[xmlsec] Verifying error for proper xml document
Arda Tekin
arda.tekin@softhome.net
Thu, 10 Apr 2003 16:40:31 +0300
This is a MIME-formatted message. If you see this text it means that your
E-mail software does not support MIME-formatted messages.
--=_jive-13715-1049982071-0001-2
Content-Type: multipart/alternative; boundary="=_jive-13715-1049982071-0001-3"
This is a MIME-formatted message. If you see this text it means that your
E-mail software does not support MIME-formatted messages.
--=_jive-13715-1049982071-0001-3
Content-Type: text/plain; charset=iso-8859-9
Content-Transfer-Encoding: quoted-printable
Hello Aleksey,
I'm testing Visa 3D secure protocol right now. I have the last signed =
xml message (PARes.xml) which is sent by visa test servers in testing =
process. And I have the visa Root certificate. But when I use xmlsec =
utility to verify this document I get an error:
xmlSecTransformStateParseUri (..\src\transforms.c:1182): error 4: xml =
operation
failed : xmlXPtrEval(162354165)
xmlSecTransformStateCreate (..\src\transforms.c:881): error 2: xmlsec =
operation
failed : xmlSecTransformStateParseUri(#162354165)
xmlSecReferenceRead (..\src\xmldsig.c:1602): error 2: xmlsec operation =
failed :
xmlSecTransformStateCreate
xmlSecSignedInfoRead (..\src\xmldsig.c:1476): error 2: xmlsec operation =
failed :
xmlSecReferenceRead - -1
xmlSecSignatureRead (..\src\xmldsig.c:1175): error 2: xmlsec operation =
failed :
xmlSecSignedInfoRead - -1
xmlSecDSigValidate (..\src\xmldsig.c:733): error 2: xmlsec operation =
failed : xm
lSecSignatureRead - -1
Program arguments are:
verify --trusted C:\Test_Certs\cthRoot.pem c:\PARes.xml
Libraries are:
LibXML_Depends/libxml2-2.5.6.win32/lib" =
/libpath:"../LibXML_Depends/iconv-1.8.win32/lib" =
/libpath:"../LibXML_Depends/openssl-0.9.7.win32/lib" =
/libpath:"../LibXML_Depends/libxmlsec-0.0.14.win32/lib" =
/libpath:"../LibXML_Depends/libxslt-1.0.29.win32/lib" =
/libpath:"../LibXML_Depends/zlib114dll/dll32"=20
And PARes.xml and root certificate are in the attachment.
Aleksey I can verify this xml file correctly in the web page : =
http://www.infomosaic.net/XMLSign/SecureXMLVerifyWS.htm
Why xmlsec cant verify it? Can you help me about this problem? Because =
we dont want to use any other library except for xmlsec.
Regards,
Arda
--=_jive-13715-1049982071-0001-3
Content-Type: text/html; charset=iso-8859-9
Content-Transfer-Encoding: quoted-printable
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=3DContent-Type content=3D"text/html; =
charset=3Diso-8859-9">
<META content=3D"MSHTML 6.00.2800.1106" name=3DGENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=3D#ffffff>
<DIV><FONT face=3DArial size=3D2>
<DIV><FONT face=3DArial size=3D2>Hello Aleksey,</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT> </DIV>
<DIV><FONT face=3DArial size=3D2>I'm testing Visa 3D secure =
protocol right=20
now. I have the last signed xml message (PARes.xml) which =
is sent=20
by visa test servers in testing process. And I have the visa Root=20
certificate. But when I use xmlsec utility to verify this document I get =
an=20
error:</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT> </DIV>
<DIV><FONT face=3DArial size=3D2>xmlSecTransformStateParseUri=20
(..\src\transforms.c:1182): error 4: xml operation<BR>failed :=20
xmlXPtrEval(162354165)<BR>xmlSecTransformStateCreate =
(..\src\transforms.c:881):=20
error 2: xmlsec operation<BR>failed :=20
xmlSecTransformStateParseUri(#162354165)<BR>xmlSecReferenceRead=20
(..\src\xmldsig.c:1602): error 2: xmlsec operation failed=20
:<BR>xmlSecTransformStateCreate<BR>xmlSecSignedInfoRead =
(..\src\xmldsig.c:1476):=20
error 2: xmlsec operation failed :<BR> xmlSecReferenceRead -=20
-1<BR>xmlSecSignatureRead (..\src\xmldsig.c:1175): error 2: xmlsec =
operation=20
failed :<BR>xmlSecSignedInfoRead - -1<BR>xmlSecDSigValidate=20
(..\src\xmldsig.c:733): error 2: xmlsec operation failed :=20
xm<BR>lSecSignatureRead - -1</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT> </DIV>
<DIV><FONT face=3DArial size=3D2>Program arguments are:</FONT></DIV>
<DIV><FONT face=3DArial size=3D2>verify --trusted =
C:\Test_Certs\cthRoot.pem=20
c:\PARes.xml</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT> </DIV>
<DIV><FONT face=3DArial size=3D2>Libraries are:</FONT></DIV>
<DIV><FONT face=3DArial size=3D2>LibXML_Depends/libxml2-2.5.6.win32/lib" =
/libpath:"../LibXML_Depends/iconv-1.8.win32/lib"=20
/libpath:"../LibXML_Depends/openssl-0.9.7.win32/lib"=20
/libpath:"../LibXML_Depends/libxmlsec-0.0.14.win32/lib"=20
/libpath:"../LibXML_Depends/libxslt-1.0.29.win32/lib"=20
/libpath:"../LibXML_Depends/zlib114dll/dll32" </FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT> </DIV>
<DIV><FONT face=3DArial size=3D2>And PARes.xml and root certificate are =
in the=20
attachment.</FONT></DIV>
<DIV><FONT face=3DArial size=3D2>Aleksey I can verify this xml file =
correctly in the=20
web page : <FONT size=3D2><A=20
href=3D"http://www.infomosaic.net/XMLSign/SecureXMLVerifyWS.htm">http://w=
ww.infomosaic.net/XMLSign/SecureXMLVerifyWS.htm</A></FONT></FONT></DIV>
<DIV><FONT face=3DArial size=3D2>Why xmlsec cant verify it? Can you help =
me about=20
this problem? Because we dont want to use any other library except for=20
xmlsec.</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT> </DIV>
<DIV><FONT face=3DArial size=3D2>Regards,</FONT></DIV>
<DIV><FONT face=3DArial size=3D2>Arda</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT> </DIV>
<DIV><FONT face=3DArial =
size=3D2></FONT> </DIV></FONT></DIV></BODY></HTML>
--=_jive-13715-1049982071-0001-3--
--=_jive-13715-1049982071-0001-2
Content-Type: application/x-zip-compressed; name="PARes.zip"
Content-Transfer-Encoding: base64
Content-Disposition: attachment;
filename="PARes.zip"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--=_jive-13715-1049982071-0001-2
Content-Type: application/octet-stream; name="cthRoot.pem"
Content-Transfer-Encoding: 7bit
Content-Disposition: attachment;
filename="cthRoot.pem"
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
--=_jive-13715-1049982071-0001-2--