<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=us-ascii">
<META NAME="Generator" CONTENT="MS Exchange Server version 6.5.7651.53">
<TITLE>Signing works in command line tool but not in code? [SEC=UNCLASSIFIED]</TITLE>
</HEAD>
<BODY>
<!-- Converted from text/rtf format -->
<BR>
<P><FONT SIZE=2 FACE="Arial">I am using the command line tool to successfully sign a template file. A dotnet soap service successfully processes the sign.xml file. </FONT></P>
<P> <FONT SIZE=2 FACE="Arial">xmlsec --sign --print-debug --privkey-der pk.der --output sign.xml vstsout.xml</FONT>
</P>
<P><FONT SIZE=2 FACE="Arial">I am now trying the same thing in code with exactly the same files but the signature fails. I based this on the sample "sign1.c". However I notice the command line source uses a quite different approach (e.g. a keymanager instance). Before I delve into that, is there anything obviously missing here?</FONT></P>
<P> <FONT SIZE=2 FACE="Arial">doc =</FONT> <FONT SIZE=2 FACE="Courier New">xmlParseFile("</FONT><FONT SIZE=2 FACE="Arial">vstsout.xml");</FONT>
<BR> <FONT SIZE=2 FACE="Courier New">node = xmlSecFindNode(xmlDocGetRootElement(doc), xmlSecNodeSignature, xmlSecDSigNs);</FONT>
<BR><FONT SIZE=2 FACE="Courier New"> dsigCtx = xmlSecDSigCtxCreate(NULL);</FONT>
<BR><FONT SIZE=2 FACE="Courier New"> dsigCtx->signKey = xmlSecCryptoAppKeyLoad("pk.der", xmlSecKeyDataFormatDer, NULL, NULL, NULL);</FONT>
<BR><FONT SIZE=2 FACE="Courier New"> xmlSecKeySetName(dsigCtx->signKey, BAD_CAST "pk-der");</FONT>
</P>
<P><FONT SIZE=2 FACE="Courier New"> xmlSecDSigCtxSign(dsigCtx, node); <<<<<<-------- the signature fails</FONT>
</P>
<P><FONT SIZE=2 FACE="Arial">Thanks muchly</FONT>
<BR><FONT SIZE=2 FACE="Arial">Bruce</FONT>
</P>
<pre>**********************************************************************
IMPORTANT
The information transmitted is for the use of the intended
recipient only and may contain confidential and/or legally
privileged material. Any review, re-transmission, disclosure,
dissemination or other use of, or taking of any action in
reliance upon, this information by persons or entities other
than the intended recipient is prohibited and may result in
severe penalties. If you have received this e-mail in error
please notify the Privacy Hotline of the Australian Taxation
Office, telephone 13 2869 and delete all copies of this
transmission together with any attachments.
**********************************************************************
</pre></BODY>
</HTML>