configuration/signature_schema.xsd

   1 <?xml version="1.0" encoding="UTF-8"?>
   2 <xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema" elementFormDefault="qualified" targetNamespace="http://www.w3.org/2000/09/xmldsig#" xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
   3   <!--
   4     Relax NG Grammar for XML Signature
   5     Namespace: http://www.w3.org/2000/09/xmldsig#
   6     $Revision: 1.7 $ on $Date: 2008/07/16 18:04:37 $ by $Author: roessler $
   7
   8     Copyright 2001 The Internet Society and W3C (Massachusetts Institute
   9             of Technology, Institut National de Recherche en Informatique et en
  10             Automatique, Keio University). All Rights Reserved.
  11     http://www.w3.org/Consortium/Legal/
  12
  13     This document is governed by the W3C Software License [1] as described
  14     in the FAQ [2].
  15
  16     [1] http://www.w3.org/Consortium/Legal/copyright-software-19980720
  17     [2] http://www.w3.org/Consortium/Legal/IPR-FAQ-20000620.html#DTD
  18
  19     Constructed by hand from xmldsig-core-schema.xsd by
  20     Norman.Walsh@marklogic.com on 5 May 2008.
  21
  22     Notes:
  23
  24     You must not use the RELAX NG DTD Compatibility features with thi
  25     grammar. DTD Compatibility features, ID type attributes, and
  26     wildcard attributes are mutually exclusive.
  27
  28     The definition for the Signature element includes a SignatureType
  29     pattern. The rest of the patterns are "inline". This is a matter of
  30     style. I constructed only one "type" pattern as an example of the
  31     style, not because it's significant in the Signature pattern.
  32   -->
  33   <!-- Start Signature -->
  34   <xs:complexType name="SignatureType">
  35     <xs:sequence>
  36       <xs:element ref="ds:SignedInfo"/>
  37       <xs:element ref="ds:SignatureValue"/>
  38       <xs:element minOccurs="0" ref="ds:KeyInfo"/>
  39       <xs:element maxOccurs="unbounded" ref="ds:Object"/>
  40     </xs:sequence>
  41     <xs:attribute name="Id" type="xs:ID"/>
  42   </xs:complexType>
  43   <xs:element name="Signature" type="ds:SignatureType"/>
  44   <xs:element name="SignatureValue">
  45     <xs:complexType>
  46       <xs:simpleContent>
  47         <xs:extension base="xs:base64Binary">
  48           <xs:attribute name="Id" type="xs:ID"/>
  49         </xs:extension>
  50       </xs:simpleContent>
  51     </xs:complexType>
  52   </xs:element>
  53   <!-- Start SignedInfo -->
  54   <xs:element name="SignedInfo">
  55     <xs:complexType>
  56       <xs:sequence>
  57         <xs:element ref="ds:CanonicalizationMethod"/>
  58         <xs:element ref="ds:SignatureMethod"/>
  59         <xs:element maxOccurs="unbounded" ref="ds:Reference"/>
  60       </xs:sequence>
  61       <xs:attribute name="Id" type="xs:ID"/>
  62     </xs:complexType>
  63   </xs:element>
  64   <xs:element name="CanonicalizationMethod">
  65     <xs:complexType mixed="true">
  66       <xs:group minOccurs="0" maxOccurs="unbounded" ref="ds:anyElement"/>
  67       <xs:attribute name="Algorithm" use="required" type="xs:anyURI"/>
  68     </xs:complexType>
  69   </xs:element>
  70   <xs:element name="SignatureMethod">
  71     <xs:complexType mixed="true">
  72       <xs:choice minOccurs="0" maxOccurs="unbounded">
  73         <xs:element ref="ds:HMACOutputLength"/>
  74         <xs:group ref="ds:anyOtherElement"/>
  75       </xs:choice>
  76       <xs:attribute name="Algorithm" use="required" type="xs:anyURI"/>
  77     </xs:complexType>
  78   </xs:element>
  79   <!-- Start Reference -->
  80   <xs:element name="Reference">
  81     <xs:complexType>
  82       <xs:sequence>
  83         <xs:element minOccurs="0" ref="ds:Transforms"/>
  84         <xs:element ref="ds:DigestMethod"/>
  85         <xs:element ref="ds:DigestValue"/>
  86       </xs:sequence>
  87       <xs:attribute name="Id" type="xs:ID"/>
  88       <xs:attribute name="URI" type="xs:anyURI"/>
  89       <xs:attribute name="Type" type="xs:anyURI"/>
  90     </xs:complexType>
  91   </xs:element>
  92   <xs:element name="Transforms">
  93     <xs:complexType>
  94       <xs:sequence>
  95         <xs:element maxOccurs="unbounded" ref="ds:Transform"/>
  96       </xs:sequence>
  97     </xs:complexType>
  98   </xs:element>
  99   <xs:element name="Transform">
 100     <xs:complexType>
 101       <xs:choice minOccurs="0" maxOccurs="unbounded">
 102         <xs:group ref="ds:anyOtherElement"/>
 103         <xs:element ref="ds:XPath"/>
 104       </xs:choice>
 105       <xs:attribute name="Algorithm" use="required" type="xs:anyURI"/>
 106     </xs:complexType>
 107   </xs:element>
 108   <xs:element name="XPath" type="xs:string"/>
 109   <!-- End Reference -->
 110   <xs:element name="DigestMethod">
 111     <xs:complexType>
 112       <xs:group minOccurs="0" maxOccurs="unbounded" ref="ds:anyOtherElement"/>
 113       <xs:attribute name="Algorithm" use="required" type="xs:anyURI"/>
 114     </xs:complexType>
 115   </xs:element>
 116   <xs:element name="DigestValue" type="ds:DigestValueType"/>
 117   <xs:simpleType name="DigestValueType">
 118     <xs:restriction base="xs:base64Binary"/>
 119   </xs:simpleType>
 120   <!-- End SignedInfo -->
 121   <!-- Start KeyInfo -->
 122   <xs:element name="KeyInfo">
 123     <xs:complexType mixed="true">
 124       <xs:choice minOccurs="0" maxOccurs="unbounded">
 125         <xs:element ref="ds:KeyName"/>
 126         <xs:element ref="ds:KeyValue"/>
 127         <xs:element ref="ds:RetrievalMethod"/>
 128         <xs:element ref="ds:X509Data"/>
 129         <xs:element ref="ds:PGPData"/>
 130         <xs:element ref="ds:SPKIData"/>
 131         <xs:element ref="ds:MgmtData"/>
 132         <xs:group ref="ds:anyOtherElement"/>
 133       </xs:choice>
 134       <xs:attribute name="Id" type="xs:ID"/>
 135     </xs:complexType>
 136   </xs:element>
 137   <xs:element name="KeyName" type="xs:string"/>
 138   <xs:element name="MgmtData" type="xs:string"/>
 139   <xs:element name="KeyValue">
 140     <xs:complexType mixed="true">
 141       <xs:choice minOccurs="0" maxOccurs="unbounded">
 142         <xs:element ref="ds:DSAKeyValue"/>
 143         <xs:element ref="ds:RSAKeyValue"/>
 144         <xs:group ref="ds:anyOtherElement"/>
 145       </xs:choice>
 146     </xs:complexType>
 147   </xs:element>
 148   <xs:element name="RetrievalMethod">
 149     <xs:complexType>
 150       <xs:sequence>
 151         <xs:element minOccurs="0" ref="ds:Transforms"/>
 152       </xs:sequence>
 153       <xs:attribute name="URI" use="required" type="xs:anyURI"/>
 154       <xs:attribute name="Type" type="xs:anyURI"/>
 155     </xs:complexType>
 156   </xs:element>
 157   <!-- Start X509Data -->
 158   <xs:element name="X509Data">
 159     <xs:complexType>
 160       <xs:choice minOccurs="0" maxOccurs="unbounded">
 161         <xs:element ref="ds:X509IssuerSerial"/>
 162         <xs:element ref="ds:X509SKI"/>
 163         <xs:element ref="ds:X509SubjectName"/>
 164         <xs:element ref="ds:X509Certificate"/>
 165         <xs:element ref="ds:X509CRL"/>
 166         <xs:group ref="ds:anyOtherElement"/>
 167       </xs:choice>
 168     </xs:complexType>
 169   </xs:element>
 170   <xs:element name="X509IssuerSerial">
 171     <xs:complexType>
 172       <xs:sequence>
 173         <xs:element ref="ds:X509IssuerName"/>
 174         <xs:element ref="ds:X509SerialNumber"/>
 175       </xs:sequence>
 176     </xs:complexType>
 177   </xs:element>
 178   <xs:element name="X509IssuerName" type="xs:string"/>
 179   <xs:element name="X509SerialNumber" type="xs:integer"/>
 180   <xs:element name="X509SKI" type="xs:base64Binary"/>
 181   <xs:element name="X509SubjectName" type="xs:string"/>
 182   <xs:element name="X509Certificate" type="xs:base64Binary"/>
 183   <xs:element name="X509CRL" type="xs:base64Binary"/>
 184   <!-- End X509Data -->
 185   <!-- Begin PGPData -->
 186   <xs:element name="PGPData">
 187     <xs:complexType>
 188       <xs:choice>
 189         <xs:sequence>
 190           <xs:element ref="ds:PGPKeyID"/>
 191           <xs:element minOccurs="0" ref="ds:PGPKeyPacket"/>
 192           <xs:group minOccurs="0" maxOccurs="unbounded" ref="ds:anyOtherElement"/>
 193         </xs:sequence>
 194         <xs:sequence>
 195           <xs:element ref="ds:PGPKeyPacket"/>
 196           <xs:group minOccurs="0" maxOccurs="unbounded" ref="ds:anyOtherElement"/>
 197         </xs:sequence>
 198       </xs:choice>
 199     </xs:complexType>
 200   </xs:element>
 201   <xs:element name="PGPKeyID" type="xs:base64Binary"/>
 202   <xs:element name="PGPKeyPacket" type="xs:base64Binary"/>
 203   <!-- End PGPData -->
 204   <!-- Begin SPKIData -->
 205   <xs:element name="SPKIData">
 206     <xs:complexType>
 207       <xs:sequence maxOccurs="unbounded">
 208         <xs:element ref="ds:SPKISexp"/>
 209         <xs:group minOccurs="0" maxOccurs="unbounded" ref="ds:anyOtherElement"/>
 210       </xs:sequence>
 211     </xs:complexType>
 212   </xs:element>
 213   <xs:element name="SPKISexp" type="xs:base64Binary"/>
 214   <!-- End SPKIData -->
 215   <!-- End KeyInfo -->
 216   <!-- Start Object (Manifest, SignatureProperty) -->
 217   <xs:element name="Object">
 218     <xs:complexType mixed="true">
 219       <xs:sequence>
 220         <xs:element ref="ds:SignatureProperties"/>
 221         <xs:group minOccurs="0" maxOccurs="unbounded" ref="ds:anyElement"/>
 222       </xs:sequence>
 223       <xs:attribute name="Id" type="xs:ID"/>
 224       <xs:attribute name="MimeType" type="xs:string"/>
 225       <xs:attribute name="Encoding" type="xs:anyURI"/>
 226     </xs:complexType>
 227   </xs:element>
 228   <xs:element name="Manifest">
 229     <xs:complexType>
 230       <xs:sequence>
 231         <xs:element maxOccurs="unbounded" ref="ds:Reference"/>
 232       </xs:sequence>
 233       <xs:attribute name="Id" type="xs:ID"/>
 234     </xs:complexType>
 235   </xs:element>
 236   <xs:element name="SignatureProperties">
 237     <xs:complexType>
 238       <xs:sequence>
 239         <xs:element maxOccurs="unbounded" ref="ds:SignatureProperty"/>
 240       </xs:sequence>
 241       <xs:attribute name="Id" type="xs:ID"/>
 242     </xs:complexType>
 243   </xs:element>
 244   <xs:element name="SignatureProperty">
 245     <xs:complexType>
 246       <xs:group maxOccurs="unbounded" ref="ds:anyOtherElement"/>
 247       <xs:attribute name="Id" type="xs:ID"/>
 248       <xs:attribute name="Target" use="required" type="xs:anyURI"/>
 249     </xs:complexType>
 250   </xs:element>
 251   <!-- End Object (Manifest, SignatureProperty) -->
 252   <!-- Start Algorithm Parameters -->
 253   <xs:element name="HMACOutputLength" type="xs:integer"/>
 254   <!-- Start KeyValue Element-types -->
 255   <xs:element name="DSAKeyValue">
 256     <xs:complexType>
 257       <xs:sequence>
 258         <xs:sequence minOccurs="0">
 259           <xs:element ref="ds:P"/>
 260           <xs:element ref="ds:Q"/>
 261         </xs:sequence>
 262         <xs:element minOccurs="0" ref="ds:G"/>
 263         <xs:element ref="ds:Y"/>
 264         <xs:element minOccurs="0" ref="ds:J"/>
 265         <xs:sequence minOccurs="0">
 266           <xs:element ref="ds:Seed"/>
 267           <xs:element ref="ds:PgenCounter"/>
 268         </xs:sequence>
 269       </xs:sequence>
 270     </xs:complexType>
 271   </xs:element>
 272   <xs:element name="P" type="ds:CryptoBinary"/>
 273   <xs:element name="Q" type="ds:CryptoBinary"/>
 274   <xs:element name="G" type="ds:CryptoBinary"/>
 275   <xs:element name="Y" type="ds:CryptoBinary"/>
 276   <xs:element name="J" type="ds:CryptoBinary"/>
 277   <xs:element name="Seed" type="ds:CryptoBinary"/>
 278   <xs:element name="PgenCounter" type="ds:CryptoBinary"/>
 279   <xs:simpleType name="CryptoBinary">
 280     <xs:restriction base="xs:base64Binary"/>
 281   </xs:simpleType>
 282   <xs:element name="RSAKeyValue">
 283     <xs:complexType>
 284       <xs:sequence>
 285         <xs:element ref="ds:Modulus"/>
 286         <xs:element ref="ds:Exponent"/>
 287       </xs:sequence>
 288     </xs:complexType>
 289   </xs:element>
 290   <xs:element name="Modulus" type="ds:CryptoBinary"/>
 291   <xs:element name="Exponent" type="ds:CryptoBinary"/>
 292   <!-- End KeyValue Element-types -->
 293   <!-- End Signature -->
 294   <!-- Definitions for the *any* wild card and the *any other* wildcard -->
 295   <xs:attributeGroup name="anyAttribute">
 296     <xs:anyAttribute processContents="skip"/>
 297   </xs:attributeGroup>
 298   <xs:group name="anyElement">
 299     <xs:sequence>
 300       <xs:any processContents="skip"/>
 301     </xs:sequence>
 302   </xs:group>
 303   <xs:group name="anyOtherElement">
 304     <xs:choice>
 305       <xs:any namespace="##other" processContents="skip"/>
 306       <xs:any namespace="##local" processContents="skip"/>
 307     </xs:choice>
 308   </xs:group>
 309 </xs:schema>
 310 <!-- EOF -->