XML Security Tools Overview

All wizards and commands of the XML Security Tools can be accessed via the context menu which is available in different XML editors and views.

You can either select exactly one XML document in the Package Explorer or Navigator. Or you can access all XML security functionality via the context menu in an active XML editor.

XML Security Tools context menu

The context menu always stays the same, but when you launch the Signature or Encryption wizard via the Package Explorer or Navigator it is impossible to use Selection as the resource to secure. This is impossible with Quick Signature and Quick Encryption too.

In order to sign or encrypt a text selection this selection has to exist before the corresponding wizard is called from inside an editor. And the text selection has to be well-formed. This mens, that the start and end tag has to be included in the text selection. Any element content can be secured. However it is impossible to sign or encrypt an attribute only. In case your text selection does not match these requirements the Selection radio button in the wizard will be disabled. If this happens you can either exit the wizard and change the text selection, secure the whole document or enter/ select an XPath expression.

Calling the Signature Wizard or the Encryption Wizard from inside an editor activates the Eclipse undo and redo functionality. Be aware that this can cause security concerns since it is easy to decrypt an XML document after encrypting it simply by using undo functionality. In case you call one of the mentioned wizards via the Package Explorer or Navigator any changes by the wizard will be directly written into the file, without any undo and redo functionality.