Have Geek Brain

XML Signing in a Web Application

We are developing a web application for electronic banking for a small bank (up to 20,000 clients / users). We have to implement digital signatures with X509 certificates (issued by CAs on USB tokens) to sign payment data. We tried using CAPICOM but it seems to work poorly with Windows Vista (haven't tried it with Win 7). Another issue is that the main banking system can only handle Xml digital signatures, so we have to sign XML documents (not just bulk formatted text data like CAPICOM and the Crypto Win32 API).

So my questions are:

  • Do any of you have similar problems and how did they solve it?

  • Is there a plug-in, library, component, or external tool (for Internet Explorer and / or Fire Fox) that supports XML Digital Signatures in a web application?

  • Can you recommend some of these products and write something about your experience with them?

+1


a source to share


3 answers


I worked for an IT consulting company and at the time we were using Ubi Sign ActiveX to sign XML in Ubisecure web applications (www.ubisecure.com). Now I couldn't find information about this product on my website, so try emailing them. Also you can try this ActiveX component I found on the internet. This is the name of the XSign ActiveX XML Signature Component from Lizard Labs (www.lizardl.com). Haven't tried this but the author says it works great.



+1


a source


See types in System.Security.Cryptography.Xml

namespace , especially SignedXml

class .



+1


a source


XML Signature Applet is a software component that allows you to create an XML digital signature in web applications. XML Signature Apple is a simple Java applet for digitally signing XML documents using X.509 digital certificates stored in the system certificate store. This applet accepts XML data and generates an envelope representation of an XMLDsig signature.

Found it here:

http://www.digisecsolutions.com/

+1


a source






More articles:


All Articles