<Signature> Element (ClickOnce Deployment)
The new home for Visual Studio documentation is Visual Studio 2017 Documentation on docs.microsoft.com.
The latest version of this topic can be found at <Signature> Element (ClickOnce Deployment).
Contains the necessary information to digitally sign this deployment manifest.
<Signature>
XML signature information
</Signature>
Signing a deployment manifest using an envelope signature is optional, but recommended. For more information about signing XML files see the World Wide Web Consortium Recommendation, "XML-Signature Syntax and Processing," described at http://www.w3.org/TR/xmldsig-core/.
If you want to sign your manifest, hashes must be provided for all files. A manifest with files that are not hashed cannot be signed, because users cannot verify the contents of unhashed files.
The following code example illustrates a Signature element in a deployment manifest used in a ClickOnce deployment.
<Signature xmlns="http://www.w3.org/2000/09/xmldsig#">
<SignedInfo>
<CanonicalizationMethod Algorithm=
"http://www.w3.org/TR/2001/REC-xml-c14n-20010315" />
<SignatureMethod Algorithm=
"http://www.w3.org/2000/09/xmldsig#rsa-sha1" />
<Reference URI="">
<Transforms>
<Transform Algorithm=
"http://www.w3.org/2000/09/xmldsig#enveloped-signature" />
</Transforms>
<DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1" />
<DigestValue>d2z5AE...</DigestValue>
</Reference>
</SignedInfo>
<SignatureValue>
4PHj6SaopoLp...
</SignatureValue>
<KeyInfo>
<X509Data>
<X509Certificate>
MIIHnTCCBoWgAwIBAgIKJY9+nwAHAAB...
</X509Certificate>
</X509Data>
</KeyInfo>
</Signature>