Hi Aleksey, I'm using xmlsec1 1.2.9 (openssl) from Debian.
Is Canonical XML 1.1 supported by xmlsec1? http://www.w3.org/TR/2007/CR-xml-c14n11-20070621/ Kind regards, ---------- Forwarded message ---------- From: Kai Hendry <[email protected]> Date: 2009/6/8 Subject: xmlsec1 still maintained? To: [email protected] Cc: [email protected] Hi there Aleksey, hen...@x61 tmp$ xmlsec1 sign --pkcs12 /tmp/xmlsec1-1.2.9/tests/keys/dsakey.p12 --pwd secret --output /tmp/my.sig works.xml hen...@x61 tmp$ xmlsec1 sign --pkcs12 /tmp/xmlsec1-1.2.9/tests/keys/dsakey.p12 --pwd secret --output /tmp/my.sig notworking.xml func=xmlSecKeysMngrGetKey:file=keys.c:line=1364:obj=unknown:subj=xmlSecKeysMngrFindKey:error=1:xmlsec library function failed: func=xmlSecDSigCtxProcessKeyInfoNode:file=xmldsig.c:line=871:obj=unknown:subj=unknown:error=45:key is not found: func=xmlSecDSigCtxProcessSignatureNode:file=xmldsig.c:line=565:obj=unknown:subj=xmlSecDSigCtxProcessKeyInfoNode:error=1:xmlsec library function failed: func=xmlSecDSigCtxSign:file=xmldsig.c:line=303:obj=unknown:subj=xmlSecDSigCtxSigantureProcessNode:error=1:xmlsec library function failed: Error: signature failed Error: failed to sign file "notworking.xml" hen...@x61 tmp$ I don't understand what's the problem here. Does xmlsec1 not support "http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"; ? Kind regards,
<?xml version="1.0" encoding="UTF-8"?> <Signature xmlns="http://www.w3.org/2000/09/xmldsig#";> <SignedInfo> <CanonicalizationMethod Algorithm="http://www.w3.org/TR/2001/REC-xml-c14n-20010315"; /> <SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#dsa-sha1"; /> <Reference URI="#object"> <DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"; /> <DigestValue></DigestValue> </Reference> </SignedInfo> <SignatureValue> </SignatureValue> <KeyInfo> <X509Data> </X509Data> </KeyInfo> <Object Id="object">some text</Object> </Signature>
<?xml version="1.0" encoding="UTF-8"?> <Signature xmlns="http://www.w3.org/2000/09/xmldsig#";> <SignedInfo> <CanonicalizationMethod Algorithm="http://www.w3.org/TR/2001/REC-xml-c14n-20010315"; /> <SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"; /> <Reference URI="#object"> <DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"; /> <DigestValue></DigestValue> </Reference> </SignedInfo> <SignatureValue> </SignatureValue> <KeyInfo> <X509Data> </X509Data> </KeyInfo> <Object Id="object">some text</Object> </Signature>
_______________________________________________ xmlsec mailing list [email protected] http://www.aleksey.com/mailman/listinfo/xmlsec
