[xmlsec] RES: RES: Trying to check sign

Thu Jun 7 12:43:29 PDT 2012

You might want to find a good book on cryptography.

Shortly, the certificate verification is based on the verification
of the previous certificate in the chain until one finds a "trusted"
certificate. The errors you are getting indicate that xmlsec/openssl
can not build the certificate chain and find a "trusted" cert.

Aleksey

On 6/7/12 12:29 PM, Renato Tegon Forti wrote:
> Hi Aleksey,
> 
> Thanks for your help! Really thanks a lot! If you have time to help-me
> again!
> 
> I am a really confusing, I am trying understand what I need to check if one
> signature is valid using your xmlsec1 tool, and then implement this on C
> code!
> 
> My signed document has these properties (mt.xml):
> 
> Transform Algorithm: Enveloped
> Algorithm: xmldsig#sha1
> 
> I'd try a lot of things, but all of it return me: "err=20;msg=unable to get
> local issuer certificate"
> 
> For sampe:
> 
> I try this: 
> xmlsec1 --verify --id-attr:Id infNFe --trusted-der mt.der.cer mt.xml 
> but "mt.der.cer" is cert that is on : <KeyInfo><X509Data><X509Certificate>
> 
> So I thought the problem was the root certificate, because I already have
> the certificate of the user in <X509Certificate>, then I tried:
> 
> xmlsec1 --verify --id-attr:Id infNFe --trusted-der
> Autoridade_Certificadora_da_Raiz_Brasileira_v2.der.cer mt.xml
> Some error "err=20;msg=unable to get local issuer certificate "
> 
> Then I tried a variation, only to check result: (--untrusted-der)
> 
> xmlsec1 --verify --id-attr:Id infNFe --untrusted-der
> Autoridade_Certificadora_da_Raiz_Brasileira_v2.der.cer mt.xml
> the error change to: err=18;msg=self signed certificate
> 
> I tried too:
> 
> xmlsec1 --verify --id-attr:Id infNFe --trusted-der
> SERASA_Autoridade_Certificadora_Principal_v2.der.cer mt.xml
> xmlsec1 --verify --id-attr:Id infNFe --trusted-der
> SERASA_Autoridade_Certificadora_Digital_v2.der.cer mt.xml
> 
> Some error "err=20;msg=unable to get local issuer certificate "
> 
> Reading a book I understood that to verifying an XML Signature:
> 
> 1.
> Verify the signature of the <SignedInfo> element. -> To do so, recalculate
> the digest of the <SignedInfo> element (using the digest algorithm specified
> in the <SignatureMethod> element) and use the public verification key to
> verify that the value of the <SignatureValue> element is correct for the
> digest of the <SignedInfo> element. 
> 
> The public key (public verification key)  in my case is: <X509Certificate>
> OK?
> 
> 2.
> If this step passes, recalculate the digests of the references contained
> within the <SignedInfo> element and compare them to the digest values
> expressed in each <Reference> element's corresponding <DigestValue> element.
> 
> 
> Please see attached files! (meta.zip)
>  -> mt.xml [file that I want check signature]
> -> chain.png [cert chains]
> -> Autoridade_Certificadora_da_Raiz_Brasileira_v2.der.cer [root cert in der
> format]
> -> SERASA_Autoridade_Certificadora_Principal_v2.der.cer ->
> SERASA_Autoridade_Certificadora_Digital_v2.der.cer -> mt.der.cer [all other
> certs in chain ]
> 
> What am I doing wrong? What I misunderstood?
> Thanks a lot!
> 
> 
> 
> -----Mensagem original-----
> De: Aleksey Sanin [mailto:aleksey at aleksey.com] 
> Enviada em: quarta-feira, 6 de junho de 2012 16:15
> Para: Renato Tegon Forti
> Cc: xmlsec at aleksey.com
> Assunto: Re: [xmlsec] RES: Trying to check sign
> 
> It's not on the website but it is in the examples folder.
> 
> Aleksey
> 
> On 6/6/12 4:42 AM, Renato Tegon Forti wrote:
>>>> This means that xmlsec (or to be precise, openssl) needs to verify 
>>>> the
>> certificate and it can't find the next certificate in the chain.
>>
>> Thanks for answer. 
>>
>> One more question: what is the example
>> (http://www.aleksey.com/xmlsec/api/xmlsec-examples.html) that 
>> implement "Online XML Digital Signature Verifer"?
>> I want study code implementation of it!
>>
>> Thanks
>>
>> -----Mensagem original-----
>> De: Aleksey Sanin [mailto:aleksey at aleksey.com] Enviada em: 
>> terça-feira, 5 de junho de 2012 23:51
>> Para: Renato Tegon Forti
>> Cc: xmlsec at aleksey.com
>> Assunto: Re: [xmlsec] Trying to check sign
>>
>> This means that xmlsec (or to be precise, openssl) needs to verify the 
>> certificate and it can't find the next certificate in the chain.
>>
>> Aleksey
>>
>> On 6/5/12 1:58 PM, Renato Tegon Forti wrote:
>>> Hi,
>>>
>>>  
>>>
>>> I have one file that I want check sig (using KEYINFO node), I know 
>>> that the signature is valid, but tool returns me:
>>>
>>>  
>>>
>>> I use DTD, see xml below, please!
>>>
>>>  
>>>
>>> ---------------------------------------------------------------------
>>> -
>>> --------------------------
>>>
>>>  
>>>
>>> func=xmlSecOpenSSLX509StoreVerify:file=x509vfy.c:line=360:obj=x509-st
>>> o re:subj=X509_verify_cert:error=4:crypto
>>> library function failed:subj=/C=BR/O=ICP-Brasil/OU=ID - 
>>> 1083312/OU=Autenticado por Certisign Certificadora 
>>> Digital/OU=Assinatura Tipo A1/OU=(EM BRANCO)/OU=(EM 
>>> BRANCO)/CN=MEDIATECH INFORMATICA 
>>> LTDA/emailAddress=contato at tecnomidia.com.br;err=20;msg=unable
>>> <mailto:LTDA/emailAddress=contato at tecnomidia.com.br;err=20;msg=unable
>>>>
>>> to get local issuer certificate
>>>
>>> func=xmlSecOpenSSLX509StoreVerify:file=x509vfy.c:line=408:obj=x509-st
>>> o
>>> re:subj=unknown:error=71:certificate
>>> verification failed:err=20;msg=unable to get local issuer certificate
>>>
>>> func=xmlSecOpenSSLEvpSignatureVerify:file=signatures.c:line=346:obj=r
>>> s a-sha1:subj=EVP_VerifyFinal:error=18:data
>>> do not match:signature do not match
>>>
>>> RESULT: Signature is INVALID
>>>
>>> ---------------------------------------------------
>>>
>>> = VERIFICATION CONTEXT
>>>
>>> == Status: invalid
>>>
>>> == flags: 0x00000000
>>>
>>> == flags2: 0x00000000
>>>
>>> == Key Info Read Ctx:
>>>
>>> = KEY INFO READ CONTEXT
>>>
>>> == flags: 0x00000000
>>>
>>> == flags2: 0x00000000
>>>
>>> == enabled key data: all
>>>
>>> == RetrievalMethod level (cur/max): 0/1
>>>
>>> == TRANSFORMS CTX (status=0)
>>>
>>> == flags: 0x00000000
>>>
>>> == flags2: 0x00000000
>>>
>>> == enabled transforms: all
>>>
>>> === uri: NULL
>>>
>>> === uri xpointer expr: NULL
>>>
>>> == EncryptedKey level (cur/max): 0/1
>>>
>>> === KeyReq:
>>>
>>> ==== keyId: rsa
>>>
>>> ==== keyType: 0x00000001
>>>
>>> ==== keyUsage: 0x00000002
>>>
>>> ==== keyBitsSize: 0
>>>
>>> === list size: 0
>>>
>>> == Key Info Write Ctx:
>>>
>>> = KEY INFO WRITE CONTEXT
>>>
>>> == flags: 0x00000000
>>>
>>> == flags2: 0x00000000
>>>
>>> == enabled key data: all
>>>
>>> == RetrievalMethod level (cur/max): 0/1
>>>
>>> == TRANSFORMS CTX (status=0)
>>>
>>> == flags: 0x00000000
>>>
>>> == flags2: 0x00000000
>>>
>>> == enabled transforms: all
>>>
>>> === uri: NULL
>>>
>>> === uri xpointer expr: NULL
>>>
>>> == EncryptedKey level (cur/max): 0/1
>>>
>>> === KeyReq:
>>>
>>> ==== keyId: NULL
>>>
>>> ==== keyType: 0x00000001
>>>
>>> ==== keyUsage: 0xffffffff
>>>
>>> ==== keyBitsSize: 0
>>>
>>> === list size: 0
>>>
>>> == Signature Transform Ctx:
>>>
>>> == TRANSFORMS CTX (status=2)
>>>
>>> == flags: 0x00000000
>>>
>>> == flags2: 0x00000000
>>>
>>> == enabled transforms: all
>>>
>>> === uri: NULL
>>>
>>> === uri xpointer expr: NULL
>>>
>>> === Transform: c14n
>>> (href=http://www.w3.org/TR/2001/REC-xml-c14n-20010315)
>>>
>>> === Transform: rsa-sha1
>>> (href=http://www.w3.org/2000/09/xmldsig#rsa-sha1)
>>>
>>> === Transform: membuf-transform (href=NULL)
>>>
>>> == Signature Method:
>>>
>>> === Transform: rsa-sha1
>>> (href=http://www.w3.org/2000/09/xmldsig#rsa-sha1)
>>>
>>> == Signature Key:
>>>
>>> == KEY
>>>
>>> === method: RSAKeyValue
>>>
>>> === key type: Private
>>>
>>> === key name: test-rsa
>>>
>>> === key usage: -1
>>>
>>> === rsa key: size = 1024
>>>
>>> == SignedInfo References List:
>>>
>>> === list size: 1
>>>
>>> = REFERENCE VERIFICATION CONTEXT
>>>
>>> == Status: succeeded
>>>
>>> == URI: "#NFe35101003593968000167550030000101640000000003"
>>>
>>> == Reference Transform Ctx:
>>>
>>> == TRANSFORMS CTX (status=2)
>>>
>>> == flags: 0x00000000
>>>
>>> == flags2: 0x00000000
>>>
>>> == enabled transforms: all
>>>
>>> === uri:
>>>
>>> === uri xpointer expr: 
>>> #NFe35101003593968000167550030000101640000000003
>>>
>>> === Transform: xpointer
>>> (href=http://www.w3.org/2001/04/xmldsig-more/xptr)
>>>
>>> === Transform: enveloped-signature
>>> (href=http://www.w3.org/2000/09/xmldsig#enveloped-signature)
>>>
>>> === Transform: c14n
>>> (href=http://www.w3.org/TR/2001/REC-xml-c14n-20010315)
>>>
>>> === Transform: sha1 (href=http://www.w3.org/2000/09/xmldsig#sha1)
>>>
>>> === Transform: membuf-transform (href=NULL)
>>>
>>> == Digest Method:
>>>
>>> === Transform: sha1 (href=http://www.w3.org/2000/09/xmldsig#sha1)
>>>
>>> == Manifest References List:
>>>
>>> === list size: 0
>>>
>>>  
>>>
>>> ---------------------------------------------------------------------
>>> -
>>> --------------------------
>>>
>>>  
>>>
>>> Anyone can help-me to understand what I make wrong!
>>>
>>> What this exactly can mean: “unable to get local issuer certificate”
>>>
>>>  
>>>
>>> This is my xml file ( the DTD is correct?):
>>>
>>>  
>>>
>>> ---------------------------------------------------------------------
>>> -
>>> --------------------------
>>>
>>>  
>>>
>>> <?xml version="1.0" encoding="UTF-8"?>
>>>
>>> <!DOCTYPE test [
>>>
>>> <!ATTLIST infNFe Id ID #IMPLIED>
>>>
>>> ]>
>>>
>>> <nfeProc xmlns="http://www.portalfiscal.inf.br/nfe" versao="1.10">
>>>
>>> <NFe xmlns="http://www.portalfiscal.inf.br/nfe"><infNFe
>>> xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
>>> Id="NFe35101003593968000167550030000101640000000003"
>>> versao="1.10"><ide><cUF>35</cUF><cNF>000000000</cNF><natOp>VENDA MERC 
>>> C/ PGTO ST C/ 
>>> SUBSTITUIDO</natOp><indPag>1</indPag><mod>55</mod><serie>3</serie><nN
>>> F
>>>> 10164</nNF><dEmi>2010-10-20</dEmi><dSaiEnt>2010-10-20</dSaiEnt><tpNF
>>>>>
>>> 1</tpNF><cMunFG>3550308</cMunFG><tpImp>1</tpImp><tpEmis>1</tpEmis><cD
>>> V
>>>> 3</cDV><tpAmb>1</tpAmb><finNFe>1</finNFe><procEmi>0</procEmi><verPro
>>>> c 
>>>> 1.4.0</verProc></ide><emit><CNPJ>03593968000167</CNPJ><xNome>Mediate
>>>> c
>>> h Informatica LTDA</xNome><xFant>Mediatech Informatica 
>>> LTDA</xFant><enderEmit><xLgr>CORREIA DE 
>>> MELO</xLgr><nro>085</nro><xBairro>BOM
>>> RETIRO</xBairro><cMun>3550308</cMun><xMun>SAO
>>> PAULO</xMun><UF>SP</UF><CEP>01123020</CEP><cPais>1058</cPais><xPais>B
>>> R 
>>> ASIL</xPais><fone>1133521199</fone></enderEmit><IE>115633812110</IE><
>>> /
>>> emit><dest><CNPJ>11253910000100</CNPJ><xNome>AYSSO
>>> SYSTEMS LTDA EPP</xNome><enderDest><xLgr>RUA DOZE DE 
>>> NOVEMBRO</xLgr><nro>180</nro><xCpl>APT
>>> 183</xCpl><xBairro>CENTRO</xBairro><cMun>3501608</cMun><xMun>AMERICAN
>>> A 
>>> </xMun><UF>SP</UF><CEP>13465490</CEP><cPais>1058</cPais><xPais>BRASIL
>>> < /xPais><fone>1936459994</fone></enderDest><IE/></dest><det
>>> nItem="1"><prod><cProd>1160900000000001720000</cProd><cEAN/><xProd>MI
>>> D
>>> IA
>>> DIGITAL
>>> CD/DVD</xProd><NCM>85234011</NCM><CFOP>5405</CFOP><uCom>PC.</uCom><qC
>>> o
>>> m>100.0000</qCom><vUnCom>2.1500</vUnCom><vProd>215.00</vProd><cEANTri
>>> m>b
>>> /><uTrib>PC.</uTrib><qTrib>100.0000</qTrib><vUnTrib>2.1500</vUnTrib><
>>> v
>>> Frete>20.00</vFrete></prod><imposto><ICMS><ICMS60><orig>0</orig><CST>
>>> Frete>6
>>> 0</CST><vBCST>215.00</vBCST><vICMSST>0.00</vICMSST></ICMS60></ICMS><I
>>> P
>>> I><cEnq>999</cEnq><IPINT><CST>53</CST></IPINT></IPI><PIS><PISAliq><CS
>>> I>T
>>>> 01</CST><vBC>215.00</vBC><pPIS>0.65</pPIS><vPIS>1.40</vPIS></PISAliq
>>>>>
>>> </PIS><COFINS><COFINSAliq><CST>01</CST><vBC>215.00</vBC><pCOFINS>3.00
>>> < 
>>> /pCOFINS><vCOFINS>6.45</vCOFINS></COFINSAliq></COFINS></imposto></det
>>>>
>>> <total><ICMSTot><vBC>20.00</vBC><vICMS>0.00</vICMS><vBCST>0.00</vBCST
>>>>
>>> <vST>0.00</vST><vProd>215.00</vProd><vFrete>20.00</vFrete><vSeg>0.00<
>>> /
>>> vSeg><vDesc>0.00</vDesc><vII>0.00</vII><vIPI>0.00</vIPI><vPIS>1.40</v
>>> vSeg>P
>>> IS><vCOFINS>6.45</vCOFINS><vOutro>0.00</vOutro><vNF>235.00</vNF></ICM
>>> IS>S
>>> Tot></total><transp><modFrete>0</modFrete><transporta><CNPJ>072818860
>>> Tot>0
>>> 0138</CNPJ><xNom
>>  e
>>> Correio
>>> - Sedex</xNome><IE>ISENTO</IE><xEnder>Rua Correia de Melo, 
>>> 111</xEnder><xMun>Sao
>>>
>> Paulo</xMun><UF>SP</UF></transporta><vol><qVol>1</qVol><esp>CX.</esp><
>> pesoL> 
>> 1.000</pesoL><pesoB>1.000</pesoB></vol></transp><cobr><fat><nFat>10164
>> </nFat
>>> <vOrig>235.00</vOrig><vLiq>235.00</vLiq></fat><dup><nDup>001</nDup><d
>>> Venc>2
>> 010-10-20</dVenc><vDup>235.00</vDup></dup></cobr><infAdic><infCpl>Pedidos:
>>> 48033</infCpl></infAdic></infNFe><Signature
>>>
>>> xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><Canonicalizat
>>> io
>>> nMethod
>>> Algorithm="http://www.w3.org/TR/2001/REC-xml-c14n-20010315"/><Signatu
>>> re
>>> Method
>>> Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/><Reference
>>>
>>> URI="#NFe35101003593968000167550030000101640000000003"><Transforms><T
>>> ra
>>> nsform
>>> Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><T
>>> ra
>>> nsform
>>> Algorithm="http://www.w3.org/TR/2001/REC-xml-c14n-20010315"/></Transf
>>> or
>>> ms><DigestMethod
>>> Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/><DigestValue>vj4p
>>> 6F 
>>> tqkZen6fsHlcyag8R2hF0=</DigestValue></Reference></SignedInfo><Signatu
>>> re
>>> Value>Jymbikn/5F8aUYQA6CaZmLYY9plO4KNfyu/M4TZP5l+3fy/pjwpkIsaeV1LXXyo
>>> Value>7n
>>> WLdpvruhCXy
>>>
>>> ID2ptAjzIWOJ/vp1YW94e0Yy7yfBijQNkew+FI1G7GKKt7T/UUIPRrXqWwo7EA8ZpCYSo
>>> W
>>> ktWqHZ
>>>
>>> iU7j7iJone1nLdNJNjY=</SignatureValue><KeyInfo><X509Data><X509Certific
>>> a
>>> te>MIIGuzCCBaOgAwIBAgIQCbCeZ64fHJPeNqAkc06I8TANBgkqhkiG9w0BAQUFADB0MQ
>>> te>s
>>> wCQYDVQQG
>>>
>>> EwJCUjETMBEGA1UEChMKSUNQLUJyYXNpbDEtMCsGA1UECxMkQ2VydGlzaWduIENlcnRpZ
>>> m
>>> ljYWRv
>>>
>>> cmEgRGlnaXRhbCBTLkEuMSEwHwYDVQQDExhBQyBDZXJ0aXNpZ24gTXVsdGlwbGEgRzMwH
>>> h
>>> cNMTAw
>>>
>>> NzI5MDAwMDAwWhcNMTEwNzI4MjM1OTU5WjCCAQsxCzAJBgNVBAYTAkJSMRMwEQYDVQQKF
>>> A
>>> pJQ1At
>>>
>>> QnJhc2lsMRUwEwYDVQQLFAxJRCAtIDEwODMzMTIxODA2BgNVBAsUL0F1dGVudGljYWRvI
>>> H
>>> BvciBD
>>>
>>> ZXJ0aXNpZ24gQ2VydGlmaWNhZG9yYSBEaWdpdGFsMRswGQYDVQQLFBJBc3NpbmF0dXJhI
>>> F
>>> RpcG8g
>>>
>>> QTExFDASBgNVBAsUCyhFTSBCUkFOQ08pMRQwEgYDVQQLFAsoRU0gQlJBTkNPKTEjMCEGA
>>> 1
>>> UEAxMa
>>>
>>> TUVESUFURUNIIElORk9STUFUSUNBIExUREExKDAmBgkqhkiG9w0BCQEWGWNvbnRhdG9Ad
>>> G
>>> Vjbm9t
>>>
>>> aWRpYS5jb20uYnIwgZ8wDQYJKoZIhvcNAQEBBQADgY0AMIGJAoGBAM8txkPNL6gjEjSW4
>>> T
>>> umyO0w
>>>
>>> zBGmxNtCqU9DFNWQD1TWIbXaYduxoxnYEwNXrehla2YDslXUiM45SWvlmjlWoVV9T7F07
>>> a
>>> OGGysP
>>>
>>> aNLJW/y3CMq7Qrvsh+h30INqV8WWYXKHlmfLz4eNf8Di4xQvgm+7yxvkGHXXjxkWn6utB
>>> W
>>> tJAgMB
>>>
>>> AAGjggMyMIIDLjCBrQYDVR0RBIGlMIGioDgGBWBMAQMEoC8ELTE5MDExOTY3MTEyMDk3M
>>> z
>>> g4MDUw
>>>
>>> MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMKAXBgVgTAEDAqAOBAxKQUlSIFNaQVBJUk+gG
>>> MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMKAXBgVgTAEDAqAOBAxKQUlSIFNaQVBJUk+Q
>>> MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMKAXBgVgTAEDAqAOBAxKQUlSIFNaQVBJUk+YF
>>> MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMKAXBgVgTAEDAqAOBAxKQUlSIFNaQVBJUk+Y
>>> MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMKAXBgVgTAEDAqAOBAxKQUlSIFNaQVBJUk+Ew
>>> MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMKAXBgVgTAEDAqAOBAxKQUlSIFNaQVBJUk+B
>>>
>>> AwOgEAQOMDM1OTM5NjgwMDAxNjegFwYFYEwBAwegDgQMMDAwMDAwMDAwMDAwgRljb250Y
>>> X
>>> RvQHRl
>>>
>>>
>>
> Y25vbWlkaWEuY29tLmJyMAkGA1UdEwQCMAAwHwYDVR0jBBgwFoAUhLBCMzSjQiWlKJc+g+t38OhP
>>>
>>> wlQwDgYDVR0PAQH/BAQDAgXgMFUGA1UdIAROMEwwSgYGYEwBAgELMEAwPgYIKwYBBQUHA
>>> g
>>> EWMmh0
>>>
>>> dHA6Ly9pY3AtYnJhc2lsLmNlcnRpc2lnbi5jb20uYnIvcmVwb3NpdG9yaW8vZHBjMIIBJ
>>> Q
>>> YDVR0f
>>>
>>> BIIBHDCCARgwXKBaoFiGVmh0dHA6Ly9pY3AtYnJhc2lsLmNlcnRpc2lnbi5jb20uYnIvc
>>> m
>>> Vwb3Np
>>>
>>> dG9yaW8vbGNyL0FDQ2VydGlzaWduTXVsdGlwbGFHMy9MYXRlc3RDUkwuY3JsMFugWaBXh
>>> l
>>> VodHRw
>>>
>>> Oi8vaWNwLWJyYXNpbC5vdXRyYWxjci5jb20uYnIvcmVwb3NpdG9yaW8vbGNyL0FDQ2Vyd
>>> G
>>> lzaWdu
>>>
>>> TXVsdGlwbGFHMy9MYXRlc3RDUkwuY3JsMFugWaBXhlVodHRwOi8vcmVwb3NpdG9yaW8ua
>>> W
>>> NwYnJh
>>>
>>> c2lsLmdvdi5ici9sY3IvQ2VydGlzaWduL0FDQ2VydGlzaWduTXVsdGlwbGFHMy9MYXRlc
>>> 3
>>> RDUkwu
>>>
>>> Y3JsMB0GA1UdJQQWMBQGCCsGAQUFBwMEBggrBgEFBQcDAjCBoAYIKwYBBQUHAQEEgZMwg
>>> Z
>>> AwKAYI
>>>
>>> KwYBBQUHMAGGHGh0dHA6Ly9vY3NwLmNlcnRpc2lnbi5jb20uYnIwZAYIKwYBBQUHMAKGW
>>> G
>>> h0dHA6
>>>
>>> Ly9pY3AtYnJhc2lsLmNlcnRpc2lnbi5jb20uYnIvcmVwb3NpdG9yaW8vY2VydGlmaWNhZ
>>> G
>>> 9zL0FD
>>>
>>> X0NlcnRpc2lnbl9NdWx0aXBsYV9HMy5wN2MwDQYJKoZIhvcNAQEFBQADggEBAGI9MCc6W
>>> V
>>> mz919C
>>>
>>> QLDB8E0R8HxfGyiz2uB14lPBDsueTJmJmlykQdnboMiyMGTocprEGsQxeI7a57BEUDVc0
>>> f
>>> SzNCCb
>>>
>>> SOnQOp9Uswri8pTw8fQG9OAkh1LCC9haTsNNMKbTHCciO7MUh34XkHuj4A0NIWG1aCynw
>>> s
>>> tRFWb8
>>>
>>> 97OZJJCc0IRvDs7yDJhgOwPmv3trFmwlfMU7n20pXtM9hKiI8o6h/0GwR6SyA1Yj4fZXf
>>> X
>>> xVENH4
>>>
>>> EjhIHR8Yrmre2JE2I+hFjyQaNPnAEztQEa0Cae2l3O0Q0tkM1x8EkiKFrnDggpc7gSwtL
>>> EjhIHR8Yrmre2JE2I+C
>>> EjhIHR8Yrmre2JE2I+wrkQBu
>>>
>>> jhie131VyDTuXLx9k082PLs=</X509Certificate></X509Data></KeyInfo></Sign
>>> a
>>> ture></NFe>
>>>
>>>  
>>>
>>> <protNFe
>>> versao="1.10"><infProt><tpAmb>1</tpAmb><verAplic>SP_NFE_PL_005e</verA
>>> p
>>> lic><chNFe>35101003593968000167550030000101640000000003</chNFe><dhRec
>>> lic>b
>>> to>2010-10-20T17:48:15</dhRecbto><nProt>135100546996360</nProt><digVa
>>> to>l
>>>> vj4p6FtqkZen6fsHlcyag8R2hF0=</digVal><cStat>100</cStat><xMotivo>Auto
>>>> r
>>> izado o uso da NF-e</xMotivo></infProt></protNFe>
>>>
>>> </nfeProc>
>>>
>>>  
>>>
>>> ---------------------------------------------------------------------
>>> -
>>> --------------------------
>>>
>>>  
>>>
>>> Thanks a lot
>>>
>>>  
>>>
>>>  
>>>
>>>  
>>>
>>>  
>>>
>>>
>>>
>>> _______________________________________________
>>> xmlsec mailing list
>>> xmlsec at aleksey.com
>>> http://www.aleksey.com/mailman/listinfo/xmlsec
>>
>> _______________________________________________
>> xmlsec mailing list
>> xmlsec at aleksey.com
>> http://www.aleksey.com/mailman/listinfo/xmlsec