On 11/11/2004, at 10:19, Centeno Martinez, Fernando wrote:
Hello
I was testing the new xml security version 1.2, and I've found a strange thing.
I was verifying a file. This file had got an incorrect signature with previous versions, and now with the new version the verify says the signature is correct. I don't know why???
I'm attaching the file, and I'd be very grateful if somebody could explain me what's happening
Thanks for all
Fernando Centeno
Regards,
<prueba.xml>
Hi Fernando,
First of all how this signature was created, was it tampered or it just a good one? Regarding the changes from 1.1 there are at least one obscure bug in the c14n code that was fixed from 1.1, but as the c14n was rewritten other things can be fixed. If it was a wrong signature, then We'll need to see more carefully but I think that is unlikely.
Waiting for your answers,
Raul
htpp://r-bg.com
