[xmlsec] XMLSEC Reference URI question
Moultrie, Ferrell (ISSAtlanta)
FMoultrie@iss.net
Wed, 24 Jul 2002 20:03:58 -0400
This message is in MIME format. Since your mail reader does not understand
this format, some or all of this message may not be legible.
------_=_NextPart_000_01C2336E.C665B3B8
Content-Type: text/plain
xmlsec verify --print-all --trusted new_export.pem test_allkey_04.xml
I've included the PEM-formatted public key, the XML test document and the
output captured from running the 07/12/02 build of xmlsec plus the one fix
you sent me earlier. Let me know if you need anything else.
Thanks!
Ferrell
-----Original Message-----
From: Aleksey Sanin [mailto:aleksey@aleksey.com]
Sent: Wednesday, July 24, 2002 5:48 PM
To: Moultrie, Ferrell (ISSAtlanta)
Cc: 'xmlsec@aleksey.com'; Dodd, Tim (ISS Atlanta)
Subject: Re: [xmlsec] XMLSEC Reference URI question
I am not sure I clear understand what kind of problem do you have. Will you
mind to send me the file you have problems with?
Thanks,
Aleksey
Moultrie, Ferrell (ISSAtlanta) wrote:
>Aleksey:
> Ok, I've tried to use an XPath Transform to limit the data being
>verified. Unfortunately, it doesn't appear to work. Here's what I see
>happening in the
>code:
>
>xmlSecTransformXPathReadNode( ) [xpath.c:203] takes the input
>xmlSecTransformPtr and upcasts it to a xmlSecXmlTransformPtr. It then
>stores the parsed XPath string and the "here" node reference in the
>xmlSecXmlTransform object it points to (at least there's checking of
>the pointer assignment sanity here).
>
>The caller, xmlSecTransformRead, returns to its caller
>xmlSecTransformNodeRead with the pointer to the object containing the
>XPath transform information. The transform is further passed back to
>xmlSecTransformsNodeRead which calls xmlSecTransformStateUpdate which
>discovers that the transform type is xmlSecTransformTypeXml and call
>xmlSecTransformCreateXml. This routine, because the file is already
>parsed and both curFirstBinTransform and curC14NTransform in the state
>object are NULL, does nothing and returns!
>
>This results in the XPath Transform information being parsed and saved
>but otherwise ignored. The <Signature> block contains the following
>transform which is parsed and ignored in the above case:
>
> <sig:Transform
> Algorithm="http://www.w3.org/TR/1999/REC-xpath-19991116">
> <sig:XPath>/ISSKeys/Contacts/Contact</sig:XPath>
> </sig:Transform>
>
>The result is that adding an XPath transform like above, is ignored.
>This works properly with the Apache Java tools so I believe that it's a
>legal way to construct a reference. Eventually, I'd intended to change
>the XPath reference to a here()-relative reference to solve my compound
>document problem but this seemed like a quick/easy test --
>unfortunately it's not working.
>
>Is this a bug, or, have I missed something else? Since Apache properly
>verifies this signature and the code in xmlSecTransformCreateXml seems
>to be missing any knowledge of this transform, I'm guessing that it's a
>bug -- but I'll appreciate your advice on how to proceed!
>
>Thanks!
> Ferrell
>
>=====================================
>Ferrell Moultrie (ferrell@iss.net)
>Software Engineer
>
>Internet Security Systems, Inc.
>6303 Barfield Road
>Atlanta, Georgia 30328
>Phone: 404-236-2600
>Direct: 404-236-2849
>Fax: 404-236-2632
>http://www.iss.net
>
>Internet Security Systems -- The Power to Protect
>=====================================
>_______________________________________________
>xmlsec mailing list
>xmlsec@aleksey.com http://www.aleksey.com/mailman/listinfo/xmlsec
>
>
------_=_NextPart_000_01C2336E.C665B3B8
Content-Type: application/octet-stream;
name="new_export.pem"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: attachment;
filename="new_export.pem"
Certificate:=0A=
Data:=0A=
Version: 1 (0x0)=0A=
Serial Number: 1022302402 (0x3cef18c2)=0A=
Signature Algorithm: md5WithRSAEncryption=0A=
Issuer: C=3DUS, O=3DWeb Developer, OU=3DIT, CN=3DISS Keygen =
Test=0A=
Validity=0A=
Not Before: May 25 04:53:22 2002 GMT=0A=
Not After : Jan 14 04:53:22 2027 GMT=0A=
Subject: C=3DUS, O=3DWeb Developer, OU=3DIT, CN=3DISS Keygen =
Test=0A=
Subject Public Key Info:=0A=
Public Key Algorithm: rsaEncryption=0A=
RSA Public Key: (1024 bit)=0A=
Modulus (1024 bit):=0A=
00:cb:a0:02:b1:5b:46:27:af:5f:91:e2:b1:25:49:=0A=
59:a9:43:f8:14:91:43:22:b9:2b:50:48:b4:e1:cf:=0A=
14:00:09:82:ea:3c:6e:f7:e9:8c:b8:b0:fe:ef:ae:=0A=
99:b6:b8:e9:ff:66:a7:61:7d:10:4b:b4:5e:0f:e4:=0A=
3b:f2:4c:b7:6b:49:e6:3c:32:29:03:3b:fc:3f:bb:=0A=
54:08:17:3a:62:ad:75:c3:97:35:c8:74:8d:0d:d2:=0A=
cf:c4:b9:57:eb:e2:53:9d:45:e7:99:73:2c:7c:0c:=0A=
82:d9:c9:e8:7a:f7:37:f2:07:c4:12:41:09:9d:2e:=0A=
22:0b:35:02:ed:61:ec:36:03=0A=
Exponent: 65537 (0x10001)=0A=
Signature Algorithm: md5WithRSAEncryption=0A=
72:d3:c1:2f:a8:66:38:40:be:46:62:1b:93:e4:bc:76:ea:de:=0A=
d5:d1:39:3d:6c:ac:73:87:d6:0a:c6:dc:93:2e:ec:74:b2:a0:=0A=
c5:70:04:16:bb:55:29:8c:f4:8e:2f:08:0d:84:4f:ae:69:2f:=0A=
82:bb:22:0a:c2:c4:b3:33:1f:38:80:e2:24:ef:f7:ce:4b:91:=0A=
7b:a1:19:36:a2:e0:b4:40:f3:e1:63:48:93:db:05:e2:f5:98:=0A=
6f:77:a0:a2:7e:33:70:bc:27:43:7b:4b:62:9d:27:90:35:fb:=0A=
e9:a3:41:52:96:0f:1c:18:bd:9e:a9:76:32:94:f1:1e:32:f6:=0A=
79:6b=0A=
-----BEGIN CERTIFICATE-----=0A=
MIICCjCCAXMCBDzvGMIwDQYJKoZIhvcNAQEEBQAwTDELMAkGA1UEBhMCVVMxFjAU=0A=
BgNVBAoTDVdlYiBEZXZlbG9wZXIxCzAJBgNVBAsTAklUMRgwFgYDVQQDEw9JU1Mg=0A=
S2V5Z2VuIFRlc3QwHhcNMDIwNTI1MDQ1MzIyWhcNMjcwMTE0MDQ1MzIyWjBMMQsw=0A=
CQYDVQQGEwJVUzEWMBQGA1UEChMNV2ViIERldmVsb3BlcjELMAkGA1UECxMCSVQx=0A=
GDAWBgNVBAMTD0lTUyBLZXlnZW4gVGVzdDCBnzANBgkqhkiG9w0BAQEFAAOBjQAw=0A=
gYkCgYEAy6ACsVtGJ69fkeKxJUlZqUP4FJFDIrkrUEi04c8UAAmC6jxu9+mMuLD+=0A=
766Ztrjp/2anYX0QS7ReD+Q78ky3a0nmPDIpAzv8P7tUCBc6Yq11w5c1yHSNDdLP=0A=
xLlX6+JTnUXnmXMsfAyC2cnoevc38gfEEkEJnS4iCzUC7WHsNgMCAwEAATANBgkq=0A=
hkiG9w0BAQQFAAOBgQBy08EvqGY4QL5GYhuT5Lx26t7V0Tk9bKxzh9YKxtyTLux0=0A=
sqDFcAQWu1UpjPSOLwgNhE+uaS+CuyIKwsSzMx84gOIk7/fOS5F7oRk2ouC0QPPh=0A=
Y0iT2wXi9Zhvd6CifjNwvCdDe0tinSeQNfvpo0FSlg8cGL2eqXYylPEeMvZ5aw=3D=3D=0A=
-----END CERTIFICATE-----=0A=
------_=_NextPart_000_01C2336E.C665B3B8
Content-Type: application/octet-stream;
name="test_allkey_04.xml"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: attachment;
filename="test_allkey_04.xml"
<!-- edited with XML Spy v4.3 U (http://www.xmlspy.com) by Dana Godfrey =
(Internet Security Systems) -->
<ISSKeys Source=3D"ISS Atlanta">
<!-- TestKey ISS keygen -->
<Contacts>
<Contact>
<Keys Address1=3D"2626 Somewhere Lane" Address2=3D"suite 200A" =
City=3D"Atlanta" Country=3D"US" Email=3D"keys@iss.net" =
Fax=3D"778-555-1212" Phone=3D"777.555.1212" PostCode=3D"30064" =
Weburl=3D"http://web.fubar.net"/>
<CustomerRelations Address1=3D"1313 k
nowwhere Lane" Address2=3D"suite 300A" City=3D"Atlanta" Country=3D"US" =
Email=3D"customer_relations@iss.net" Fax=3D"778-555-7799" Phone=3D"77
7.555.7788" PostCode=3D"30064" =
Weburl=3D"http://web.customer_relations_iss.net"/>
<Support Address1=3D"1234 Anvil Rd." Address2=3D"suite 440B" =
City=3D"Atlanta" Country=3D"US" Email=3D"support@iss.net" =
Fax=3D"778-555-7755" Phone=3D"777.555.7744" PostCode=3D"3
0064" Weburl=3D"http://web.suport_iss.net"/>
<Version>1.0</Version>
<OCN>163444</OCN>
<Source>ISS Atlanta</Source>
<Serial>AC
C64BB4-A53D-AC83-3E6F-E0AB737DEC9D</Serial>
<Timestamp>2000-06-14 10:34:09</Timestamp>
<sig:Signature xmlns:sig=3D"http://www.w3.org/2000/09/xmldsig#">
<sig:SignedInfo>
<sig:CanonicalizationMethod =
Algorithm=3D"http://www.w3.org/TR/2001/REC-xml-c14n-20010315"/>
<sig:SignatureMethod =
Algorithm=3D"http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
<sig:Reference URI=3D"">
<sig:Transforms>
<sig:Transform =
Algorithm=3D"http://www.w3.org/TR/1999/REC-xpath-19991116">
<sig:XPath>/ISSKeys/Contacts/Contact</sig:XPath>
</sig:Transform>
<sig:Transform =
Algorithm=3D"http://www.w3.org/TR/2001/REC-xml-c14n-20010315#WithComment=
s"/>
</sig:Transforms>
<sig:DigestMethod =
Algorithm=3D"http://www.w3.org/2000/09/xmldsig#sha1"/>
<sig:DigestValue>3tPX5xUmcKYHkG3Mv8TBAAYjBIU=3D</sig:DigestValue>
</sig:Reference>
</sig:SignedInfo>
=
<sig:SignatureValue>GpbCX9juwQ6k4Hs5j19MSXdtAdxeY9cK06Hb17ugq7f6sIy71gaf=
WWNJ1Na/TKGCrABlgrXWH2VR
asYcPMEmi1RZKDPUzmPAjznKRozjZTS3nn2BrAl1EKLugiqYmer+IG8SOXXTDSiwbmphtsXK=
+emU
FpUVVxfjLrmk8h6hd4k=3D</sig:SignatureValue>
<sig:KeyInfo>
<sig:X509Data>
<sig:X509Certificate>
MIICCjCCAXMCBDzvGMIwDQYJKoZIhvcNAQEEBQAwTDELMAkGA1UEBhMCVVMxFjAUBgNVBAoT=
DVdl
YiBEZXZlbG9wZXIxCzAJBgNVBAsTAklUMRgwFgYDVQQDEw9JU1MgS2V5Z2VuIFRlc3QwHhcN=
MDIw
NTI1MDQ1MzIyWhcNMjcwMTE0MDQ1MzIyWjBMMQswCQYDVQQGEwJVUzEWMBQGA1UEChMNV2Vi=
IERl
dmVsb3BlcjELMAkGA1UECxMCSVQxGDAWBgNVBAMTD0lTUyBLZXlnZW4gVGVzdDCBnzANBgkq=
hkiG
9w0BAQEFAAOBjQAwgYkCgYEAy6ACsVtGJ69fkeKxJUlZqUP4FJFDIrkrUEi04c8UAAmC6jxu=
9+mM
uLD+766Ztrjp/2anYX0QS7ReD+Q78ky3a0nmPDIpAzv8P7tUCBc6Yq11w5c1yHSNDdLPxLlX=
6+JT
nUXnmXMsfAyC2cnoevc38gfEEkEJnS4iCzUC7WHsNgMCAwEAATANBgkqhkiG9w0BAQQFAAOB=
gQBy
08EvqGY4QL5GYhuT5Lx26t7V0Tk9bKxzh9YKxtyTLux0sqDFcAQWu1UpjPSOLwgNhE+uaS+C=
uyIK
wsSzMx84gOIk7/fOS5F7oRk2ouC0QPPhY0iT2wXi9Zhvd6CifjNwvCdDe0tinSeQNfvpo0FS=
lg8c
GL2eqXYylPEeMvZ5aw=3D=3D
</sig:X509Certificate>
</sig:X509Data>
<sig:KeyValue>
<sig:RSAKeyValue>
<sig:Modulus>
y6ACsVtGJ69fkeKxJUlZqUP4FJFDIrkrUEi04c8UAAmC6jxu9+mMuLD+766Ztrjp/2anYX0Q=
S7Re
D+Q78ky3a0nmPDIpAzv8P7tUCBc6Yq11w5c1yHSNDdLPxLlX6+JTnUXnmXMsfAyC2cnoevc3=
8gfE
EkEJnS4iCzUC7WHsNgM=3D
</sig:Modulus>
<sig:Exponent>AQAB</sig:Exponent>
</sig:RSAKeyValue>
</sig:KeyValue>
</sig:KeyInfo>
</sig:Signature>
</Contact>
</Contacts>
<EndUsers>
<EndUser Address1=3D"666 Rockets way" Address2=3D"Apt. B" =
City=3D"Scienceville" CompanyName=3D"Spacely Sprockets" Country=3D"US" =
Email=3D"gjetson@sprokets.net" PostCode=3D"" State=3D"Disturbed" =
SubjectName=3D"George Jetson" Title=3D"Whipping Boy">
<Version>1.0</Version>
<OCN>163444</OCN>
<Source>ISS Atlanta</Source>
<Serial>CE8135D7-8D27-4BC4-BCA6-2DBDE703B6A
E</Serial>
<Timestamp>2000-06-14 10:34:09</Timestamp>
</EndUser>
</EndUsers>
<LicensedModules>
<LicensedModule ContactInfo=3D"ACC64BB4-
A53D-AC83-3E6F-E0AB737DEC9D" =
EndUserInfo=3D"CE8135D7-8D27-4BC4-BCA6-2DBDE703B6AE" Identity=3D"RO" =
LicenseExpiration=3D"2003-06-14" LicenseType=3D"evaluation" =
Limit=3D"2147483647" LimitOutOfMaintenance=3D"0" =
MaintenanceExpiration=3D"2003-06-14">
<Version>1.0</Version>
<OCN>163444</OCN>
<Source>ISS Atlanta</Source>
<Serial>F61BD0F3-D5D9-2F90-A24D-BF989200D712</Serial>
<Timestamp>2000-06-14 10:34:09</Timestamp>
</LicensedModule>
</LicensedModules>
</ISSKeys>
------_=_NextPart_000_01C2336E.C665B3B8
Content-Type: text/plain;
name="xmlsec-output.txt"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: attachment;
filename="xmlsec-output.txt"
xmlSecSignedInfoRead: failed to validate "Reference"
=3D XMLDSig Result (validate)
=3D=3D result: FAIL
=3D=3D sign method: http://www.w3.org/2000/09/xmldsig#rsa-sha1
=3D=3D KEY
=3D=3D=3D method: RSAKeyValue
=3D=3D=3D key name: NULL
=3D=3D=3D key type: Public
=3D=3D=3D key origin: x509
=3D=3D=3D X509 Certificate
=3D=3D=3D=3D Subject Name: /C=3DUS/O=3DWeb Developer/OU=3DIT/CN=3DISS =
Keygen Test
=3D=3D=3D=3D Issuer Name: /C=3DUS/O=3DWeb Developer/OU=3DIT/CN=3DISS =
Keygen Test
=3D=3D=3D=3D Issuer Serial: 3CEF18C2
=3D=3D SIGNED INFO REFERENCES
=3D=3D=3D REFERENCE=20
=3D=3D=3D=3D ref type: SignedInfo Reference
=3D=3D=3D=3D result: FAIL
=3D=3D=3D=3D digest method: http://www.w3.org/2000/09/xmldsig#sha1
=3D=3D=3D=3D uri:=20
=3D=3D=3D=3D type: NULL
=3D=3D=3D=3D id: NULL
=3D=3D=3D=3D start buffer:
<ISSKeys Source=3D"ISS Atlanta">
=09
<Contacts>
<Contact>
<Keys Address1=3D"2626 Somewhere Lane" Address2=3D"suite 200A" =
City=3D"Atlanta" Country=3D"US" Email=3D"keys@iss.net" =
Fax=3D"778-555-1212" Phone=3D"777.555.1212" PostCode=3D"30064" =
Weburl=3D"http://web.fubar.net"></Keys>
<CustomerRelations Address1=3D"1313 k nowwhere Lane" =
Address2=3D"suite 300A" City=3D"Atlanta" Country=3D"US" =
Email=3D"customer_relations@iss.net" Fax=3D"778-555-7799" Phone=3D"77 =
7.555.7788" PostCode=3D"30064" =
Weburl=3D"http://web.customer_relations_iss.net"></CustomerRelations>
<Support Address1=3D"1234 Anvil Rd." Address2=3D"suite 440B" =
City=3D"Atlanta" Country=3D"US" Email=3D"support@iss.net" =
Fax=3D"778-555-7755" Phone=3D"777.555.7744" PostCode=3D"3 0064" =
Weburl=3D"http://web.suport_iss.net"></Support>
<Version>1.0</Version>
<OCN>163444</OCN>
<Source>ISS Atlanta</Source>
<Serial>AC
C64BB4-A53D-AC83-3E6F-E0AB737DEC9D</Serial>
<Timestamp>2000-06-14 10:34:09</Timestamp>
<sig:Signature xmlns:sig=3D"http://www.w3.org/2000/09/xmldsig#">
<sig:SignedInfo>
<sig:CanonicalizationMethod =
Algorithm=3D"http://www.w3.org/TR/2001/REC-xml-c14n-20010315"></sig:Cano=
nicalizationMethod>
<sig:SignatureMethod =
Algorithm=3D"http://www.w3.org/2000/09/xmldsig#rsa-sha1"></sig:Signature=
Method>
<sig:Reference URI=3D"">
<sig:Transforms>
<sig:Transform =
Algorithm=3D"http://www.w3.org/TR/1999/REC-xpath-19991116">
<sig:XPath>/ISSKeys/Contacts/Contact</sig:XPath>
</sig:Transform>
<sig:Transform =
Algorithm=3D"http://www.w3.org/TR/2001/REC-xml-c14n-20010315#WithComment=
s"></sig:Transform>
</sig:Transforms>
<sig:DigestMethod =
Algorithm=3D"http://www.w3.org/2000/09/xmldsig#sha1"></sig:DigestMethod>=
<sig:DigestValue>3tPX5xUmcKYHkG3Mv8TBAAYjBIU=3D</sig:DigestValue>
</sig:Reference>
</sig:SignedInfo>
=
<sig:SignatureValue>GpbCX9juwQ6k4Hs5j19MSXdtAdxeY9cK06Hb17ugq7f6sIy71gaf=
WWNJ1Na/TKGCrABlgrXWH2VR
asYcPMEmi1RZKDPUzmPAjznKRozjZTS3nn2BrAl1EKLugiqYmer+IG8SOXXTDSiwbmphtsXK=
+emU
FpUVVxfjLrmk8h6hd4k=3D</sig:SignatureValue>
<sig:KeyInfo>
<sig:X509Data>
<sig:X509Certificate>
MIICCjCCAXMCBDzvGMIwDQYJKoZIhvcNAQEEBQAwTDELMAkGA1UEBhMCVVMxFjAUBgNVBAoT=
DVdl
YiBEZXZlbG9wZXIxCzAJBgNVBAsTAklUMRgwFgYDVQQDEw9JU1MgS2V5Z2VuIFRlc3QwHhcN=
MDIw
NTI1MDQ1MzIyWhcNMjcwMTE0MDQ1MzIyWjBMMQswCQYDVQQGEwJVUzEWMBQGA1UEChMNV2Vi=
IERl
dmVsb3BlcjELMAkGA1UECxMCSVQxGDAWBgNVBAMTD0lTUyBLZXlnZW4gVGVzdDCBnzANBgkq=
hkiG
9w0BAQEFAAOBjQAwgYkCgYEAy6ACsVtGJ69fkeKxJUlZqUP4FJFDIrkrUEi04c8UAAmC6jxu=
9+mM
uLD+766Ztrjp/2anYX0QS7ReD+Q78ky3a0nmPDIpAzv8P7tUCBc6Yq11w5c1yHSNDdLPxLlX=
6+JT
nUXnmXMsfAyC2cnoevc38gfEEkEJnS4iCzUC7WHsNgMCAwEAATANBgkqhkiG9w0BAQQFAAOB=
gQBy
08EvqGY4QL5GYhuT5Lx26t7V0Tk9bKxzh9YKxtyTLux0sqDFcAQWu1UpjPSOLwgNhE+uaS+C=
uyIK
wsSzMx84gOIk7/fOS5F7oRk2ouC0QPPhY0iT2wXi9Zhvd6CifjNwvCdDe0tinSeQNfvpo0FS=
lg8c
GL2eqXYylPEeMvZ5aw=3D=3D
</sig:X509Certificate>
</sig:X509Data>
<sig:KeyValue>
<sig:RSAKeyValue>
<sig:Modulus>
y6ACsVtGJ69fkeKxJUlZqUP4FJFDIrkrUEi04c8UAAmC6jxu9+mMuLD+766Ztrjp/2anYX0Q=
S7Re
D+Q78ky3a0nmPDIpAzv8P7tUCBc6Yq11w5c1yHSNDdLPxLlX6+JTnUXnmXMsfAyC2cnoevc3=
8gfE
EkEJnS4iCzUC7WHsNgM=3D
</sig:Modulus>
<sig:Exponent>AQAB</sig:Exponent>
</sig:RSAKeyValue>
</sig:KeyValue>
</sig:KeyInfo>
</sig:Signature>
</Contact>
</Contacts>
<EndUsers>
<EndUser Address1=3D"666 Rockets way" Address2=3D"Apt. B" =
City=3D"Scienceville" CompanyName=3D"Spacely Sprockets" Country=3D"US" =
Email=3D"gjetson@sprokets.net" PostCode=3D"" State=3D"Disturbed" =
SubjectName=3DFAIL
"George Jetson" Title=3D"Whipping Boy">
<Version>1.0</Version>
<OCN>163444</OCN>
<Source>ISS Atlanta</Source>
<Serial>CE8135D7-8D27-4BC4-BCA6-2DBDE703B6A
E</Serial>
<Timestamp>2000-06-14 10:34:09</Timestamp>
</EndUser>
</EndUsers>
<LicensedModules>
<LicensedModule ContactInfo=3D"ACC64BB4- A53D-AC83-3E6F-E0AB737DEC9D" =
EndUserInfo=3D"CE8135D7-8D27-4BC4-BCA6-2DBDE703B6AE" Identity=3D"RO" =
LicenseExpiration=3D"2003-06-14" LicenseType=3D"evaluation" =
Limit=3D"2147483647" LimitOutOfMaintenance=3D"0" =
MaintenanceExpiration=3D"2003-06-14">
<Version>1.0</Version>
<OCN>163444</OCN>
<Source>ISS Atlanta</Source>
<Serial>F61BD0F3-D5D9-2F90-A24D-BF989200D712</Serial>
<Timestamp>2000-06-14 10:34:09</Timestamp>
</LicensedModule>
</LicensedModules>
</ISSKeys>
=3D=3D=3D=3D end buffer:
=3D Status:
=3D=3D Signatures ok: 0
=3D=3D Signatures fail: 1
=3D=3D SignedInfo Ref ok: 0
=3D=3D SignedInfo Ref fail: 1
=3D=3D Manifest Ref ok: 0
=3D=3D Manifest Ref fail: 0
Error: operation failed
=1A
------_=_NextPart_000_01C2336E.C665B3B8--