AW: XMLTooling - Is it possible to not emit <ds:KeyInfo> in C++?
Selhorst, Marcel
Marcel.Selhorst at BDR.de
Fri Nov 2 03:55:24 EDT 2012
Hi Scott,
thanks for your quick reply.
> With the existing plugin type=="File", there's a keyInfoMask property you
> can set on the plugin creation DOM to control what types of info get set.
I am indeed using the FilesystemCredentialResolver to load my certificates / keys.
I also found the <KeyInfoMask> element in the sourcecode, however it seems to be ignored.
I produce an XML like this and parse it into a DOMDocument:
<FilesystemCrendetialResolver>
<Key>
<Path>/path/to/keyfile</Path>
</Key>
<Certificate>
<Path>/path/to/cert</Path>
<KeyInfoMask>1</KeyInfoMask>
</Certificate>
</FilesystemCrendetialResolver>
Afterwards I use a keyResolver to load the key / certificate:
Xmltooling::CredentialResolver* sigKeyResolver = XMLToolingConfig::getConfig().CredentialResolverManager.newPlugin(FILESYSTEM_CREDENTIAL_RESOLVER, myDOM->getDocumentElement());
I tried the following values and combinations thereof for <KeyInfoMask> without success.
KEYINFO_KEY_VALUE 1
KEYINFO_KEY_NAME 2
KEYINFO_x509_CERTIFICATE 4
KEYINFO_x509_SUBJECTNAME 8
KEYINFO_x509_ISSUERSERIAL 16
KEYINFO_x509_DIGEST 32
Thanks!
Marcel
More information about the dev
mailing list