[xmlsec] rsakey sign fail

[Aleksey Sanin]

Read the error:

verification failed:err=19;msg=self signed certificate in
certificate chain

Aleksey

Kai Hendry wrote:
> http://git.webvm.net/?p=wgtqa;a=blob;f=xmldsig/Makefile;
> 
> hendry at x61 xmldsig$ make dsatest
> func=xmlSecOpenSSLX509StoreVerify:file=x509vfy.c:line=360:obj=x509-store:subj=X509_verify_cert:error=4:crypto
> library function failed:subj=/C=US/ST=California/O=XML Security
> Library (http://www.aleksey.com/xmlsec)/OU=Test Root
> Certificate/CN=Aleksey
> Sanin/emailAddress=xmlsec at aleksey.com;err=19;msg=self signed
> certificate in certificate chain
> func=xmlSecOpenSSLX509StoreVerify:file=x509vfy.c:line=408:obj=x509-store:subj=unknown:error=71:certificate
> verification failed:err=19;msg=self signed certificate in certificate
> chain
> OK
> SignedInfo References (ok/all): 2/2
> Manifests References (ok/all): 0/0
> hendry at x61 xmldsig$ make clean
> rm -f helloworld/author-signature.xml signing-template.xml
> rm -f helloworld.wgt example*
> hendry at x61 xmldsig$ make rsatest
> func=xmlSecKeysMngrGetKey:file=keys.c:line=1364:obj=unknown:subj=xmlSecKeysMngrFindKey:error=1:xmlsec
> library function failed:
> func=xmlSecDSigCtxProcessKeyInfoNode:file=xmldsig.c:line=871:obj=unknown:subj=unknown:error=45:key
> is not found:
> func=xmlSecDSigCtxProcessSignatureNode:file=xmldsig.c:line=565:obj=unknown:subj=xmlSecDSigCtxProcessKeyInfoNode:error=1:xmlsec
> library function failed:
> func=xmlSecDSigCtxSign:file=xmldsig.c:line=303:obj=unknown:subj=xmlSecDSigCtxSigantureProcessNode:error=1:xmlsec
> library function failed:
> Error: signature failed
> Error: failed to sign file "../signing-template.xml"
> make: *** [rsatest] Error 1
> hendry at x61 xmldsig$
> 
> 
> Hi Aleksey,
> 
> I've using your rsakey.p12 to sign, though it doesn't work. However
> the dsakey.p12 does work. I don't understand why there is a problem
> with the rsakey. There is no special KeyInfo defined in the template.
> 
> Do you have a better idea?
> 
> Kind regards,
> _______________________________________________
> xmlsec mailing list
> xmlsec at aleksey.com
> http://www.aleksey.com/mailman/listinfo/xmlsec