OK, I added stdout and stderr to http://www.cs.wisc.edu/~alderman/xsec/

-Ian

On Tue, 20 Jul 2004, Berin Lautenbach wrote:

> Ian,
> 
> Ouch.
> 
> Can you send me a copy of the resulting XML file with <Signature> 
> included?  (Quicker than me setting up a project to test.)
> 
> Cheers,
>       Berin
> 
> 
> Ian Alderman wrote:
> > I was able to make some progress on debugging this.
> > 
> > Debugging by printing the SignedInfo bytes as they get hashed (in 
> > TXFMSHA1.cpp), I was able to determine that these bytes are different 
> > when they get signed than they are when they get verified (and so the 
> > hash is also different).  Specifically, if I use the following 
> > stylesheet, some of the "select" attributes (which happen to be second 
> > attributes) get discarded.
> > 
> > My stylesheet and code are here:
> > http://www.cs.wisc.edu/~alderman/xsec/
> > 
> > -Ian
> > 
> >> It would appear that the transform is being applied correctly; the 
> >> digest is the same as is produced by the Java library, but the 
> >> signature is different (the Java library signature verifies).
> > 
> > 
> > 
> > 
> 

Reply via email to