Hi, If the error is NOT caused by the common reasons, and I do not have access to the code that does the signature, what suggestion can you give to me?
Highdone Trias Advent Resources, Inc. www.adventresources.com 310.241.1500x2214 ---------- Original Message ----------- From: Aleksey Sanin <[EMAIL PROTECTED]> To: Highdone Trias <[EMAIL PROTECTED]> Cc: [EMAIL PROTECTED], [email protected] Sent: Tue, 15 Mar 2005 10:36:44 -0800 Subject: Re: [xmlsec] X509, verification of signature > The error indicates that one of the digests does not match. There > are two most common reasons for this error: > - The document was actually modified (may be, accidentialy). For > example, spaces or end-of-lines were inserted by a mailer program. > - The C14N incompatibility either because the of difference in a > way Phaos and xmlsec do C14N or because the C14N was done from different > contexts. > > If you have access to the code that does the signature, I would suggest > to do the following: > - Make sure that document is not changed on the way. > - Make sure that signature happens from the same context (e.g. inside > the SOAP stuff). > - Try C14N instead of exc C14N. > - Get the c14n output from Phaos right before it digests it and compare > with what xmlsec does (--store-references option for xmlsec command > line utility). > > Best, > Aleksey ------- End of Original Message ------- _______________________________________________ xmlsec mailing list [email protected] http://www.aleksey.com/mailman/listinfo/xmlsec
