Thanks for your help.

I investigated the previous message sent by the xmlsec library in compiling it 
without any optimizations but with debugging informations. I took the hand on 
the debugger and then I trace the call stack to find out why the library failed 
in signing my XML stream.

Here is the call stack :

#0  xmlSecOpenSSLKeyDataRsaGetType (data=0x5231a0) at evp.c:1499
#1  0x0000002a956abdeb in xmlSecKeyDataGetType (data=0x5231a0) at keysdata.c:424
#2  0x0000002a956a8d68 in xmlSecKeyGetType (key=0x5192c0) at keys.c:730
#3  0x0000002a956a821b in xmlSecKeyReqMatchKey (keyReq=0x523970, key=0x5192c0) 
at keys.c:433
#4  0x0000002a956a8ce4 in xmlSecKeyMatch (key=0x5192c0, name=0x0, 
keyReq=0x523970) at keys.c:709
#5  0x0000002a956cba43 in xmlSecDSigCtxProcessKeyInfoNode (dsigCtx=0x523860, 
node=0x5233b0) at xmldsig.c:870
#6  0x0000002a956ca95f in xmlSecDSigCtxProcessSignatureNode (dsigCtx=0x523860, 
node=0x522130) at xmldsig.c:563
#7  0x0000002a956c9cb1 in xmlSecDSigCtxSign (dsigCtx=0x523860, tmpl=0x522130) 
at xmldsig.c:301
#8  0x0000000000401f65 in sign_file (xml_file=0x7fbffffa7e 
"./xmlsec_sign.xml.in", key_file=0x7fbffffa93 "rsa-2007") at xmlsec_sign.cpp:334
#9  0x0000000000401b16 in main (argc=3, argv=0x7fbffff808) at 
xmlsec_sign.cpp:112



The function xmlSecOpenSSLKeyDataRsaGetType returns xmlSecKeyDataTypePublic 
whereas my key is a private key. If I patch in "real time" (through the 
debugger) the returned value to xmlSecKeyDataTypePrivate, every thing is ok and 
my  XML stream is well signed.



I read a lot of threads during these lasts days about xmlsec and I found out 
one of them dealing with this sort of issue. Thread between Erwann ABALEA and 
Aleksey ;) : http://www.aleksey.com/pipermail/xmlsec/2005/002723.html



Up to you, am I in the same case (I think so) ?
Do you have a solution to fix that ?


Greetings,


Cyrille B.


-----Message d'origine-----
De : Aleksey Sanin [mailto:[EMAIL PROTECTED] 
Envoyé : mercredi 24 octobre 2007 17:29
À : zze-CIA BENARD C ext RD-MAPS-LAN
Cc : [email protected]
Objet : Re: [xmlsec] Map the existing use of xmlsec on an engine ?

You should probably either set key into the xmlSecDsigCtx directly or assign a 
key name and specify it in the template.

Aleksey
_______________________________________________
xmlsec mailing list
[email protected]
http://www.aleksey.com/mailman/listinfo/xmlsec

Reply via email to