[xmlsec] Signing with user cert p12

Aleksey Sanin aleksey at aleksey.com
Fri Nov 16 07:27:40 PST 2007


> Where is the fail?

You sign the *whole* document. After the signature
is generated, you have new document (e.g. signature
value have changed) and the signature correctly fails.
You might want to use enveloped transform to exclude
Signature element from signature.

Aleksey




More information about the xmlsec mailing list