RE: [xmlsec] Different digest value between .NET implementation and XmlSec?

[Chugh, Sanjay]

Title: Message

Yes, you are right. The PI node is included in the output. However, I was trying to understand exactly and "See" on what the digest value is calculated. I used the Sign3 example included with XmlSec and some example code from the MSDN library. The MSDN library is not using a certificate, just an RSA key, but that should not matter for the digest value, just the signature value. After both the examples run, the canonicalized version of the source xml document is the same in both cases. See below. However the digest value is different. Just so I could prove to myself that I understand on what the digest is being calculated on, I took the canonicalized form of the source document and used openssl on the command line to calculate the digest. The result I got was the same as the one that I got from the .NET example. I then removed the PI from the canonicalized document and used openssl on the command line to calculate the digest again. This time it matched the value calculated from XmlSec.   I hope I have explained things more clearly. Off course maybe I am doing something wrong or am not understanding something.   Here is the canonicalized form of the source document (it is the same as generated from .NET and from XmlSec):   <?xml-stylesheet type="text/xsl" href="" ?> <sales quarter="2001-01">    <region name="Northeast">       <units>374</units>       <amount>12500.26</amount>    </region>    <region name="Southeast">       <units>512</units>       <amount>17692</amount>    </region>    <region name="Southwest">       <units>161</units>       <amount>8349.72</amount>    </region>    <region name="Northwest">       <units>465</units>       <amount>15239.6</amount>    </region> </sales>   Thanks,   -- Sanjay      -----Original Message----- From: Aleksey Sanin [mailto:[EMAIL PROTECTED] Sent: October 9, 2003 2:08 PM To: Chugh, Sanjay Cc: [EMAIL PROTECTED] Subject: Re: [xmlsec] Different digest value between .NET implementation and XmlSec? xmlsec uses c14n code from LibXML2. If I just do a c14n for your file then the processing instruction node "<?xml-stylesheet type="text/xsl" href="" ?>"  is included in the output:     [EMAIL PROTECTED] dev]$./libxml2/testC14N  --with-comments a.xml     <?xml-stylesheet type="text/xsl" href="" ?>     <sales quarter="2001-01">     ...     </sales> It would be helpfull if you can give a more detailed example with explanations how are you doing signatures in both xmlsec and .net cases. With best regards, Aleksey