Discuss this help topic in SecureBlackbox Forum

How To articles about XML signing (XMLDSig and XAdES)

Signing

• Setup signing parameters
• Sign the XML document
• Sign the XML node
• Sign the generic data
• Create enveloping signature
• Create enveloped signature
• Create detached signature
• Create custom signature
• Use HMAC signing
• Use X.509 certificates for signing
• Use OpenPGP keys for signing
• Use raw keys for signing
• Choose what data to include to signature
• Change ID attribute and other attributes of signature elements
• Add data to KeyInfo element
• Reorder elements in KeyInfo element
• Add key name to signature
• Change prefix of elements
• Add manifest to signature
• Add reference to whole document
• Add reference to element in signature
• Use transforms when preparing data for signing
• Add signature properties
• Add custom ds:Object element into signature
• Format signature
• Change canonicalization method for signature
• Save resulting signature
• Create EBICS signature

Reference manipulation

• Add reference to document element
• Add reference to data
• Add reference to external file
• Add reference to element of external XML file
• Add reference to several nodes
• Add reference to element in signature
• Change digest method in reference
• Add canonicalization transform to reference
• Add null transform to reference
• Add enveloped signature transform to reference
• Add Base64 transform to reference
• Add XPath transform to reference
• Add XPath Filter 2.0 transform to reference

Signature processing

• Load signature
• Check signature properties
• Verify signature
• Verify signature with MAC key
• Verify signature with certificate
• Verify references
• Verify manifest references
• Remove signature

XAdES signing

• Create XAdES signature
• Set XAdES version
• Set digest method for Signed Properties Reference
• Upgrade to higher XAdES signature form
• Set signature policy ID
• Set signature production place
• Set signer role
• Set signing certificate
• Set signing time
• Change prefix of elements
• Add timestamp (common settings)
• Add countersignature
• Tune-up automatic collection of revocation information

XAdES verification

• Check XAdES signature and analyze result
• Read time properties of XAdES signature
• Read signing certificate and available revocation information

Discuss this help topic in SecureBlackbox Forum