How do you specify the key? Do you have a key name in the template?
Aleksey On 9/22/10 2:10 AM, GOUSSEAU Denis wrote:
I’m trying to use XmlSec binaries with an pkcs11 engine which work fine with openssl : OpenSsl config file : openssl_conf = openssl_def [openssl_def] engines = engine_section [engine_section] pkcs11 = pkcs11_section [pkcs11_section] engine_id = pkcs11 dynamic_path = ./engine_pkcs11.dll MODULE_PATH = c:/windows/cps_pkcs11_w32.dll init = 0 PIN=1234 [req] distinguished_name = req_distinguished_name [req_distinguished_name] Dos command line xmlsec --sign--pwd 1234 --crypto openssl --crypto-config .\openssl.cfg TestEnvoi.txt And i have this error func=xmlSecKeysMngrGetKey:file=..\src\keys.c:line=1370:obj=unknown:subj=xmlSecKeysMngrFindKey:error=1:xmlsec library function failed: func=xmlSecDSigCtxProcessKeyInfoNode:file=..\src\xmldsig.c:line=871:obj=unknown:subj=unknown:error=45:key is not found: func=xmlSecDSigCtxProcessSignatureNode:file=..\src\xmldsig.c:line=565:obj=unknown:subj=xmlSecDSigCtxProcessKeyInfoNode:error=1:xmlsec library function failed: func=xmlSecDSigCtxSign:file=..\src\xmldsig.c:line=303:obj=unknown:subj=xmlSecDSigCtxSigantureProcessNode:error=1:xmlsec library function failed: Error: signature failed Error: failed to sign file "TestEnvoi.txt" With a pem certificate, the file can be signed. So, the problem is with openssl and the config file or the engine i’m using. Does xmlSec work with pkcs11 engine without change ? Because I saw some patch but can’t find them with problem on private key. Thanks for help. ----------------------------------------------- Denis GOUSSEAU Société SANTEOS ----------------------------------------------- _______________________________________________ xmlsec mailing list [email protected] http://www.aleksey.com/mailman/listinfo/xmlsec
_______________________________________________ xmlsec mailing list [email protected] http://www.aleksey.com/mailman/listinfo/xmlsec
