Changes between Version 14 and Version 15 of T12_Security/WS-Security

Timestamp:

06/09/06 14:35:22 (13 years ago)

Author:

pjkersha

Comment:

--

T12_Security/WS-Security

@@ -53 +53 @@
 The current status (01/09/06) is a working web service with `SignatureHandler` class signing/verifying messages to and from client and server.
 
+==== XML libraries, XPath and Canonicalization ====
+ZSI provides an !ElementProxy class interface for XML handling for SOAP messages.  This inherits from a MessageInterface class.  This would seem to enable the underlying Python XML libraries used to be changed easily.  By default it uses !PyXML DOM library.  pyGridWare makes use of the 4Suite add-ons for extra performance.
+
+Implementations for XPath and Canonicalization are important factors for consideration.  There is a DOM based canonicalization algorithm available with ZSI.  - Doesn't work with mini-dom?? -
+
+ElementTree has been used project wide for NDG, prefered for its fast performance and pythonic style interface.  However, there doesn't appear to be a canonicalization algorithm available for it or XPath support for attribute searches.  `findall` can be used to search for elements but not element attributes.  The latter is important with WS-Security for locating elements in the SOAP message for signatures or encryption.
+
+pyGridWare includes an !ElementTree based !ElementProxy class but this appears to be incomplete.  There is no canonicalization method and other issues resolve.
+
+lxml is an implementation of the !ElementTree API but using libxml2 and xslt underneath (http://www.thescripts.com/forum/thread162575.html).  XPath and canonicalization are supported.  Performance appears to be comparable.
+
+http://codespeak.net/lxml/
+
+The drawback is the addition of more dependencies.  A core objective is to reduce the number of dependencies :/
+
 == XML Encryption ==
 Tackle digital signature first :)