[xmlsec] Signing with X509 certificate using mscrypto provider

Jirka Kosek jirka at kosek.cz
Tue Apr 27 05:29:34 PDT 2010


Jirka Kosek wrote:
> Aleksey Sanin wrote:
> 
>> Thanks a lot for sending me the example certs to me! Could you
>> please try one more version?
>>
>> http://www.aleksey.com/public/xmlsec-20100423.tar.gz
> 
> Many thanks, excellent support! I can confirm that it now works even
> with the real certificate.

Just now I have found another issue. If you will ask for SubjectName in
signature template, like:

      <ds:X509Data>
        <ds:X509SubjectName/>
        <ds:X509Certificate/>
      </ds:X509Data>


Then encoding of subject name is mangled -- corresponding bytes in file
are encoded using local windows code page (windows-1250 in my case)
instead of UTF-8. This results in non-wellformed XML.

Thanks,

					Jirka

-- 
------------------------------------------------------------------
  Jirka Kosek      e-mail: jirka at kosek.cz      http://xmlguru.cz
------------------------------------------------------------------
       Professional XML consulting and training services
  DocBook customization, custom XSLT/XSL-FO document processing
------------------------------------------------------------------
 OASIS DocBook TC member, W3C Invited Expert, ISO JTC1/SC34 member
------------------------------------------------------------------

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 259 bytes
Desc: OpenPGP digital signature
URL: <http://www.aleksey.com/pipermail/xmlsec/attachments/20100427/cf6d2b1d/attachment.pgp>


More information about the xmlsec mailing list