I'm attaching one XML file with this mail. When I remove root element signature is valid, but if I don't signature is invalid. Root tag is not signed. What is wrong?
Thank you,
Milan
<<...>>
<?xml version="1.0" encoding="UTF-8" standalone="no" ?><ts:TimeStampResponse xmlns:ts="http://www.entrust.com/schemas/timestamp-protocol-20020207";><ts:StatusInfo status="granted"/><dsig:Signature xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"; Id="TimeStampToken"><dsig:SignedInfo><dsig:CanonicalizationMethod Algorithm="http://www.w3.org/TR/2001/REC-xml-c14n-20010315"/><dsig:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/><dsig:Reference URI="#TimeStampInfo-FE2498DDB4B1A820C90000000000000001"><dsig:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><dsig:DigestValue>Roz5a/XMfsLTCUHYeEeql8H8MK4=</dsig:DigestValue></dsig:Reference><dsig:Reference URI="#TimeStampAuthority"><dsig:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><dsig:DigestValue>fY0CLKk5A4etB68w4MbYrOGxA9E=</dsig:DigestValue></dsig:Reference></dsig:SignedInfo><dsig:SignatureValue>fkfkSXV/SVl9gOWDuXYbvwvEQcAdynwcospLHsQ1uawmKHm+bxUUgcpTml/3wIOJeIUGGXEiL6lASTRog/xZez6c8gHPbR6Xk+0Ejk+kRcH82UAu5dgHEqq//sk9C45TRD4/PcPvwaaF7oBaG5ktGBHEp3JsIaaNWew5Lts/8AU=</dsig:SignatureValue><dsig:KeyInfo Id="TimeStampAuthority"><dsig:X509Data><dsig:X509Certificate>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</dsig:X509Certificate></dsig:X509Data></dsig:KeyInfo><dsig:Object Id="TimeStampInfo-FE2498DDB4B1A820C90000000000000001"><ts:TimeStampInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#"; xmlns:ts="http://www.entrust.com/schemas/timestamp-protocol-20020207";><ts:Policy id="your policy uri here"/><ts:Digest><ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><ds:DigestValue>kEj0AP39/f3LVxUBJlgVAYFYFQE=</ds:DigestValue></ts:Digest><ts:SerialNumber>86480367131617697745607564781971608436737</ts:SerialNumber><ts:CreationTime>2004-08-03T12:31:39.781Z</ts:CreationTime><ts:Nonce>835121065</ts:Nonce></ts:TimeStampInfo></dsig:Object></dsig:Signature></ts:TimeStampResponse>
