Handler problem with signatures

Question

I am trying to add a signature to SOAP messages in an Axis handler. The signature is a byte[]. I have tried to convert the byte[] to a string and then add it to the SOAP header, but the verification always fail.
Does anyone know how to add a byte[] to a SOAP message as an SOAPElement?
My code here:
Signing:
byte[] realSig = rsa.sign();
          //Object sig = org.apache.axis.utils.ArrayUtil.convertArrayToObject(realSig,java.lang.Class.class );
          String sig = new String (realSig);
          String certificate = new String (cert.getEncoded());
          //Object sig = org.apache.axis.utils.ArrayUtil.convertArrayToObject(realSig,java.lang.Class.class );
          SOAPHeaderElement sigElem = new SOAPHeaderElement(XMLUtils
                    .StringToElement(SOAPSECNS, "sig", sig));
          se.addHeader(sigElem);
          SOAPHeaderElement certElem = new SOAPHeaderElement(XMLUtils
                    .StringToElement(SOAPSECNS, "cert", certificate));
          se.addHeader(certElem);
and verify:
SOAPMessage sm = ((org.apache.axis.MessageContext) messageC)
                    .getMessage();
          SOAPEnvelope se = (SOAPEnvelope) sm.getSOAPPart().getEnvelope();
          Element soapSignatureElement = (Element) se.getHeader().getElementsByTagNameNS(SOAPSECNS, "sig").item(0);
          System.out.println("sig value: "+soapSignatureElement.getNodeValue());
                                                       // code
          Element certificateElem = (Element) se.getHeader().getElementsByTagNameNS(SOAPSECNS, "cert").item(0);
          if (soapSignatureElement == null) {
               System.out.println("The message hasn't been signed");
               return false;
          System.out.println(certificateElem.getNodeValue());
          byte[] sig = certificateElem.getNodeValue().getBytes();
          byte[] cert = soapSignatureElement.getNodeValue().getBytes();
The signature code is from Sun's tutorial for signature.
Thanks in advance.
Message was edited by:
minto
Message was edited by:
minto
Message was edited by:
minto

Answer 1

I am trying to do something similar: create a form in Acrobat X that can be signed by someone using Reader.  I created the digital signature box and enabled the additional features, then sent it to some folks (myself included) to see if we could sign and return it.  When I opened in Reader and clicked into the signature block, it initially said the security settings prevented signatures, but I was actually able to sign it using the Sign tab at the top (had to create a digital signature and everything -- no problem).  Then I submitted the form (emailed it back to myself at work) as an .fdf and exported the data into an Excel spreadsheet, but the Signature "data" field was blank.  The field was there, but there was no sign that it had been signed.  Am I missing something?
     Also, although much less important, what defines the order of the data fields in that Excel file?  I would have thought it was the order shown in edit mode in Acrobat X, but that's not the case.  Any idea?
Thanks in advance.