[xmlsec] xmlse usage

[Wayne Cheng]

Thank you so much for your quick response.

The server.key generation algorithm we used is RSA-sha1. I am not sure where to
find/change
algorithm used for signature for xmlsec utility.

I tried the new format and it still not working. Also, I am not sure if rename
for server is required or not.

bash-2.05$ xmlsec sign --privkey:server ./server.key xml.txt
xmlSecKeysMngrGetKey (keys.c:451): error 17: key not found :
xmlSecSignedInfoRead (xmldsig.c:1385): error 17: key not found :
xmlSecSignatureRead (xmldsig.c:1124): error 2: xmlsec operation failed :
xmlSecS
ignedInfoRead - -1
xmlSecDSigGenerate (xmldsig.c:792): error 2: xmlsec operation failed :
xmlSecSig
natureRead - -1
Error: xmlSecDSigGenerate() failed
Error: operation failed
bash-2.05$

Thanks,

Wayne
--- Aleksey Sanin <aleksey at aleksey.com> wrote:
> First of all, you made a mistake in the command line. The correct call 
> should
> look like this:
>     xmlsec sign --privkey:server ./server.key xml.txt
> The square brackets '[' and ']'  in the help page indicate that this 
> part is optional.
> If running the correct command will not help then I would suggest to 
> check that
> the key in server.key matches the signature algorithm used (i.e. don't 
> expect to
> find an RSA key for DSA signature :) ).
> 
> With best regards,
> Aleksey
> 
> Wayne Cheng wrote:
> 
> >Hello Aleksey,
> >
> >I tired to play with xmlsec. But I am not why the key cannot be found.
> >server.key is the private key generated with openssl.
> >
> >bash-2.05$ xmlsec sign --privkey[:server] ./server.key xml.txt
> >xmlSecKeysMngrGetKey (keys.c:451): error 17: key not found :
> >xmlSecSignedInfoRead (xmldsig.c:1385): error 17: key not found :
> >xmlSecSignatureRead (xmldsig.c:1124): error 2: xmlsec operation failed :
> >xmlSecS
> >ignedInfoRead - -1
> >xmlSecDSigGenerate (xmldsig.c:792): error 2: xmlsec operation failed :
> >xmlSecSig
> >natureRead - -1
> >Error: xmlSecDSigGenerate() failed
> >Error: operation failed
> >bash-2.05$
> >
> >Thanks,
> >
> >Wayne
> >
> >__________________________________________________
> >Do you Yahoo!?
> >Yahoo! Mail Plus - Powerful. Affordable. Sign up now.
> >http://mailplus.yahoo.com
> >_______________________________________________
> >xmlsec mailing list
> >xmlsec at aleksey.com
> >http://www.aleksey.com/mailman/listinfo/xmlsec
> >  
> >
> 
> 
> _______________________________________________
> xmlsec mailing list
> xmlsec at aleksey.com
> http://www.aleksey.com/mailman/listinfo/xmlsec


__________________________________________________
Do you Yahoo!?
Yahoo! Mail Plus - Powerful. Affordable. Sign up now.
http://mailplus.yahoo.com