[xmlsec] Canonicalization question

[Veiko.Sinivee at seb.se]

Hi Folks!

I would like to ask you a simple thing - should I canonicalize
all signed content before calculating the digest or not?
XML-DSIG says I should canonicalize <SignedInfo> but
for verifying <Reference> -s XML-DSIG says just apply the Transform-s
and calculate the digest. So if a <Reference> contains a digest of some
block of xml data, should it be canonicalized or not?

Regards,

Veiko