Signing XML Files -- dotnet security

Dominick Baier
10/21/2004 10:46:39 AM

have a look at the new msdn magazine issue

msdn.microsoft.com/msdnmag

---
Dominick Baier - DevelopMentor
http://www.leastprivilege.com

nntp://news.microsoft.com/microsoft.public.dotnet.security/<uHxGt22tEHA.1308@tk2msftngp13.phx.gbl>

Hello,

I need some help w/ signing XML files. I've been looking at the MSDN doc's
examples in SignedXml constructor and in DataObject Class and not getting it
to work. Does anyone have any good example code that takes a well formed XML
file and signs it? The examples don't do that. It appears the signature
verification code in the examples would work, if I could get the file
properly signed in the 1st place. Any help would be appreciated.

TIA,

--
John C. Bowman
Software Engineer
Thermo Electron Scientific Instruments Div.
<Remove this before reply>john.bowman@thermo.com

John Bowman
10/21/2004 4:09:53 PM

Dominick,

Thanks for the link. The code presented appears to properly sign my test
well formed XML file (which is better than the other examples I could find).
When it gets to the line:

if(sig.CheckSignature(key)) ...

The article has the following comment:
//Verify the signature, assume the public key is in the key variable

I'm still too much of a newbie at this. What code am I supposed to use to
set the value of key and to what? This would seem rather important to the
entire process and it's left out of the article!?

John

[quoted text, click to view]

dotnet security : Signing XML Files