[XML-SIG] c14n attribute ordering problem?

[Aleksey Sanin]

Well, this is great. However, example 3.3 [1] from the same specification
shows a different sorting (look at element <e5/>). And after fixing this 
in libxml2
I have a lot of interop tests failures in both C14N and XMLDSig.

Aleksey

[1] http://www.w3.org/TR/xml-c14n#Example-SETags

Rich Salz wrote:

>># What I expect:
>>$ python2.3 c14n_test.py
>><dsig:SignedInfo xmlns="urn:envelope" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"></dsig:SignedInfo>
>># What I get:
>>$ python2.3 c14n_test.py
>><dsig:SignedInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" xmlns="urn:envelope"></dsig:SignedInfo>
>>    
>>
>
>The Python code is right; your expectation (and, apparently xmlsec)
>is wrong.  The default namespace declaration is treated as if the localname
>is "xmlns".  See the "Namespace Nodes" bullet in section 2.3
>
>Sorry, Aleksey, looks like a bug. :)  (That's actually a rueful smile;
>Aleksey and I have commiserated over the pain in the a-- that is XML
>c14n and exc-c14n.)
>        /r$
>--
>Rich Salz                  Chief Security Architect
>DataPower Technology       http://www.datapower.com
>XS40 XML Security Gateway  http://www.datapower.com/products/xs40.html
>XML Security Overview      http://www.datapower.com/xmldev/xmlsecurity.html
>  
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mail.python.org/pipermail/xml-sig/attachments/20030930/98df4ff3/attachment.html