RE: Signing a wsa header - use Xpath?

Got the answer

s:anyAttribute is included in the wsa: header definitions allowing
attribute extensibility. 
Hence a wsu:Id or xml:id could be used (to give two examples where a new
definition might not be required to allow a recipient to recognize the
attribute). 

regards, Frederick

Frederick Hirsch
Nokia


-----Original Message-----
From: Hirsch Frederick (Nokia-TP/Boston) 
Sent: Friday, August 05, 2005 3:16 PM
To: public-ws-addressing@w3.org
Subject: Signing a wsa header - use Xpath?

Am I correct that WS-Addressing does not allow an id type attribute on
the wsa: header elements, so if I want to include one in a ds:Reference
an Xpath expression is required?

Instead of (this is all in the soap header, ds:Reference inside a
Signature inside wsse:Security header)

<wsa:MessageId id="foo">...</wsa:MessageId> ...
<ds:Reference URI="#foo">

What is needed is

<wsa:MessageId>...<wsa:MessageId>
...
<ds:Reference URI=''>
  <ds:Transforms>
       <ds:Transform
Algorithm='http://www.w3.org/2002/06/xmldsig-filter2'
 
xmlns:dsxp='http://www.w3.org/2002/06/xmldsig-filter2'>
         <dsxp:XPath
Filter='intersect'>/soap:Envelope/soap:Header/wsa:MessaegId</dsxp:XPath>
        </ds:Transform>


Is this correct?

Thanks 

regards, Frederick

Frederick Hirsch
Nokia

Received on Friday, 5 August 2005 20:12:22 UTC