<Signature> Element (ClickOnce Deployment)
Note
This article applies to Visual Studio 2015. If you're looking for the latest Visual Studio documentation, see Visual Studio documentation. We recommend upgrading to the latest version of Visual Studio. Download it here
Contains the necessary information to digitally sign this deployment manifest.
Syntax
<Signature>
XML signature information
</Signature>
Remarks
Signing a deployment manifest using an envelope signature is optional, but recommended. For more information about signing XML files see the World Wide Web Consortium Recommendation, "XML-Signature Syntax and Processing," described at http://www.w3.org/TR/xmldsig-core/.
If you want to sign your manifest, hashes must be provided for all files. A manifest with files that are not hashed cannot be signed, because users cannot verify the contents of unhashed files.
Example
The following code example illustrates a Signature
element in a deployment manifest used in a ClickOnce deployment.
<Signature xmlns="http://www.w3.org/2000/09/xmldsig#">
<SignedInfo>
<CanonicalizationMethod Algorithm=
"http://www.w3.org/TR/2001/REC-xml-c14n-20010315" />
<SignatureMethod Algorithm=
"http://www.w3.org/2000/09/xmldsig#rsa-sha1" />
<Reference URI="">
<Transforms>
<Transform Algorithm=
"http://www.w3.org/2000/09/xmldsig#enveloped-signature" />
</Transforms>
<DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1" />
<DigestValue>d2z5AE...</DigestValue>
</Reference>
</SignedInfo>
<SignatureValue>
4PHj6SaopoLp...
</SignatureValue>
<KeyInfo>
<X509Data>
<X509Certificate>
MIIHnTCCBoWgAwIBAgIKJY9+nwAHAAB...
</X509Certificate>
</X509Data>
</KeyInfo>
</Signature>