Home. 
.

transparent

transparent

transparent

Altova Mailing List Archives


msxml5/6 and xmldsig

From: <gjb>
To: NULL
Date: 11/1/2005 12:09:00 PM
I am trying to create a client side digital signature in IE using JScript. 
My current JScript code works quite well when run from cscript, wscript, the 
Eclipse IDE browser, and Netscape 8.04 using the IE engine.  Using the code 
from 
http://msdn.microsoft.com/library/default.asp?url=/library/en-us/xmlsdk/html/19465f9b-b181-406c-bbae-111d0733356d.asp 
as a basis for my code.

The sign() method states:

You cannot sign any data in a non-trusted context, such as a script embedded 
in an HTML page. Doing so will result in an error. 
(http://msdn.microsoft.com/library/default.asp?url=/library/en-us/xmlsdk/html/309123e5-c5be-4435-8ef3-19802462bf7e.asp)

The error is simply "Access is denied", very helpful.

Essentially, what is happenning is the code fails when the private key 
access is attempted in IE to actually perform the signing, but it works in 
every other context.  I have tried placing the web site in the trusted sites 
zone so that the code supposedly runs in a "trusted context", I have tried 
with http and https, I have tried using a '.hta' extension, I even set the 
GUIDs for MSXML5 and MSXML6 in the registry under 
HKLM/Software/Microsoft/Ole/AppCompat/ActivationSecurityCheckExemptionList 
(the GUIDs for CLSID_MXDigitalSignature50/CLSID_MXDigitalSignature60). 
Nothing seems to fix the key access problem.  I suspect the sign() method 
itself is checking to see if the application context includes iexplorer.exe 
and simply fails if it finds that particular string in the context prior to 
attempting to access the private key.  Is there some way to work around 
this?  I am a little concerned that something this simple works in Netscape 
8 and does not work in MS IE, especially when all of this is happenning 
using ActiveX objects.  I would also like to know if there is some tentative 
date set for A redistributable that will include MXDigitalSignature.  I know 
that 5.0 is NOT redistributable but I really need a redistributable that has 
the XMLDSig functionality.  Any guidance is VERY MUCH appreciated.

V/R,
gjb 




transparent
Print
Mail
Like It
Disclaimer
.

These Archives are provided for informational purposes only and have been generated directly from the Altova mailing list archive system and are comprised of the lists set forth on www.altova.com/list/index.html. Therefore, Altova does not warrant or guarantee the accuracy, reliability, completeness, usefulness, non-infringement of intellectual property rights, or quality of any content on the Altova Mailing List Archive(s), regardless of who originates that content. You expressly understand and agree that you bear all risks associated with using or relying on that content. Altova will not be liable or responsible in any way for any content posted including, but not limited to, any errors or omissions in content, or for any losses or damage of any kind incurred as a result of the use of or reliance on any content. This disclaimer and limitation on liability is in addition to the disclaimers and limitations contained in the Website Terms of Use and elsewhere on the site.

.
.

transparent

transparent