignedInfo>
<ds:SignatureValue>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</ds:SignatureValue>
<ds:KeyInfo Id="KI-2abfc62c-0006-4fc4-a2f0-2d533503ebb3">
<wsse:SecurityTokenReference wsu:Id="STR-e1440fa7-e4b6-4f64-981f-e88c593bdd66">
<wsse:Reference URI="#X509-f21b1229-c868-4ef2-80b8-78d75a43bdff"
ValueType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-x509-token-profile-1.0#X509v3"/>
</wsse:SecurityTokenReference>
</ds:KeyInfo>
</ds:Signature>
but the same if I try to sign the soap message with an attachment in SoapUi, The transform algorithm shows some different transform algorithm, How do I set the Attachment-Content-Signature-Transform in SoapUI, It does not have that in the sign algorithm menu?
<ds:Reference URI="#id-C8CC831288A1352339169452415736924">
<ds:Transforms>
<ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#">
<InclusiveNamespaces PrefixList="eb urn urn2 urn3 urn7 urn8 wsse" xmlns="http://www.w3.org/2001/10/xml-exc-c14n#"/>
</ds:Transform>
</ds:Transforms>
<ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
<ds:DigestValue>DU49l/o5Crmo7NtLn7+umbvuRbYf2TzCM2NQ1ltFwMY=</ds:DigestValue>
</ds:Reference>
https://docs.oasis-open.org/wss-m/wss/v1.1.1/os/wss-SwAProfile-v1.1.1-os.html#_Toc307412694 The Document says we must sign the attachment with Attachment-Content-Signature-Transform
so how can we achieve this is SoapUI ?
LinkedIn
Twitter
