digital signature - What certificate do I buy to sign XML? -
we have web service exchanges data via xml document vendor. each vendor needs digitally sign xml document ensure integrity of data transmitted audit purposes. unclear type of certificate need buy major third-party ca's meet requirement? code signing seems right approach, xml not listed on of sites. can provide guidance on this?
you need x.509 certificate (they're x.509 certs) includes "digital signature" 1 of values in "key usage" field. known digital signature cert.
while single x.509 cert can include many different uses in "key usage" field, certification authorities (ca) issue certs single or closely related usage. see possible key usage values microsoft , section 4.2.1.3 of standard.
most cas sell digital signature cert they're hard find since not top sellers (the certs ssl big sellers).
here's 1 ca lists them out nicely: globalsign
added: don't want or need code signing certificate.
also, should check how recipient verify digital signature , trust chain, if needed. eg may able use self-signed certificate if have established trust relationship web service.
Comments
Post a Comment