<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
<META NAME="Generator" CONTENT="MS Exchange Server version 6.0.6249.1">
<TITLE>Verifying SOAP signature with the Xmlsec utility</TITLE>
</HEAD>
<BODY>
<!-- Converted from text/rtf format -->
<P><SPAN LANG="no"><FONT SIZE=2 FACE="Arial">I'm trying to verify a SOAP message received from an external party using xmlsec.exe version 1.2.7, getting: </FONT></SPAN>
</P>
<P><SPAN LANG="no"><FONT SIZE=2 FACE="Arial">func=xmlSecOpenSSLEvpDigestVerify:file=..\src\openssl\digests.c:line=164:obj=sha</FONT></SPAN>
<BR><SPAN LANG="no"><FONT SIZE=2 FACE="Arial">1:subj=unknown:error=12:invalid data:data and digest do not match</FONT></SPAN>
<BR><SPAN LANG="no"><FONT SIZE=2 FACE="Arial">FAIL</FONT></SPAN>
<BR><SPAN LANG="no"><FONT SIZE=2 FACE="Arial">SignedInfo References (ok/all): 0/1</FONT></SPAN>
<BR><SPAN LANG="no"><FONT SIZE=2 FACE="Arial">Manifests References (ok/all): 0/0</FONT></SPAN>
</P>
<P><SPAN LANG="no"><FONT SIZE=2 FACE="Arial">I use the following parameters to verify "ordinary" signed messages (works fine for this):</FONT></SPAN>
</P>
<P><SPAN LANG="no"><FONT SIZE=2 FACE="Arial">xmlsec --verify --trusted-der CA.cer --print-debug --store-signatures --store-references soap.xml</FONT></SPAN>
</P>
<P><SPAN LANG="no"><FONT SIZE=2 FACE="Arial">Is there a command line option that I am missing that is necessary for SOAP signature verification, where the Signature element is inside Soap:Header?</FONT><FONT COLOR="#0000FF" SIZE=2 FACE="Arial"></FONT> </SPAN></P>
<P><SPAN LANG="no"><FONT SIZE=2 FACE="Arial">Thankful for any help on this.</FONT></SPAN>
</P>
<P><SPAN LANG="no"><FONT SIZE=2 FACE="Arial">Geir S.</FONT></SPAN>
</P>
</BODY>
</HTML>