[xmlsec] xmlsec1 signing with x509 cert. (NO x509 cert)
Braja Biswal
be.biswal at gmail.com
Sun Jun 14 23:11:02 PDT 2009
I used the command
xmlsec1 --sign --output x509data-sn-test-untrusted.xml --privkey-pem
rsakey.pem --untrusted-pem rsacert.pem --print-debug x509data-sn-test.tmpl
Taking the sample cert
1. *rsakey.pem* (xmlsec1-1.2.10\tests\keys)
2. *rsacert.pem *(xmlsec1-1.2.10\tests\keys)
Which is having valid certs.
In signed output its blank
--------------------------
<X509Data>
</X509Data>
--------------------------
On Mon, Jun 15, 2009 at 10:51 AM, Aleksey Sanin <aleksey at aleksey.com> wrote:
> Do you have certs in the rsakey.p12 ?
>
> Aleksey
>
> Braja Biswal wrote:
>
>> Yes I have.
>>
>> <X509Data>
>> <X509SubjectName/>
>> <X509IssuerSerial/>
>> <X509SKI/>
>> <X509Certificate/>
>> <X509CRL/>
>> </X509Data>
>>
>> On Sat, Jun 13, 2009 at 10:03 PM, Aleksey Sanin <aleksey at aleksey.com<mailto:
>> aleksey at aleksey.com>> wrote:
>>
>> Do you have <X509Data> element in your template?
>>
>> Aleksey
>>
>> Braja Biswal wrote:
>>
>> HI Aleksey,
>>
>> I make the following steps
>> 1. ./configure --enable-crypto-dl=no --enable-x509=yes
>> --with-openssl=/usr/local/ssl
>> (./configure --enable-crypto-dl=no --with-openssl=/usr/local/ssl)
>> 2. make
>> make install.
>>
>> Now I tried to sign the templete files
>> x509data-sn-test.tmpl
>> x509data-test.tmpl
>> enveloping-sha224-rsa-sha224.tmpl
>> couple of other files with below options.
>> *THERE IS NO X509 DATA *available in signed output files.
>>
>> I used some commands like
>> 1.
>> xmlsec1 --sign --output x509data-test-signed-untrusted.xml
>> --print-debug --pkcs12 rsakey.p12 x509data-test.tmpl
>> 2.
>> xmlsec1 --sign --output x509data-sn-test-untrusted.xml
>> --privkey-pem rsakey.pem --untrusted-pem rsacert.pem
>> --print-debug x509data-sn-test.tmpl
>>
>> Can you please help?
>> Where I am doing mistake.
>>
>> Regards
>> Braja
>>
>>
>>
>> ------------------------------------------------------------------------
>>
>> _______________________________________________
>> xmlsec mailing list
>> xmlsec at aleksey.com <mailto:xmlsec at aleksey.com>
>> http://www.aleksey.com/mailman/listinfo/xmlsec
>>
>>
>>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://www.aleksey.com/pipermail/xmlsec/attachments/20090615/7281d9f8/attachment.htm
More information about the xmlsec
mailing list