Skip to content

Conversation

@Gamuci
Copy link
Contributor

@Gamuci Gamuci commented Jun 18, 2024

  • The signature KeyValue construction was wrong when an EC key was used. The namespace was declared in the "NamedCurve" element instead of "ECKeyValue". See https://www.w3.org/TR/xmldsig-core1/#sec-ECKeyValue
  • This fix is needed in Apache Santuario 3.0.x too.

- The signature KeyValue construction was wrong when an ECC key was used. The namespace was declared in the "NamedCurve" element, instead of "ECKeyValue". (See https://www.w3.org/TR/xmldsig-core1/#sec-ECKeyValue)
- The fix is needed in Apache Santuario 3.0.x too.
@coheigea
Copy link
Contributor

@seanjmullan Please take a look, it looks valid

@seanjmullan
Copy link
Member

@seanjmullan Please take a look, it looks valid

Yes, I approved.

@coheigea coheigea merged commit d8277bd into apache:main Jun 21, 2024
coheigea pushed a commit that referenced this pull request Jun 21, 2024
- The signature KeyValue construction was wrong when an ECC key was used. The namespace was declared in the "NamedCurve" element, instead of "ECKeyValue". (See https://www.w3.org/TR/xmldsig-core1/#sec-ECKeyValue)
- The fix is needed in Apache Santuario 3.0.x too.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants