RE: [xmlsec] (no subject)
How can I turn off Keyname lookups? -Original Message- From: Aleksey Sanin [mailto:[EMAIL PROTECTED] Sent: Mittwoch, 06. September 2006 17:32 To: Jürgen Heiss Cc: xmlsec@aleksey.com Subject: Re: [xmlsec] (no subject) Most likely, xmlsec finds the key in the KeyManager by the key name. You can disable KeyName lookups though. Aleksey Jürgen Heiss wrote: Hi, this is a signed file, which has a Keyvalue tag. When I try to verify this file the datalist is empty. But the certificate exists in the signed file how can i access the certificate? Any ideas? key = dsigCtx.signKey; size = xmlSecPtrListGetSize(key-dataList); sdata = (*((dsigCtx).signKey)).dataList; tmp = (xmlSecKeyDataPtr)xmlSecPtrListGetItem(key-dataList, pos); x509 = xmlSecMSCryptoKeyDataX509GetCert(tmp,pos); ___ xmlsec mailing list xmlsec@aleksey.com http://www.aleksey.com/mailman/listinfo/xmlsec
RE: [xmlsec] (no subject)
Can you give me please a short example? Thanks Jürgen -Original Message- From: Aleksey Sanin [mailto:[EMAIL PROTECTED] Sent: Donnerstag, 07. September 2006 09:24 To: Jürgen Heiss Cc: xmlsec@aleksey.com Subject: Re: [xmlsec] (no subject) Search xmlsec command line utility sources for enabledKeyData Aleksey Jürgen Heiss wrote: Well we discussed but never you told me how I can disable Keyname lookup ;o) -Original Message- From: Aleksey Sanin [mailto:[EMAIL PROTECTED] Sent: Donnerstag, 07. September 2006 09:02 To: Jürgen Heiss Cc: xmlsec@aleksey.com Subject: Re: [xmlsec] (no subject) How can I turn off Keyname lookups? We already discussed this few months ago http://www.aleksey.com/pipermail/xmlsec/2006/003403.html Aleksey ___ xmlsec mailing list xmlsec@aleksey.com http://www.aleksey.com/mailman/listinfo/xmlsec ___ xmlsec mailing list xmlsec@aleksey.com http://www.aleksey.com/mailman/listinfo/xmlsec
Re: [xmlsec] (no subject)
Hi Aleksey, This is a deja-vu for me. One other small point. Would it be possible to create setter functions for this kind of thing ? This avoids non "C"-based applications from having to map memory structures which is a royl pain and alo dangerous. Same applies to the keyptr in the SignCtx as well. Ed - Original Message From: Aleksey Sanin [EMAIL PROTECTED]To: Jürgen Heiss [EMAIL PROTECTED]Cc: xmlsec@aleksey.comSent: Thursday, September 7, 2006 3:01:52 AMSubject: Re: [xmlsec] (no subject) How can I turn off Keyname lookups?We already discussed this few months agohttp://www.aleksey.com/pipermail/xmlsec/2006/003403.htmlAleksey___xmlsec mailing listxmlsec@aleksey.comhttp://www.aleksey.com/mailman/listinfo/xmlsec ___ xmlsec mailing list xmlsec@aleksey.com http://www.aleksey.com/mailman/listinfo/xmlsec
Re: [xmlsec] (no subject)
Yes, this is a good idea :) Aleksey [EMAIL PROTECTED] wrote: Hi Aleksey, This is a deja-vu for me. One other small point. Would it be possible to create setter functions for this kind of thing ? This avoids non C-based applications from having to map memory structures which is a royl pain and alo dangerous. Same applies to the keyptr in the SignCtx as well. Ed - Original Message From: Aleksey Sanin [EMAIL PROTECTED] To: Jürgen Heiss [EMAIL PROTECTED] Cc: xmlsec@aleksey.com Sent: Thursday, September 7, 2006 3:01:52 AM Subject: Re: [xmlsec] (no subject) How can I turn off Keyname lookups? We already discussed this few months ago http://www.aleksey.com/pipermail/xmlsec/2006/003403.html Aleksey ___ xmlsec mailing list xmlsec@aleksey.com http://www.aleksey.com/mailman/listinfo/xmlsec ___ xmlsec mailing list xmlsec@aleksey.com http://www.aleksey.com/mailman/listinfo/xmlsec ___ xmlsec mailing list xmlsec@aleksey.com http://www.aleksey.com/mailman/listinfo/xmlsec
Re: [xmlsec] Problem with Unknown IO error
Hello Aleksey, In a very first place I want to thank you for all the help you are providing, it is relly very useful. We develop in PHP and we like to know how to connect the output of a program like verify to our php web page. It is possible to compile xmlsec to a library that can be instanciated from the php code in order to validate an xml file with a pem certificate? Do you know any other method to do this? Thank you very much in advance Juan Martín Strupeni Yes, you are doing everything correctly. This strange error Unknown IO error actually comes from libxml2 when it reads the XML file. I really don't know why does this happen... Aleksey Juan Martin Strupeni wrote: Hi, Aleksey I'm doing what you told me. But, just to know that I'm not doing everything wrong, is this the wright way to use xmlsec? DesaDGRAFIP:/instalar/xmlsec1/examples # ./verify1 verify4-res.xml rsakey.pem error : Unknown IO error Signature is OK Thanks in advance It is in the xmlsec/error.c file Aleksey Juan Martin Strupeni wrote: Hi, Aleksey Where can I find this xmlSecError() function? I forgot to send this information: DesaDGRAFIP:/instalar/xmlsec1/examples # ldd ./sign1 linux-gate.so.1 = (0xe000) libdl.so.2 = /lib/libdl.so.2 (0x40026000) libxmlsec1.so.1 = /usr/local/lib/libxmlsec1.so.1 (0x40029000) libxml2.so.2 = /usr/local/lib/libxml2.so.2 (0x40073000) libm.so.6 = /lib/tls/libm.so.6 (0x40182000) libc.so.6 = /lib/tls/libc.so.6 (0x401a4000) /lib/ld-linux.so.2 = /lib/ld-linux.so.2 (0x4000) Thank you very much for your response. Hm... Can you put a breakpoint in the xmlSecError() function and get a stack trace, please? Aleksey Juan Martin Strupeni Lic. Administracion - UBA Direccion de Organizacion y Sistemas Direccion General de Rentas GCBA Esmeralda 638 3 Tel: 4-323-8600/8700/8800 (int. 6708,6713) Juan Martin Strupeni Lic. Administracion - UBA Direccion de Organizacion y Sistemas Direccion General de Rentas GCBA Esmeralda 638 3� Tel: 4-323-8600/8700/8800 (int. 6708,6713) ___ xmlsec mailing list xmlsec@aleksey.com http://www.aleksey.com/mailman/listinfo/xmlsec
Re: [xmlsec] Problem with Unknown IO error
There is php_xmlsec module created by Alexandre Kalendarev that might just work for you: http://edocs.phpclub.net/xmlsec/index.htm Aleksey ___ xmlsec mailing list xmlsec@aleksey.com http://www.aleksey.com/mailman/listinfo/xmlsec
