AW: XMLTooling - Is it possible to not emit <ds:KeyInfo> in C++?

Selhorst, Marcel Marcel.Selhorst at BDR.de
Fri Nov 2 03:55:24 EDT 2012


Hi Scott,

thanks for your quick reply.

> With the existing plugin type=="File", there's a keyInfoMask property you
> can set on the plugin creation DOM to control what types of info get set.

I am indeed using the FilesystemCredentialResolver to load my certificates / keys.
I also found the <KeyInfoMask> element in the sourcecode, however it seems to be ignored.
I produce an XML like this and parse it into a DOMDocument:

<FilesystemCrendetialResolver>
	<Key>
		<Path>/path/to/keyfile</Path>
	</Key>		
	<Certificate>
		<Path>/path/to/cert</Path>
		<KeyInfoMask>1</KeyInfoMask>
	</Certificate>
</FilesystemCrendetialResolver>

Afterwards I use a keyResolver to load the key / certificate:
Xmltooling::CredentialResolver* sigKeyResolver = XMLToolingConfig::getConfig().CredentialResolverManager.newPlugin(FILESYSTEM_CREDENTIAL_RESOLVER, myDOM->getDocumentElement());

I tried the following values and combinations thereof for <KeyInfoMask> without success.

KEYINFO_KEY_VALUE			1
KEYINFO_KEY_NAME			2
KEYINFO_x509_CERTIFICATE		4
KEYINFO_x509_SUBJECTNAME 	8
KEYINFO_x509_ISSUERSERIAL		16
KEYINFO_x509_DIGEST		32

Thanks!
Marcel



More information about the dev mailing list