ACTIONSCRIPT 3 Developer’s Guide en

ACTIONSCRIPT 3.0 DEVELOPER’S GUIDE
XML signature validation in AIR
Package Classes
flash.security XMLSignatureValidator
flash.events Event
Using the XML signature validation classes
Adobe AIR 1.5 and later
IURIDereferencer (interface)
XMLSignatureValidator string constants are defined in the following classes:
ReferencesValidationSetting
RevocationCheckSettings
SignatureStatus
SignerTrustSettings
ErrorEvent
To use the XMLSignatureValidator class to validate an XML signature, you must:
Create an XMLSignatureValidator object
Provide an implementation of the IURIDereferencer interface. The XMLSignatureValidator object calls the
IURIDereferencer dereference() method, passing in the URI for each reference in a signature. The
dereference() method must resolve the URI and return the referenced data (which could be in the same
document as the signature, or could be in an external resource).
Set the certificate trust, revocation checking, and reference validation settings of the XMLSignatureValidator object
as appropriate for your application.
Add event listeners for the complete and error events.
Call the verify() method, passing in the signature to validate.
Handle the complete and error events and interpret the results.
The following example implements a validate() function that verifies the validity of an XML signature. The
XMLSignatureValidator properties are set such that the signing certificate must be in the system trust store, or chain
to a certificate in the trust store. The example also assumes that a suitable IURIDereferencer class named
XMLDereferencer exists.
Last updated 6/6/2012
856