OK, I added stdout and stderr to http://www.cs.wisc.edu/~alderman/xsec/
-Ian On Tue, 20 Jul 2004, Berin Lautenbach wrote: > Ian, > > Ouch. > > Can you send me a copy of the resulting XML file with <Signature> > included? (Quicker than me setting up a project to test.) > > Cheers, > Berin > > > Ian Alderman wrote: > > I was able to make some progress on debugging this. > > > > Debugging by printing the SignedInfo bytes as they get hashed (in > > TXFMSHA1.cpp), I was able to determine that these bytes are different > > when they get signed than they are when they get verified (and so the > > hash is also different). Specifically, if I use the following > > stylesheet, some of the "select" attributes (which happen to be second > > attributes) get discarded. > > > > My stylesheet and code are here: > > http://www.cs.wisc.edu/~alderman/xsec/ > > > > -Ian > > > >> It would appear that the transform is being applied correctly; the > >> digest is the same as is produced by the Java library, but the > >> signature is different (the Java library signature verifies). > > > > > > > > >
