Подпись по шаблону

[ipaymushkin]

Добрый день!

Интересует следующие вопросы:

1) можно ли подписывать по шаблону (аналогичный функционал есть у cryptopro browser plugin)

например: 

<SOAP-ENV:Envelope
	xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/"
	xmlns:ds="http://www.w3.org/2000/09/xmldsig#"
	xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd"
	xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd"
	xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
	<SOAP-ENV:Header>
		<wsse:Security SOAP-ENV:actor="Practice"
			xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd">
			<wsse:BinarySecurityToken EncodingType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-soap-message-security-1.0#Base64Binary" ValueType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-x509-token-profile-1.0#X509v3" wsu:Id="X509-696149CADA0C989EA48FC68AB8616A355">MIIEnDCCBEegAwIBAgIQAdXld8TmFqAAAAAUAAUAATAMBggqhQMHAQEDAgUAMIHq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</wsse:BinarySecurityToken>
			<ds:Signature
				xmlns:ds="http://www.w3.org/2000/09/xmldsig#" wsu:Id="SIG-1B4E13AE5B839C08C4E3D12522E8E1583">
				<ds:SignedInfo>
					<ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></ds:CanonicalizationMethod>
					<ds:SignatureMethod Algorithm="urn:ietf:params:xml:ns:cpxmlsec:algorithms:gostr34102001-gostr3411"></ds:SignatureMethod>
					<ds:Reference URI="#id-F144E9478111C1C2C706E96EDFD4147F1">
						<ds:Transforms>
							<ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></ds:Transform>
						</ds:Transforms>
						<ds:DigestMethod Algorithm="urn:ietf:params:xml:ns:cpxmlsec:algorithms:gostr3411"></ds:DigestMethod>
						<ds:DigestValue></ds:DigestValue>
					</ds:Reference>
				</ds:SignedInfo>
				<ds:SignatureValue></ds:SignatureValue>
				<ds:KeyInfo wsu:Id="KI-182E9A746B45FB47B5510318BA88C71DE">
					<wsse:SecurityTokenReference wsu:Id="STR-CCE4B55923435147B0829B3E14E45F9D8">
						<wsse:Reference URI="#X509-696149CADA0C989EA48FC68AB8616A355" ValueType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-x509-token-profile-1.0#X509v3"></wsse:Reference>
					</wsse:SecurityTokenReference>
				</ds:KeyInfo>
			</ds:Signature>
		</wsse:Security>
	</SOAP-ENV:Header>
	<SOAP-ENV:Body
		xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd" wsu:Id="id-F144E9478111C1C2C706E96EDFD4147F1">
	    ...
	</SOAP-ENV:Body>
</SOAP-ENV:Envelope>

2) можно ли подписывать несколькими сертификатами?