[xmlsec] RetrievalMethod with local URI?

[John Belmonte]

I'm not having any luck with RetrievalMethod on a local URI during 
signature verify, again with xmlsec tool 0.0.5.  Synopsis:

   <KeyInfo Id="foo">
     <KeyValue>...</KeyValue>
   </KeyInfo>

   ...

   <Signature xmlns="http://www.w3.org/2000/09/xmldsig#">
     <SignedInfo>
       <CanonicalizationMethod
         Algorithm="http://www.w3.org/TR/2001/REC-xml-c14n-20010315"/>
       <SignatureMethod
         Algorithm="http://www.w3.org/2000/09/xmldsig#dsa-sha1"/>
       <Reference URI="">...</Reference>
     </SignedInfo>
     <SignatureValue>...</SignatureValue>
     <KeyInfo>
       <RetrievalMethod URI="#foo"/>
     </KeyInfo>
   </Signature>


The xmlsec tool reports "xmlSecKeysMngrGetKey: failed to find key". 
Maybe I'm misunderstanding the spec?

-John



-- 
http:// i      .   /