Re: [xmlsec] Signaute that does not sign a node

2020-11-30 Thread Timothy Legge
Thanks, I'll check it out. On Mon, Nov 30, 2020 at 1:17 PM Aleksey Sanin wrote: > > For cases like this, XML Dsig spec has Object elements: > > https://www.w3.org/TR/xmldsig-core1/#sec-Object > > That can be used to validate the digest w/o invalidating > the signature itself if something goes

Re: [xmlsec] Signaute that does not sign a node

2020-11-30 Thread Aleksey Sanin
For cases like this, XML Dsig spec has Object elements: https://www.w3.org/TR/xmldsig-core1/#sec-Object That can be used to validate the digest w/o invalidating the signature itself if something goes wrong. Aleksey On 11/30/20 8:46 AM, Timothy Legge wrote: Hi Aleksey That does make sense to

Re: [xmlsec] Signaute that does not sign a node

2020-11-30 Thread Timothy Legge
Hi Aleksey That does make sense to me. I don't have full information about the original XML file so I can't say if it was a problem with what was provided to me. I am working on perl's XML::Sig and this case caught me by surprise. I will need to get some more information on where and how the

Re: [xmlsec] Signaute that does not sign a node

2020-11-30 Thread Aleksey Sanin
Hi Tim, I believe that technically inability to resolve a URI for a Reference (e.g. ID in your case) should result in a failure for calculating digest thus making the signature invalid. Best, Aleksey On 11/25/20 7:31 PM, Timothy Legge wrote: Hi I recently had a file that had three