[xmlsec] Enveloped signing with multiple signatures
Dmitry Belyavsky
beldmit at cryptocom.ru
Tue Oct 5 05:38:25 PDT 2004
Hello!
> On Mon, 4 Oct 2004, Aleksey Sanin wrote:
>
> > In some case, you may also need to include enveloped transform first
> > because of protocol requirements (for example, I believe ebxml requires
> > this).
>
> Yes, I include enveloped transform and XPath transform after that. I get
> identical digest values at 1st signatures, but digest value differs
> second time. Whether I am wrong, or it is expected result?
I have understood. I didn't really apply XPath transform but I only
added it to <Transforms> tag.
So I write smth like that:
================
xpathTransform = xmlSecTransformCreate(xmlSecTransformXPathId);
if(xpathTransform == NULL) {
fprintf(stderr, "Error: failed to create XPath transform\n");
goto done;
}
xpathTransform->hereNode = xpathNode;
xmlSecTransformCtxPrepend(&dsigCtx->transformCtx, xpathTransform);
================
and get backtrace:
================
func=xmlSecTransformXPathExecute:file=xpath.c:line=458:obj=unknown:subj=xmlSecPtrListGetSize(dataList) > 0:error=100:assertion:
func=xmlSecTransformDefaultPushXml:file=transforms.c:line=2371:obj=xpath:subj=xmlSecTransformExecute:error=1:xmlsec library function failed:
func=xmlSecTransformCtxXmlExecute:file=transforms.c:line=1207:obj=unknown:subj=xmlSecTransformPushXml:error=1:xmlsec library function failed:transform=xpath
func=xmlSecDSigCtxProcessSignatureNode:file=xmldsig.c:line=614:obj=unknown:subj=xmlSecTransformCtxXmlExecute:error=1:xmlsec library function failed:
func=xmlSecDSigCtxSign:file=xmldsig.c:line=303:obj=unknown:subj=xmlSecDSigCtxSigantureProcessNode:error=1:xmlsec library function failed:
Error: signature failed
func=xmlSecTransformDestroy:file=transforms.c:line=1447:obj=unknown:subj=xmlSecTransformIsValid(transform):error=100:assertion:
================
What shall I do to provide correct dataList? And what is expected as
dataList?
Thank you.
--
SY, Dmitry Belyavsky (ICQ UIN 11116575)
More information about the xmlsec
mailing list