Re: [xmlsec] XML Sig verification and missing SignedInfo Reference elment

2013-09-16 Thread Aleksey Sanin
No idea what was signed - an empty Signature element? Makes no sense to me Aleksey On 9/16/13 1:30 PM, Tom Wood wrote: > Aleksey, > Thanks for the swift reply. The section 4.3, the "one or more references" > statement would appear definitive. > Also, I just found section 2.0, Signature Overview

Re: [xmlsec] XML Sig verification and missing SignedInfo Reference elment

2013-09-16 Thread Aleksey Sanin
Section 4.3 "The structure of SignedInfo includes the canonicalization algorithm, a signature algorithm, and one or more references." And the schema: Schema Definition: make me think that Reference element is required. As a side note, I

Re: [xmlsec] XML Sig verification failure due to Windows .NET c14n and libxml2 c14n difference

2012-07-18 Thread Aleksey Sanin
For example, check this one http://www.aleksey.com/pipermail/xmlsec/2008/008517.html Aleksey On 7/18/12 8:30 PM, Aleksey Sanin wrote: > I haven't heard about any problems with Java :) > > You can google for ".net c14n compatibility" to see results > > Aleksey > > > On 7/18/12 7:39 PM, Tom W

Re: [xmlsec] XML Sig verification failure due to Windows .NET c14n and libxml2 c14n difference

2012-07-18 Thread Aleksey Sanin
I haven't heard about any problems with Java :) You can google for ".net c14n compatibility" to see results Aleksey On 7/18/12 7:39 PM, Tom Wood wrote: > Aleksey, >Thanks so much for the quick answer. That certainly explains everything. > Seems like a "dirty little secret". Very disappoint

Re: [xmlsec] XML Sig verification failure due to Windows .NET c14n and libxml2 c14n difference

2012-07-18 Thread Aleksey Sanin
Well, since I wrote c14n code for libxml2 I can tell you that this code is doing the right thing :) This is actually a known bug that was discovered 10 years ago or so. .NET implementation doesn't follow the spec but they refuse to change it since it might break backward compatibility with old brok

Re: [xmlsec] XML Sig crashes....

2006-02-25 Thread Aleksey Sanin
The section seems to be incomplete. There are problems with different versions of C runtime used in different libraries. I think it should be mentioned here. Right. Added a sentence about this: The first one occurs in its single-threaded and multithreaded variant, which gives three different r

Re: [xmlsec] XML Sig crashes....

2006-02-25 Thread Dmitry Belyavsky
Greetings! On Thu, 23 Feb 2006, Aleksey Sanin wrote: > > > > The program crashes on the call to the function > > xmlDocDump(stdout, doc); > > > > Section 2.7 from the FAQ http://www.aleksey.com/xmlsec/faq.html The section seems to be incomplete. There are problems with different versions

Re: [xmlsec] XML Sig crashes....

2006-02-24 Thread Daniel Veillard
On Fri, Feb 24, 2006 at 10:15:06AM -0800, Yee Hsu wrote: > > Um... thanks, but I don't think that is the case. > > I set it up to use Multithreaded DLL /Md (in release) > And it still crashes. > > I stripped down every code until I get this piece... > And it STILL crashes. [...] >

RE: [xmlsec] XML Sig crashes....

2006-02-24 Thread Yee Hsu
ssage- From: Aleksey Sanin [mailto:[EMAIL PROTECTED] Sent: Thursday, February 23, 2006 6:27 PM To: Yee Hsu Cc: xmlsec@aleksey.com Subject: Re: [xmlsec] XML Sig crashes > > The program crashes on the call to the function > xmlDocDump(stdout, doc); > Section 2.7

Re: [xmlsec] XML Sig crashes....

2006-02-23 Thread Aleksey Sanin
> > The program crashes on the call to the function > xmlDocDump(stdout, doc); > Section 2.7 from the FAQ http://www.aleksey.com/xmlsec/faq.html Aleksey ___ xmlsec mailing list xmlsec@aleksey.com http://www.aleksey.com/mailman/listinfo/xmlsec

[xmlsec] XML Sig crashes....

2006-02-23 Thread Yee Hsu
  Hi   I am using the sample code in http://www.aleksey.com/xmlsec/api/xmlsec-examples-sign-dynamimc-template.html To get my XML signature…..   I assumed I did everyuthing right.   I pretty much copy/paste the code, I included every library that needs to be added. Everything compi

Re: [xmlsec] XML Sig

2002-11-01 Thread Aleksey Sanin
Gregor Ibic wrote: If you re using xmlsec command line utility tool then you might use "--print-all" option to see There is no similar option. I recompiled xmlsec from source v 0.10. Using it under win32 platform but also on linux. Yes, you are right. This is an option for the verif

Re: [xmlsec] XML Sig

2002-11-01 Thread Aleksey Sanin
If you re using xmlsec command line utility tool then you might use "--print-all" option to see what exactly XMLSec digests and signs. I know almost nothing about MS Crypto API. Does it supports XMLDsig or it's only low level crypto functions (rsa/dsa/hmac/sha/...)? In the second case, I don't

RE: [xmlsec] XML Sig

2002-10-31 Thread Gregor Ibic
Hi, Aleksey! Sure Im interesting in participating with crpypto abstration. Have been doing a lot of crypro stuff with different API's for a long time (MS cryptoapi, cryptlib, openssl, ...) so probably I could help. But for this xmlsig Im really puzzled. Let use this xml for test. Im verifying dig

Re: [xmlsec] XML Sig

2002-10-31 Thread Aleksey Sanin
Hi, Gregor! I assume that you are asking not about cannonicalization but about signing a given Object. There are multiple ways to sign particular part of the XML document (i.e. sign its digest) using an XPath transofrm(s). I think you'll find useful to read annotated example from the XMLDSig sp

[xmlsec] XML Sig

2002-10-31 Thread Gregor Ibic
Hi! Im writing a xmlsig with MS cryptoapi support. I use your library for verification of digests and signatures. It turns out that I have do redo some of your work and now Im stuck with proper canonization. How can I embed a data object in Signature element and request to canonize it. I found out