[xmlsec] Invalid data char=B; base=10 on verify

[Edward Shallow]

Hi Aleksey,

   I have a strange one here. I am using --ms-crypto (thanks Wouter and
Aleksey) with an XPath-filter (intersect and subtract). I have used a
similar template in dozens of tests. Sign works fine. --store-references
shows intersect, subtract working fine.

   However when I go to verify, I get the error below refrring to some
invalid data, yet messages state OK 1/1 etc ... As you can see there is next
to nothing in the xml doc being signed.

   I have included input and output from successful sign operation as
attachments. The only thing different is the absence of namespace qualifier
in base document.

   Any ideas ?  This is for the UN.

Ed



C:\epmsigner-dev\XMLSec>xmlsec sign --crypto mscrypto --output
C:/epmsigner-dev/infopath/FFIEPMcompleted.signed.xml
C:/epmsigner-dev/infopath/FFIEPMcompleted2.ToBeSigned.xml

C:\epmsigner-dev\XMLSec>xmlsec verify --crypto mscrypto
C:/epmsigner-dev/infopath/FFIEPMcompleted.signed.xml
func=xmlSecBnFromString:file=..\src\bn.c:line=214:obj=unknown:subj=unknown:e
rror=12:invalid data:char=B;base=10;last error=-2146885628 (0x80092004);last
error msg=Cannot find object or property.

func=xmlSecMSCryptoX509FindCert:file=..\src\mscrypto\x509vfy.c:line=586:obj=
unknown:subj=xmlSecBnInitialize:error=1:xmlsec library function failed:;last
error=-2146885628 (0x80092004);last error msg=Cannot find object or
property.

OK
SignedInfo References (ok/all): 1/1
Manifests References (ok/all): 0/0
-------------- next part --------------
A non-text attachment was scrubbed...
Name: FFIEPMcompleted.signed.xml
Type: text/xml
Size: 10163 bytes
Desc: not available
Url : http://www.aleksey.com/pipermail/xmlsec/attachments/20031110/7b841691/FFIEPMcompleted.signed.xml
-------------- next part --------------
A non-text attachment was scrubbed...
Name: FFIEPMcompleted2.ToBeSigned.xml
Type: text/xml
Size: 10289 bytes
Desc: not available
Url : http://www.aleksey.com/pipermail/xmlsec/attachments/20031110/7b841691/FFIEPMcompleted2.ToBeSigned.xml