sign an xml file with multiple signatures

[jianyi]

Hi,

I am working on an xml project, and I am trying to understand
something.
if the author needs to sign one xml file, then his manager will
counter-sign, and a third witness will sign, can this be achieved in
Java xmldsig package? (or any other package?)
Thanks in advance!
James

[Joseph Kesselman]

Assuming this is standard XML Signatures
(http://www.w3.org/TR/2002/REC-xmldsig-core-20020212/)
it should be possible to have multiple signatures of a document.
Enveloping signatures in particular can sign previously signed
information including other signatures.

Does that answer your question?

--
Joe Kesselman / Beware the fury of a patient man. -- John Dryden

[jianyi]

Thank you!

Yes we are using the standard w3c XML signatures. I will change my code
to use enveloping signautures. And I will let you know if my problem is
solved.

Thanks!

James

[jianyi]

Hi Joe,

It worked! Thank you so much for your suggestion.

The enveloping format will make the XML schema look a little bit weird,
and I am working with our xml developer to settle that.

Thanks again!

James

[Joseph Kesselman]

ji****@hotmail.com wrote:

The enveloping format will make the XML schema look a little bit weird,
and I am working with our xml developer to settle that.

There may be better solutions; that's just the one I spotted in a quick
glance at the spec.

--
Joe Kesselman / Beware the fury of a patient man. -- John Dryden