XML Digital Signature and XML Canonicalization
<oXygen/> includes a tool for the creation and checking of digital signatures for both
enveloped and detached signatures. The enveloped signatures are stored in the signed
document, while the detached ones are stored in a separate file.
To sign a document you need to import your private key in a key store of type JKS or
PCKS12. If you already have a Java source signing code certificate, you can use it from
<oXygen/> to sign your documents. If you are using Microsoft Authenticode, check the
documentation provided by the issuer of your certificate for instructions regarding the
conversion to one of the above keystore types.
It is also possible to transform an XML document into the
canonical form, save it and then use other signing tool if you do not have a certificate
that can be converted to the supported formats.
|