Hello!

I really feel that I have exhausted every approach that I can think of to solve this 
problem. I need to sign a document using a Reference URI but it fails every time. I 
can only sign the document using a Reference Id. I hope someone can help. Below is 
what I think are the essentials of my document (the whole document is much larger).

The call to xmlSecDSigCtxSign will fail. It fails in xpath.c in the function 
xmlSecXPathDataExecute with the message 
"expr=xpointer(id('Id-058b5a86-a1dd-4188-9920-8315c3f84eae'))".

I know what has been said about using wsu:Id but I don't have any choice. That's why I 
added the DOCTYPE. Please someone, make my day :-) This is driving me nuts.

It it matters any I'm running this on a Windows XP OS using the latest binaries of all 
necessary libraries.

Thanks all,

Erik F. Andersen

<?xml version="1.0"?>
<!DOCTYPE soap:Envelope [
<!ATTLIST soap:Body wsu:Id ID #IMPLIED>
]>
<soap:Envelope xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"; 
xmlns:xsd="http://www.w3.org/2001/XMLSchema"; 
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance";>
 <soap:Header>
  <wsse:Security xmlns:wsse="http://schemas.xmlsoap.org/ws/2002/07/secext"; 
soap:mustUnderstand="1">
   <Signature xmlns="http://www.w3.org/2000/09/xmldsig#";>
    <SignedInfo>
     <CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"; /> 
     <SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"; /> 
      <Reference URI="#Id-058b5a86-a1dd-4188-9920-8315c3f84eae">
       <Transforms>
        <Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"; /> 
       </Transforms>
       <DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"; /> 
       <DigestValue /> 
      </Reference>
    </SignedInfo>
   </Signature>
  </wsse:Security>
 </soap:Header>
 <soap:Body xmlns:wsu="http://schemas.xmlsoap.org/ws/2002/07/utility"; 
wsu:Id="Id-058b5a86-a1dd-4188-9920-8315c3f84eae">
 </soap:Body>
</soap:Envelope>
_______________________________________________
xmlsec mailing list
[EMAIL PROTECTED]
http://www.aleksey.com/mailman/listinfo/xmlsec

Reply via email to