Korean Identity Management(KIM)

title; XMLdsig implementations for scripting language
link; http://identitymeme.org/archives/2006/12/20/xmldsig-implementations-for-scripting-languages/

XML Signature는 SAML이나 ID-WSF와 같은 XML 기반의 메시지를 작성할 때 기본으로 요구되는 기능입니다. JAVA나 C를 위한 오픈 소스는 제공되고 있지만, 다른 언어로 제공되는 것은 본 적이 없었습니다. 그런데 SourceForge에서 Ruby, Python, PHP, Perl로 XML Signature를 제공하는 프로젝트가 있군요.

XMLsig for Dynamic Languages (Ruby, Python, PHP and Perl)
http://xmlsig.sourceforge.net/  

Now, I hear that some in the scripter community perhaps won’t like the XMLsig package because it is scripting languages wrapped around C wrapped around the xmlsec library (http://www.aleksey.com/xmlsec/), rather than a “native” scripting-language implementation, which is what Rob Richard’s apparently is. Well, time will tell, and in any case, it is good to see this base beginning to get covered.

native 코드가 아니라 C로 구현된 xmlsec library를 랩핑한 것이군요. 하지만 스크립트 언어에서 사용할 수 있는 것만으로도 충분히 도움 됩니다.

John Kemp points out that he wrote up a brief HowTo paper on writing essentially a library similar to XMLsig-for-Dynamic-Langs, for PHP, back in April 2006. Since Aleksey Sanin has already done the work of implementing XMLdsig, it seems to me to make sense to take advantage of it. Here’s JohnK’s material…

PHP XML Signatures
http://appliedlife.blogspot.com/2006/04/php-xml-signatures.html

XML Signatures in PHP
http://web.mac.com/john.kemp/php-xml-sig.html  

Web2.0 어플리케이션을 작성할 때 쉽게 XML 메시지를 주고받고, XMLSignature로 안전하게 메시지를 교환해 보시길 바랍니다.