[xmlsec] Problems to verify with openssl

Jürgen Heiss Tue, 05 Sep 2006 01:38:13 -0700

Hi,

I tried to verify this file with openssl like

xmlsec --verify --crypto openssl c:\dummy.xml

D:\XMLSec\libxmlsec-1.2.8.win32\bin>xmlsec --verify --crypto openssl d:\xmlsigne
r\in\dummy.xml
func=xmlSecOpenSSLX509StoreVerify:file=..\src\openssl\x509vfy.c:line=351:obj=x50
9-store:subj=unknown:error=71:certificate verification failed:err=20;msg=unable
to get local issuer certificate
func=xmlSecKeysMngrGetKey:file=..\src\keys.c:line=1364:obj=unknown:subj=xmlSecKe
ysMngrFindKey:error=1:xmlsec library function failed:
func=xmlSecDSigCtxProcessKeyInfoNode:file=..\src\xmldsig.c:line=871:obj=unknown:
subj=unknown:error=45:key is not found:
func=xmlSecDSigCtxProcessSignatureNode:file=..\src\xmldsig.c:line=565:obj=unknow
n:subj=xmlSecDSigCtxProcessKeyInfoNode:error=1:xmlsec library function failed:
func=xmlSecDSigCtxVerify:file=..\src\xmldsig.c:line=366:obj=unknown:subj=xmlSecD
SigCtxSigantureProcessNode:error=1:xmlsec library function failed:
Error: signature failed

If I use mscrypto as Crypto Library it works fine!!!!

I look like OpenSSL need the Keyvalue Tags, is this possible?

<?xml version="1.0" encoding="ISO-8859-1"?>
<eb:Invoice xmlns:eb="http://www.ebinterface.at/schema/2p0/"; xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"; xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"; xsi:schemaLocation="http://www.ebinterface.at/schema/2p0/ http://www.ebinterface.at/schema/2p0/Invoice.xsd"; 
eb:Cancellation="false" eb:GeneratingSystem="MESONIC WINLine 8.4 (Build 1112)">
	<dsig:Signature xmlns:dsig="http://www.w3.org/2000/09/xmldsig#";>
		<dsig:SignedInfo>
			<dsig:CanonicalizationMethod Algorithm="http://www.w3.org/TR/2001/REC-xml-c14n-20010315"/>
			<dsig:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
			<dsig:Reference URI="">
				<dsig:Transforms>
					<dsig:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/>
				</dsig:Transforms>
				<dsig:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>
				<dsig:DigestValue>xCB3nge5mL6pSB41xNFUyGM83+s=</dsig:DigestValue>
			</dsig:Reference>
		</dsig:SignedInfo>
		<dsig:SignatureValue>CJydBaTDkuzq55K7eRfH+sylGK7xLEsXBmcS+jibjSY0LRjE6J5cMnemOiM9DqIg
JV4Uiw4boFIKvtxjgTeFkFL+kC24RDiV0Q0l99Xb7TbVFJGXpzbUEGkw+sMz/Zk9
C7kom554U4p6IzmAQE2+WEbDJ+KbZRh/kewteVPonEI=</dsig:SignatureValue>
		<dsig:KeyInfo>
			<dsig:KeyName>Juergen Heiss,  (Test)</dsig:KeyName>
			<dsig:X509Data>
				
				
				
			<X509Certificate xmlns="http://www.w3.org/2000/09/xmldsig#";>MIIFezCCBGOgAwIBAgICA5MwDQYJKoZIhvcNAQEFBQAwgcwxCzAJBgNVBAYTAkFU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</X509Certificate>
<X509SubjectName xmlns="http://www.w3.org/2000/09/xmldsig#";>[EMAIL PROTECTED], CN="Juergen Heiss,  (Test)", OU=Development, O=Test: MESONIC Datenverarbeitung GmbH, L=Mauerbach, C=AT</X509SubjectName>
<X509IssuerSerial xmlns="http://www.w3.org/2000/09/xmldsig#";>
<X509IssuerName>[EMAIL PROTECTED], CN=A-CERT ADVANCED, OU=A-CERT Certification Service, O=ARGE DATEN - Austrian Society for Data Protection, L=Vienna, S=Austria, C=AT</X509IssuerName>
<X509SerialNumber>915</X509SerialNumber>
</X509IssuerSerial>
</dsig:X509Data>
		</dsig:KeyInfo>
	</dsig:Signature>
	<eb:InvoiceNumber>FA-2354</eb:InvoiceNumber>
	<eb:InvoiceDate>2006-07-25</eb:InvoiceDate>
	<eb:Delivery>
		<eb:Date>2006-07-25</eb:Date>
		<eb:Address>
			<eb:Salutation>Firma</eb:Salutation>
			<eb:Name>Annas Sportwelt</eb:Name>
			<eb:Street>Linzer Str. 12</eb:Street>
			<eb:Town>Altheim</eb:Town>
			<eb:ZIP>4950</eb:ZIP>
			<eb:Country>Österreich</eb:Country>
			<eb:Contact>Herr Sebastian</eb:Contact>
		</eb:Address>
	</eb:Delivery>
	<eb:Biller>
			<eb:VATIdentificationNumber>ATU74589652</eb:VATIdentificationNumber>
		<eb:InvoiceRecipientsBillerID>230ANNA</eb:InvoiceRecipientsBillerID>
		<eb:Address>
			<eb:Name>Fun &amp; Workout</eb:Name>
			<eb:Street>Herzog Friedrich Pl.</eb:Street>
			<eb:Town>Mauerbach</eb:Town>
			<eb:ZIP>3001</eb:ZIP>
			<eb:Country>A</eb:Country>
			<eb:Phone>+43 1 970 30</eb:Phone>
			<eb:Email>[EMAIL PROTECTED]</eb:Email>
			<eb:Contact>Herr Walter</eb:Contact>
			<eb:AddressExtension>Sport &amp; Fitness</eb:AddressExtension>
		</eb:Address>
	</eb:Biller>
	<eb:InvoiceRecipient>
			<eb:VATIdentificationNumber>ATU44026601</eb:VATIdentificationNumber>
		<eb:BillersInvoiceRecipientID>230A001</eb:BillersInvoiceRecipientID>
		<eb:Address>
			<eb:Salutation>Firma</eb:Salutation>
			<eb:Name>Annas Sportwelt</eb:Name>
			<eb:Street>Linzer Str. 12</eb:Street>
			<eb:Town>Altheim</eb:Town>
			<eb:ZIP>4950</eb:ZIP>
			<eb:Country>Österreich</eb:Country>
			<eb:Contact>Herr Sebastian</eb:Contact>
		</eb:Address>
	</eb:InvoiceRecipient>
	<eb:Details>
		<eb:ItemList eb:ListType="structured">
			<eb:ListLineItem>
				<eb:ListElement eb:Usage="Number" eb:Type="IdentifierType">10001</eb:ListElement>
				<eb:ListElement eb:Usage="Description" eb:Type="StringType">Rennrad 26 "</eb:ListElement>
				<eb:ListElement eb:Usage="CustomersArticleNumber" eb:Type="IdentifierType">10001</eb:ListElement>
				<eb:ListElement eb:Usage="Quantity" eb:Type="DecimalType" eb:Unit="Units">1.00</eb:ListElement>
				<eb:ListElement eb:Usage="Weight" eb:Type="DecimalType">15.60</eb:ListElement>
				<eb:ListElement eb:Usage="TaxRate" eb:Type="DecimalType">20.00</eb:ListElement>
				<eb:ListElement eb:Usage="UnitPrice" eb:Type="AmountType" eb:Unit="EUR">381.51</eb:ListElement>
				<eb:ListElement eb:Usage="Amount" eb:Type="AmountType" eb:Unit="EUR">381.51</eb:ListElement>
			</eb:ListLineItem>
			<eb:ListLineItem>
				<eb:ListElement eb:Usage="Number" eb:Type="IdentifierType">10002</eb:ListElement>
				<eb:ListElement eb:Usage="Description" eb:Type="StringType">Luxus Mountain Bike "oversized"</eb:ListElement>
				<eb:ListElement eb:Usage="CustomersArticleNumber" eb:Type="IdentifierType">10002</eb:ListElement>
				<eb:ListElement eb:Usage="Quantity" eb:Type="DecimalType" eb:Unit="Units">1.00</eb:ListElement>
				<eb:ListElement eb:Usage="Weight" eb:Type="DecimalType">18.10</eb:ListElement>
				<eb:ListElement eb:Usage="TaxRate" eb:Type="DecimalType">20.00</eb:ListElement>
				<eb:ListElement eb:Usage="UnitPrice" eb:Type="AmountType" eb:Unit="EUR">624.22</eb:ListElement>
				<eb:ListElement eb:Usage="Amount" eb:Type="AmountType" eb:Unit="EUR">624.22</eb:ListElement>
			</eb:ListLineItem>
		</eb:ItemList>
	</eb:Details>
	<eb:Tax>
		<eb:VAT>
			<eb:Item>
				<eb:TaxedAmount eb:Currency="EUR">1005.73</eb:TaxedAmount>
				<eb:Percentage>20.00</eb:Percentage>
				<eb:Amount eb:Currency="EUR">201.15</eb:Amount>
			</eb:Item>
		</eb:VAT>
	</eb:Tax>
	<eb:TotalGrossAmount eb:Currency="EUR">1206.88</eb:TotalGrossAmount>
	<eb:PaymentMethod xsi:type="eb:UniversalBankTransactionType">
		<eb:BeneficiaryAccount>
			<eb:BankName>Die Erste</eb:BankName>
			<eb:BankCode eb:BankCodeType="AT">20120</eb:BankCode>
			<eb:BankAccountNr eb:Currency="EUR">4789234789</eb:BankAccountNr>
			<eb:BankAccountOwner>Herr Maier</eb:BankAccountOwner>
		</eb:BeneficiaryAccount>
	</eb:PaymentMethod>
	<eb:PaymentConditions>
		<eb:DueDate>2006-08-15</eb:DueDate>
		<eb:Discount>
			<eb:PaymentDate>2006-08-01</eb:PaymentDate>
			<eb:Percentage>2.00</eb:Percentage>
			<eb:Amount eb:Currency="EUR">24.14</eb:Amount>
		</eb:Discount>
		<eb:Discount>
			<eb:PaymentDate>2006-08-08</eb:PaymentDate>
			<eb:Percentage>1.00</eb:Percentage>
			<eb:Amount eb:Currency="EUR">12.07</eb:Amount>
		</eb:Discount>
	</eb:PaymentConditions>
	<eb:PresentationDetails>
		<eb:URL>http://www.funwork.co.at</eb:URL>
		<eb:LayoutID>EBIFA100</eb:LayoutID>
		<eb:Language>ger</eb:Language>
		<eb:DocumentTitle>Rechnung</eb:DocumentTitle>
		<eb:SuppressZero>true</eb:SuppressZero>
		<eb:HeaderComment>Wir erlauben uns wie folgt zu verrechnen.</eb:HeaderComment>
		<eb:FooterComment>Wir danken für Ihren Auftrag.</eb:FooterComment>
	</eb:PresentationDetails>
</eb:Invoice>

_______________________________________________
xmlsec mailing list
[email protected]
http://www.aleksey.com/mailman/listinfo/xmlsec

[xmlsec] Problems to verify with openssl

Reply via email to