Сообщение
  • Пожалуйста, прежде пройдите авторизацию
Форум НУЦ РК
Главный раздел
Для разработчиков

Не проверяется XML с несколькоми ID через апплет
(1 чел.) (1) гость
  • Страница:
  • 1

ТЕМА: Не проверяется XML с несколькоми ID через апплет

Не проверяется XML с несколькоми ID через апплет 4 года, 1 мес. назад #1736

  • nik.vasko.89
  • Новый участник
  • Постов: 1
  • Репутация: 0
Добрый день.

Есть XML: 
<?xml version="1.0" encoding="utf-8"?>
<root>
<persons>
<person id="person1">
<name>Ivan1</name>
<iin>123456789012</iin>
</person>
<person id="person2">
<name>Ivan2</name>
<iin>123456789012</iin>
</person>
</persons>
</root>


Подписываем его с ID "person1", верхний элемент "persons"
Получаем следующий XML (валидируется) 
<?xml version="1.0" encoding="utf-8" standalone="no"?><root>

<persons>
<person id="person1">
<name>Ivan1</name>
<iin>123456789012</iin>
</person>
<person id="person2">
<name>Ivan2</name>
<iin>123456789012</iin>
</person>
<ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
<ds:SignedInfo>
<ds:CanonicalizationMethod Algorithm="http://www.w3.org/TR/2001/REC-xml-c14n-20010315"/>
<ds:SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/>
<ds:Reference URI="#person1">
<ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
<ds:DigestValue>ew5YaL3gegJ2ZEvQwAKp7S/DIPgqI2AYGMU/5L9y2eM=</ds:DigestValue>
</ds:Reference>
</ds:SignedInfo>
<ds:SignatureValue>
Q+XmaBH7vUs5uRrPb+gUP3J2iwPP34Ds7DpfbU5tFVzhhMRFFWdYvOMlYVIjNXSuJrppo6oQncPC
p0i0tvBNkqzRX2J9rw2CEjzRfR3YiVTMo5k4GKYgFamMigL5lnBCkatjI+7SRbKsVm0DQVFiYZRg
edtZClH/nqpu/GFNiPJtkiVy8snq4kBGVDq8vqhd8eNiobbVFG9+gGy4/poRLIWNbHKyN4elz01F
76qdb8w/dKBWaV0SHb532W9Lx1RRiT/iSMRcoiZe2yykipl9EyptjTvC3bly02BlW20pJ+87alSl
0GgFnDyZe/L7pvc4gzhRBzga7i8D99UrnCBALg==
</ds:SignatureValue>
<ds:KeyInfo>
<ds:X509Data>
<ds:X509Certificate>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=
</ds:X509Certificate>
</ds:X509Data>
</ds:KeyInfo>
</ds:Signature></persons></root>


Теперь на уже подписанный (выше) ставим еще одну подпись на ID "person2", верхний элемент "persons".
Получаем такой XML: 
<?xml version="1.0" encoding="utf-8" standalone="no"?><root>

<persons>
<person id="person1">
<name>Ivan1</name>
<iin>123456789012</iin>
</person>
<person id="person2">
<name>Ivan2</name>
<iin>123456789012</iin>
</person>
<ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
<ds:SignedInfo>
<ds:CanonicalizationMethod Algorithm="http://www.w3.org/TR/2001/REC-xml-c14n-20010315"/>
<ds:SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/>
<ds:Reference URI="#person1">
<ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
<ds:DigestValue>ew5YaL3gegJ2ZEvQwAKp7S/DIPgqI2AYGMU/5L9y2eM=</ds:DigestValue>
</ds:Reference>
</ds:SignedInfo>
<ds:SignatureValue>
Q+XmaBH7vUs5uRrPb+gUP3J2iwPP34Ds7DpfbU5tFVzhhMRFFWdYvOMlYVIjNXSuJrppo6oQncPC
p0i0tvBNkqzRX2J9rw2CEjzRfR3YiVTMo5k4GKYgFamMigL5lnBCkatjI+7SRbKsVm0DQVFiYZRg
edtZClH/nqpu/GFNiPJtkiVy8snq4kBGVDq8vqhd8eNiobbVFG9+gGy4/poRLIWNbHKyN4elz01F
76qdb8w/dKBWaV0SHb532W9Lx1RRiT/iSMRcoiZe2yykipl9EyptjTvC3bly02BlW20pJ+87alSl
0GgFnDyZe/L7pvc4gzhRBzga7i8D99UrnCBALg==
</ds:SignatureValue>
<ds:KeyInfo>
<ds:X509Data>
<ds:X509Certificate>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=
</ds:X509Certificate>
</ds:X509Data>
</ds:KeyInfo>
</ds:Signature><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
<ds:SignedInfo>
<ds:CanonicalizationMethod Algorithm="http://www.w3.org/TR/2001/REC-xml-c14n-20010315"/>
<ds:SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/>
<ds:Reference URI="#person2">
<ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
<ds:DigestValue>acaENBYsukLQ/hBfy3FLtPN/DZMM2n8YKPQBv3oeFr0=</ds:DigestValue>
</ds:Reference>
</ds:SignedInfo>
<ds:SignatureValue>
Erkw7sHeKU1qRPz+AIFfYIZGbDLwqn8ipg6yRDNaMv6jJqkwpTvOpKQq/bwDa/0vgVVT2jwp3nzN
mm1oPHQeKTCHw/jq/Dlqd3XjBBFoNZuiKNps6SAUgDSSkLMXnP15HLxBTA807McESCwxWEfTaHxV
1E9wk5cvdeasR8DOnnT2QzZ8QIdYp8hmvuWwgyhKJY3z1/Ie+7UJHXGc91Tyg04V1fTnXA3nTN11
isMR7GCNXiy8/kTmToCb4iYqolFYBxHVP4SW45RJjd4zqRjZeiDbQmH5mAfekZo8uxgl3YjyXbIv
OszMzrLGey03TVrfTD5Y0ieRwTfPQd5gQFO1/w==
</ds:SignatureValue>
<ds:KeyInfo>
<ds:X509Data>
<ds:X509Certificate>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=
</ds:X509Certificate>
</ds:X509Data>
</ds:KeyInfo>
</ds:Signature></persons></root>


И пробуем валидировать, он не валидирует. Ошибка SIGNATURE_VALIDATION_ERROR.
Лог с консоли Java:
:pinch: ВНИМАНИЕ: СПОЙЛЕР!


В чем можем быть проблема?
  • Страница:
  • 1
Форум НУЦ РК
Главный раздел
Для разработчиков
FaLang translation system by Faboba