<html>
<head>
<style><!--
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
font-size: 12pt;
font-family:Calibri
}
--></style></head>
<body class='hmmessage'><div dir='ltr'>Thanks a lot Aleksey, now I got the command line verification to work as excpected.<br><br>The solution was to use several --id-attr parameters to xmlsec1.<br><br>This is the command line I used:<br>xmlsec1 --verify --id-attr:ID 'http://www.mycompany.com/myapp:Routing' --id-attr:ID 'http://www.w3.org/2001/12/soap-envelope:Body' signedmod.xml<br><br>The command invocation adds the ID:s for both the "Routing" and the "Body" tag.<br><br>When called with the XML I provided below, xmlsec1 will correctly come to the conclusion that the signature of that document does not match - since I have modified it.<br><br>This is the output I get:<br>=============================<br>func=xmlSecOpenSSLEvpDigestVerify:file=digests.c:line=229:obj=sha1:subj=unknown:error=12:invalid data:data and digest do not match<br>FAIL<br>SignedInfo References (ok/all): 0/1<br>Manifests References (ok/all): 0/0<br>Error: failed to verify file "signedmod.xml"<br>=============================<br><br>When used with a document with a signature that does match I get:<br><br>=============================<br>OK<br>SignedInfo References (ok/all): 2/2<br>Manifests References (ok/all): 0/0<br>=============================<br><br><br>Now the command line is up and running, so then I should be able to do the same in code using xmlAddID().<br><br>Many thanks.<br><br>Regards<br>/Magnus<br><br><br><br><div><div id="SkyDrivePlaceholder"></div>> Date: Tue, 18 Dec 2012 08:10:54 -0800<br>> From: aleksey@aleksey.com<br>> To: magnus_qwerty@hotmail.com<br>> CC: xmlsec@aleksey.com<br>> Subject: Re: [xmlsec] Verifying signature for enveloped signature with multiple signatures<br>> <br>> Section 3.2 in the FAQ<br>> <br>> http://www.aleksey.com/xmlsec/faq.html<br>> <br>> Aleksey<br>> <br><br></div> </div></body>
</html>