Where is the fail?

You sign the *whole* document. After the signature
is generated, you have new document (e.g. signature
value have changed) and the signature correctly fails.
You might want to use enveloped transform to exclude
Signature element from signature.

Aleksey

_______________________________________________
xmlsec mailing list
[email protected]
http://www.aleksey.com/mailman/listinfo/xmlsec

Reply via email to