<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<p><br>
</p>
<br>
<div class="moz-cite-prefix">On 10/30/18 1:41 PM, Binh Pham wrote:<br>
</div>
<blockquote type="cite"
cite="mid:CAK903wNy5zXnHmtK8==X9vw9e6e2i=n1-W-suBZr3u8SWb6vVA@mail.gmail.com">
<meta http-equiv="content-type" content="text/html; charset=utf-8">
<div dir="ltr">
<div dir="ltr">
<div class="gmail_default" style="font-family:georgia,serif">Thank
you so much for helping thus far. I still have some more
questions.</div>
<div class="gmail_default" style="font-family:georgia,serif"><br>
</div>
<div class="gmail_default" style="font-family:georgia,serif">I
would add the timestamp id to
DocumentInternalIDContentReference like so:<br>
<div class="gmail_default"><br>
</div>
<div class="gmail_default">DocumentInternalIDContentReference
reference = new
DocumentInternalIDContentReference(timestamp.getWSUId());</div>
<div class="gmail_default">reference.getTransforms().add(SignatureConstants.TRANSFORM_C14N_EXCL_OMIT_COMMENTS);</div>
<div class="gmail_default">reference.setDigestAlgorithm(SignatureConstants.ALGO_ID_DIGEST_SHA1);</div>
<div class="gmail_default">Signature signature =
getSignature(credential);</div>
<div class="gmail_default">signature.getContentReferences().add(reference);</div>
</div>
</div>
</div>
</blockquote>
<br>
Offhand, structurally speaking that looks correct to me. <br>
<br>
<blockquote type="cite"
cite="mid:CAK903wNy5zXnHmtK8==X9vw9e6e2i=n1-W-suBZr3u8SWb6vVA@mail.gmail.com">
<div dir="ltr">
<div dir="ltr">
<div class="gmail_default" style="font-family:georgia,serif">
<div class="gmail_default"><br>
</div>
<div class="gmail_default">Then call
Signer.signObject(signature);?</div>
</div>
</div>
</div>
<br>
</blockquote>
<br>
Yes. Other than manually creating and adding the ContentReference,
everything else should be conceptually the same as other XML
signatures, such as the enveloped signature on Assertion.<br>
<br>
</body>
</html>