[regrep-security] Need help with Errata in security section in RS 2.0

Sekhar,

During implementation of ebxmlrr project we have found the following
errors in the security related areas of RS 2.0.
We need to fix these in an errata within the next few weeks. I need your
help in reviewing / reolving these issues. Also if anyone else is aware
of any other issues please send the issue and how to address the issue
to me.

Thanks for treating this as a high priority. Call me at 781-942-7277 if
something needs clarification.

RS 2.0 Security Issues
-----------------------

-RS 3732

http://www.w3.org/2000/09/xmldsig/#dsa-sha1 This URL is broken and needs
a replacement

-RS 3735 and 3837 (ds:Signature should really say ds:SignedInfo. It is
ds:SignedInfo that contains the ds:CanonicalizationMethod element and
not ds:Signature directly. See attached servletReq.mime.

Also in statement below, the URL is broken. Also The ds:SignatureMethod
should not contain ds:CanonicalizationMethod.
They are siblings. It should be the ds:SignedInfo that contains the
ds:CanonicalizationMethod.

"The ds:SignatureMethod element must contain a ds:CanonicalizationMethod
element. The following Canonicalization algorithm (specified in
[XMLDSIG]) must be supported
http://www.w3.org/TR/2001/REC-xml-c14n-2001315"

-RS 3746

SignedValue should be SignatureValue


--
Regards,
Farrukh