Artur BUJDOSO wrote:

Is there a way to declare an ID attribute, if it's not present by Id="Body" in the Referenced tag? I mean, I got <soapenv:Body> but no <soapenv:Body Id="Body">. The latter is accepted by XMLSEC, but true, it modifies the verified document.

I think you can think about useing XPath instead of XPointer with ID attribute in the Reference. Then you still have <soapenv:Body> instead of <soapenv:Body Id="Body">, which will make any harm to your document format and W3C standards.

Artur

Aleksey Sanin wrote:

If you modified the signed document then you'll get a different digest. Either use external DTD or declare ID attributes from your program as explained
in the FAQ.


Aleksey


Artur BUJDOSO wrote on 3/10/2004, 10:30 AM:


Thanks for the reply.
Yes, I've read it and tried to declare at the beginning at the document the Reference ID, and even tried to replace the URI to ID. Following (short) result:
func=xmlSecOpenSSLEvpDigestVerify:file=digests.c:line=164:obj=sha1:subj=unknown:error=12:invalid data:data and digest do not match
The PreDigest data buffer, seems to contain the whole document, is this normal?
Since the author of the document generator admitted that he isn't sure about standards at all, it might be a wrong DigestValue.
Artur



Aleksey Sanin wrote:


Section 3.2 from the FAQ http://www.aleksey.com/xmlsec/faq.html
Aleksey
Artur BUJDOSO wrote on 3/10/2004, 7:25 AM:



func=xmlSecXPathDataExecute:file=xpath.c:line=273:obj=unknown:subj=xmlXPtrEval:error=5:libxml2 library function failed:expr=xpointer(id('Body'))

_______________________________________________ xmlsec mailing list [EMAIL PROTECTED] http://www.aleksey.com/mailman/listinfo/xmlsec


_______________________________________________ xmlsec mailing list [EMAIL PROTECTED] http://www.aleksey.com/mailman/listinfo/xmlsec


_______________________________________________
xmlsec mailing list
[EMAIL PROTECTED]
http://www.aleksey.com/mailman/listinfo/xmlsec

Reply via email to