> We just tried your patch, it is good for both positive sn and negative sn. Good! > 1) remove the assertion in xmlSecBnAdd Yes, I found it too as soon as I got a test case using Andrew's trick :( > 2) add some code to support serial number = 0 Done. Thanks! Thanks for testing! Aleksey