Can you give more details, please? Which version of xmlsec/openssl are you using, who produced the signature and who can not verify it, may be an example we can play with. Aleksey