[xmlsec] X509 - does cert need to be included in XML?

[Mark Young]

I'm not sure I understand.  What do you mean by "signed" cert and certificate subject?

> Date: Mon, 3 Nov 2008 12:16:17 -0800
> From: aleksey at aleksey.com
> To: ccgenealogy at hotmail.com
> CC: xmlsec at aleksey.com
> Subject: Re: [xmlsec] X509 - does cert need to be included in XML?
> 
> You can refer to "signed" cert using certificate subject, etc.
> But some reference MUST present.
> 
> Aleksey
> 
> Mark Young wrote:
> > I've been verifying signed XML documents using an X509 chain, and I've 
> > found that the verification is only successful if the actual signing 
> > certificate is provided in the XML.  The other certificates in the chain 
> > can just be placed in the keys manager.  Is there a way for the 
> > verification to succeed with all the certificates in the keys manager, 
> > without requiring any to be included in the signed XML document?  Mike
> > 
> > ------------------------------------------------------------------------
> > When your life is on the go—take your life with you. Try Windows Mobile® 
> > today <http://clk.atdmt.com/MRT/go/115298558/direct/01/>
> > 
> > 
> > ------------------------------------------------------------------------
> > 
> > _______________________________________________
> > xmlsec mailing list
> > xmlsec at aleksey.com
> > http://www.aleksey.com/mailman/listinfo/xmlsec

_________________________________________________________________
Color coding for safety: Windows Live Hotmail alerts you to suspicious email.
http://windowslive.com/Explore/Hotmail?ocid=TXT_TAGLM_WL_hotmail_acq_safety_112008
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://www.aleksey.com/pipermail/xmlsec/attachments/20081114/6629a4e2/attachment.htm