The Markup Security Project

dss - sample protocol exchange 1

This request/response pair illustrates the production of an enveloping XML signature from base64 encoded data.

Request

<?xml version="1.0" encoding="utf-8"?>

<dss:SignRequest Profile="urn:oasis:names:tc:dss:1.0:profile:dss_interop"
    RequestID="I301f9e0ae02801439c820bd8201f281b"
    xmlns:dss="urn:oasis:names:tc:dss:1.0:core:schema">
  <dss:OptionalInputs>
    <dss:SignatureType>urn:ietf:rfc:3275</dss:SignatureType>
    <dss:EnvelopingSignature WhichDocument="I88d9c438cd7f9a473e403a7fe08fe6d2"
        ObjId="I9328f9ae8301bc974ad73f013f47bc6f"/>
  </dss:OptionalInputs>
  <dss:InputDocuments>
    <dss:Document ID="I88d9c438cd7f9a473e403a7fe08fe6d2"
        RefType="http://www.w3.org/2000/09/xmldsig#Object"
        RefURI="I9328f9ae8301bc974ad73f013f47bc6f">
      <dss:Base64Data MimeType="text/plain">
        VG8gYmUgc2lnbmVkLg==
      </dss:Base64Data>
    </dss:Document>
  </dss:InputDocuments>
</dss:SignRequest>
    

Response

<?xml version="1.0" encoding="utf-8"?>
<dss:SignResponse RequestID="I301f9e0ae02801439c820bd8201f281b"
    Profile="urn:oasis:names:tc:dss:1.0:profile:dss_interop"
    xmlns:dss="urn:oasis:names:tc:dss:1.0:core:schema">
  <dss:Result>
    <dss:ResultMajor>
        urn:oasis:names:tc:dss:1.0:resultmajor:Success
    </dss:ResultMajor>
  </dss:Result>
  <dss:SignatureObject>
    <ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
      <ds:SignedInfo>
        <ds:CanonicalizationMethod
            Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
        <ds:SignatureMethod
            Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
        <ds:Reference URI="#I9328f9ae8301bc974ad73f013f47bc6f"
            Type="http://www.w3.org/2000/09/xmldsig#Object">
          <ds:Transforms>
            <ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
          </ds:Transforms>
          <ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>
          <ds:DigestValue>wPNpbhggGd6GOY+M7R8JGZB4/iA=</ds:DigestValue>
        </ds:Reference>
      </ds:SignedInfo>
      <ds:SignatureValue>
        S+f2UqBDji+0gY8MxGRJXsSzaPnXntD2TH2QHXv/nb+/mkKcdr3wBcZU3z9KW/I49Yyz
        3L0WRxYpygPKenG6QAmFQoAvDmfyfsF1cUC4RF/xvigaOewCM+s4XXs2H35n8b/FEfqD
        udrwQ1nZBXUM0jvudIOZYI4dt+bZ11UYuco=
      </ds:SignatureValue>
      <ds:KeyInfo>
        <ds:X509Data>
          <ds:X509Certificate>
            MIIERDCCAyygAwIBAgIBATANBgkqhkiG9w0BAQUFADCB3jELMAkGA1UEBhMCQ0gxDjAM
            BgNVBAgTBUJlcm5lMQ4wDAYDVQQHEwVCZXJuZTEfMB0GA1UEChMWVW5pdmVyc2FsIFBv
            c3RhbCBVbmlvbjEaMBgGA1UEChMRRm9yIFRlc3QgVXNlIE9ubHkxHTAbBgNVBAsTFEVs
            ZWN0cm9uaWMgUG9zdCBNYXJrMTMwMQYDVQQDEypVbml2ZXJzYWwgUG9zdGFsIFVuaW9u
            IFBpbG90IEVQTSBBdXRob3JpdHkxHjAcBgkqhkiG9w0BCQEWD0NBQWRtaW5AdXB1Lmlu
            dDAeFw0wNTAxMjUxOTU3MTFaFw0xMDAxMjQxOTU3MTFaMIHeMQswCQYDVQQGEwJDSDEO
            MAwGA1UECBMFQmVybmUxDjAMBgNVBAcTBUJlcm5lMR8wHQYDVQQKExZVbml2ZXJzYWwg
            UG9zdGFsIFVuaW9uMRowGAYDVQQKExFGb3IgVGVzdCBVc2UgT25seTEdMBsGA1UECxMU
            RWxlY3Ryb25pYyBQb3N0IE1hcmsxMzAxBgNVBAMTKlVuaXZlcnNhbCBQb3N0YWwgVW5p
            b24gUGlsb3QgRVBNIFNpZ25hdHVyZTEeMBwGCSqGSIb3DQEJARYPQ0FBZG1pbkB1cHUu
            aW50MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCt76rxkdwCDldyW0xpWgVEhmJP
            fxmovAWOhkZmiaTaRU2j83gOhVlhqL4/CIfuVMy2CNx3CNN5XomVknvt1/VyB4p9qpfU
            DQ9b3IRZk8gTSbMe+41sRnggqHadIizMkRN1p/VA8MWsJu8dPlBhCE0DsBaF3zptV2GI
            y3saM7cPPwIDAQABo4GOMIGLMAwGA1UdEwQFMAMCAQAwHQYDVR0OBBYEFHTznwFYH6CS
            8xuZZlvo+6p3eWWaMB8GA1UdIwQYMBaAFO0VydJTZFy9p5n9OT6icSir2KhQMC4GA1Ud
            HwQnMCUwI6AhoB+GHWh0dHA6Ly9jYTEudXB1LmludC9tYXN0ZXIuY3JsMAsGA1UdDwQE
            AwIHgDANBgkqhkiG9w0BAQUFAAOCAQEAMp2qzlZOxIU1LKV8mKb0pjVgfVbSLFmCgPJP
            xRnZciLY+P5sMhpdAkGQdhm67dvwBNPisz3XlnC7U/JH6mFeXDhat9mMg5LO+9KlsKqZ
            WmT9riMvCGKJeibMSyzM1sgwv3ib5/kSswDDMcEaOW5QjoytluZWt7cR4ice7aow1EF5
            XdEqNYkTErFM6rhfqO1lwg5V3Oc8SrqwnznUaXhjjTTHnsiWGtP0ip++UwKH0T0NE3CY
            HIkakGtgPd5q6LsIp4so3+cMpQGWKngf+/Dj2vag24QG7ohcXYM2y7hGhdbY34m5QzlJ
            Qr0r2H9MUsg3cne6Z+X4hcmhG67sIX1yxA==
          </ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
      <ds:Object Id="I9328f9ae8301bc974ad73f013f47bc6f">To be signed.</ds:Object>
    </ds:Signature>
  </dss:SignatureObject>

</dss:SignResponse>