Aleksey: I've been using 0.0.10 successfully for a while now and decided to upgrade to xmlsec 0.0.13 prior to upgrading to openssl 0.9.7a. In runing one of my tests however using the xmlsec utility, I'm getting a failure that doesn't occur with the exact same input on 0.0.10. Did you tighten up the spec on something or has a bug slipped in here? The XML I'm signing is attached and the output of the 0.0.13 xmlsec is below. Everything else I've tried (verification only) works just fine with 0.0.13. This is the only signing test I have so I don't know how specific the failure is. Any ideas what is up? Thanks! Ferrell
--------------------- xmlsec sign --node-xpath //Contact[1] --privkey cert/kl6cakey.pem,cert/kl6cert.pem --print-openssl-errors --output new-signed.xml test-signed.xml Enter PEM pass phrase: *************** (d:\xmlsec-0.0.13\src\xmldsig.c:772): error 23: invalid node : Signature Error: xmlSecDSigGenerate() failed Error: operation failed 3292:error:B9000017:xmlsec routines:xmlsec routines:invalid node:d:\xmlsec-0.0.13\src\xmldsig.c:772: ---------------------
<?xml version="1.0" encoding="UTF-8"?><Keys Source="Atlanta"><!-- generated TestKey keygen --><Contacts><Contact Id="f6b1af52-0ba8-11d7-87ec-c3c034e4ae6a"> <Version>1.0</Version><OCN>17544101</OCN><Timestamp>2003-03-09 19:03:48</Timestamp><Serial>567281DA-CC24-E0A8-5467-A77BF9938ACC</Serial><Source>Atlanta</Source><sig:Signature xmlns:sig="http://www.w3.org/2000/09/xmldsig#";> <sig:SignedInfo> <sig:CanonicalizationMethod Algorithm="http://www.w3.org/TR/2001/REC-xml-c14n-20010315";></sig:CanonicalizationMethod> <sig:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1";></sig:SignatureMethod> <sig:Reference URI=""> <sig:Transforms> <sig:Transform Algorithm="http://www.w3.org/TR/1999/REC-xpath-19991116";> <sig:XPath> not(ancestor-or-self::sig:Signature) and ( (ancestor-or-self::node()[EMAIL PROTECTED]'f6b1af52-0ba8-11d7-87ec-c3c034e4ae6a']) )</sig:XPath> </sig:Transform> <sig:Transform Algorithm="http://www.w3.org/TR/2001/REC-xml-c14n-20010315#WithComments";></sig:Transform> </sig:Transforms> <sig:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1";></sig:DigestMethod> <sig:DigestValue> </sig:DigestValue> </sig:Reference> </sig:SignedInfo> <sig:SignatureValue> </sig:SignatureValue> <sig:KeyInfo> <sig:X509Data> </sig:X509Data> </sig:KeyInfo> </sig:Signature></Contact></Contacts></Keys>
