Hi Aleksey, thanks for your reply.<br><br>Reading the list files I found this message: <a href="http://www.aleksey.com/pipermail/xmlsec/2003/005354.html" target="_blank">http://www.aleksey.com/pipermail/xmlsec/2003/005354.html</a>.<br>
Based on it, I used the following commands to sign my XML:<br>
<br>$ openssl pkcs12 -in certificate.pfx -out certificate.pem -des3<br>$ xmlsec1 --sign --output out.xml --privkey-pem certificate.pem --pwd xxx sign_template.xml<br><br>Jorge<br><br><div class="gmail_quote">On Tue, Mar 3, 2009 at 11:38 AM, Aleksey Sanin <span dir="ltr"><<a href="mailto:aleksey@aleksey.com">aleksey@aleksey.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">The error is "key is not found". You need to make sure that the<br>
*correct* key is loaded in the key manager and that the template<br>
refers to the key correctly.<br>
<br>
Aleksey<br>
<br>
Jorge Augusto Senger wrote:<br>
<blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;"><div><div><span id="q_11fccd78cbaa08ba_1" class="h4">- Show quoted text -</span></div><div class="h5">
Hi everybody,<br>
<br>
I'm trying to sign a XML file with a X509 certificate but xmlsec1 fails:<br>
<br>
# xmlsec1 --sign sign_template.xml --pkcs12 cert.pfx<br>
func=xmlSecKeysMngrGetKey:file=keys.c:line=1364:obj=unknown:subj=xmlSecKeysMngrFindKey:error=1:xmlsec library function failed:<br>
func=xmlSecDSigCtxProcessKeyInfoNode:file=xmldsig.c:line=871:obj=unknown:subj=unknown:error=45:key is not found:<br>
func=xmlSecDSigCtxProcessSignatureNode:file=xmldsig.c:line=565:obj=unknown:subj=xmlSecDSigCtxProcessKeyInfoNode:error=1:xmlsec library function failed:<br>
func=xmlSecDSigCtxSign:file=xmldsig.c:line=303:obj=unknown:subj=xmlSecDSigCtxSigantureProcessNode:error=1:xmlsec library function failed:<br>
Error: signature failed<br>
Error: failed to sign file "sign_template.xml"<br>
<br>
I'm using Debian 4.0 with the following xmlsec packages:<br>
<br>
xmlsec1/etch uptodate 1.2.9-5<br>
libxmlsec1-openssl/etch uptodate 1.2.9-5<br>
libxmlsec1-gnutls/etch uptodate 1.2.9-5<br>
libxmlsec1-nss/etch uptodate 1.2.9-5<br>
libxmlsec1/etch uptodate 1.2.9-5<br>
libxmlsec1-dev/etch uptodate 1.2.9-5<br>
<br>
So, can somebody help me with this error?<br>
<br>
Thanks in advance,<br>
<br>
-- <br>
Jorge Augusto Senger<br></div></div>
jasenger (at) <a href="http://gmail.com" target="_blank">gmail.com</a> <<a href="http://gmail.com" target="_blank">http://gmail.com</a>><br>
<br>
<br>
------------------------------------------------------------------------<br>
<br>
_______________________________________________<br>
xmlsec mailing list<br>
<a href="mailto:xmlsec@aleksey.com" target="_blank">xmlsec@aleksey.com</a><br>
<a href="http://www.aleksey.com/mailman/listinfo/xmlsec" target="_blank">http://www.aleksey.com/mailman/listinfo/xmlsec</a><br>
</blockquote>
</blockquote></div><br><br clear="all"><br>-- <br>Jorge Augusto Senger<br>jasenger (at) <a href="http://gmail.com">gmail.com</a><br>