Can't validate XML Signature tag that reside on another namespace

Vote count:

0

I have a incoming soap signed request from a company like this

<soap:Envelope xmlns:soap="http://ift.tt/18hkEkn" xmlns:nns="http://ift.tt/1tcqD2U">
   <soap:Header/>
   <soap:Body>
      <ns:CompanyRequest>
         <ns:ElementToBeSigned>
            <ns:CustomSignatureTagName>
               <ns:SignedInfo>
                  <ns:CanonicalizationMethod algorithm="http://ift.tt/11kTCUR"/>
                  <ns:SignatureMethod algorithm="http://ift.tt/18jbiFB"/>
                  <ns:Reference>
                     <ns:DigestMethod algorithm="http://ift.tt/1jbsD3O"/>
                     <ns:DigestValue>dHLkPm5pcyBub3QgYSBzaWduYXR1cmGB9w0B...</ns:DigestValue>
                  </ns:Reference>
               </ns:SignedInfo>
               <ns:SignatureValue>dHLkPm5pcyBub3QgYSBzaWduYXR1cmGB...</ns:SignatureValue>
             <ns:X509Certificate>MIIExDCCAywCCQC0bmU6MB8PuTANBgkqhkiG9w0BAQUFADCBozELMAkGA1UEBhMCUEgxEDAOBgNV...</ns:X509Certificate>
            </ns:CustomSignatureTagName>
         </ns:ElementToBeSigned>
      </ns:CompanyRequest>
   </soap:Body>
</soap:Envelope>

I am trying to validate this kind of request having a custom signature tag name with namespace same as the soap envelope and got no luck. I am using Java Api to validate it.. Can you give me insights what is wrong about the xml incoming structure? Thanks in advance...

asked 45 secs ago

Ezer Wid Kruz

6

Can't validate XML Signature tag that reside on another namespace