[xmlsec] Error xpointer(id('XXXXXXX')) again

Tue Sep 15 09:27:06 PDT 2015

The error talks about expr=xpointer(id('1332') thus it is trying
to sign that Reference and there is no DTD for it.

By default, xmlsec utility signs the first Signature node it finds.
Check xmlsec help to find out how to point it to any start node.

Best,

Aleksey

On 9/15/15 9:23 AM, João Henrique Souza wrote:
> Aleksey,
> Thanks again.
> 
> But if you realize in the XML which I sent before, it has Two Tags of
> Signature. I'm trying to sign the second one.
> 
> When you say about the:
> <Reference URI="#1332">
> <InfRps Id="1332">
> It's about the first Signature which I'd already done with sucess.
> Please see the XML
> 
> And when you say about the DTC:
> <!DOCTYPE test [<!ATTLIST LoteRps Id ID #IMPLIED>]>
> This is about the Signature which I'm trying to make. In the XML, see
> the last Signature's Tags. They are empty.
> 
> Have a way to specify the DTC in a way to sign the two tag groups
> (InfRps and LoteRps) with a single step?
> 
> Thanks Again and sorry if I can't see (yet) what you are trying to
> explain me.
> Joao
> 
>> Subject: Re: [xmlsec] Error xpointer(id('XXXXXXX')) again
>> To: juaumkiko at msn.com; xmlsec at aleksey.com
>> From: aleksey at aleksey.com
>> Date: Tue, 15 Sep 2015 08:22:38 -0700
>>
>>
> func=xmlSecXPathDataExecute:file=..\src\xpath.c:line=273:obj=unknown:subj=xmlXPtrEval:error=5:libxml2
>> library function failed:expr=xpointer(id('1332'))
>>
>> <Reference URI="#1332">
>>
>> <InfRps Id="1332">
>>
>> <!DOCTYPE test [<!ATTLIST LoteRps Id ID #IMPLIED>]>
>>
>> Aleksey
>>
>> On 9/15/15 4:08 AM, João Henrique Souza wrote:
>> > Hello Aleksey,
>> >
>> > Before anything else... Thank you so much for spend your time with my
>> > question.
>> > About you answer, I couldn't understand.
>> >
>> > I already sign the URI 1332 (InfRps Node ).
>> > Now I need to sign URI 133 (LoteRps Node ).
>> >
>> > I realize that if I try to sign the LoteRps Node without the Signature
>> > TAGS of URI 1332 (already signed), the signature process occurs without
>> > problem. But that don't solve my problem. What I need is first to sign
>> > the InfRps Node and after the LoteRps node.
>> >
>> > Thank you in advance, again, any other hint.
>> >
>> > Joao Henrique
>> >
>> >> Subject: Re: [xmlsec] Error xpointer(id('XXXXXXX')) again
>> >> To: juaumkiko at msn.com; xmlsec at aleksey.com
>> >> From: aleksey at aleksey.com
>> >> Date: Mon, 14 Sep 2015 13:36:33 -0700
>> >>
>> >> <Reference URI="#1332">
>> >>
>> >> <InfRps Id="1332">
>> >>
>> >> <!ATTLIST LoteRps Id ID #IMPLIED>
>> >>
>> >> Aleksey
>> >>
>> >> On 9/14/15 12:57 PM, João Henrique Souza wrote:
>> >> > Hello,
>> >> > I've trying to sign a XML which already has a signed node.
>> >> > I've already read the Faq Section and the other emails with the same
>> >> > subject, but this unfortunatelly didn't solve my problem.
>> >> >
>> >> > The XML (node LoteRps) which I've been trying to sign is this (I'm a
>> >> > Brazilian, so the XML is in my home language):
>> >> >
>> >> > <!DOCTYPE test [<!ATTLIST LoteRps Id ID #IMPLIED>]>
>> >> > <GerarNfseEnvio xmlns="http://www.abrasf.org.br/nfse.xsd">
>> >> > <LoteRps Id="133" versao="1.00">
>> >> > <NumeroLote>133</NumeroLote>
>> >> > <Cnpj>04220031000100</Cnpj>
>> >> > <InscricaoMunicipal>25252525</InscricaoMunicipal>
>> >> > <QuantidadeRps>1</QuantidadeRps>
>> >> > <ListaRps>
>> >> > <Rps>
>> >> > <InfRps Id="1332">
>> >> > <IdentificacaoRps>
>> >> > <Numero>133</Numero>
>> >> > <Serie>2</Serie>
>> >> > <Tipo>1</Tipo>
>> >> > </IdentificacaoRps>
>> >> > <DataEmissao>2015-09-11T00:00:00</DataEmissao>
>> >> > <NaturezaOperacao>1</NaturezaOperacao>
>> >> > <RegimeEspecialTributacao>2</RegimeEspecialTributacao>
>> >> > <OptanteSimplesNacional>2</OptanteSimplesNacional>
>> >> > <IncentivadorCultural>2</IncentivadorCultural>
>> >> > <Status>1</Status>
>> >> > <Servico>
>> >> > <Valores>
>> >> > <ValorServicos>35.00</ValorServicos>
>> >> > <IssRetido>2</IssRetido>
>> >> > <ValorIss>1.75</ValorIss>
>> >> > <BaseCalculo>35.00</BaseCalculo>
>> >> > <Aliquota>5.0000</Aliquota>
>> >> > <ValorLiquidoNfse>35.00</ValorLiquidoNfse>
>> >> > </Valores>
>> >> > <ItemListaServico>11.01</ItemListaServico>
>> >> > <CodigoCnae>5210</CodigoCnae>
>> >> >
>> >> > <CodigoTributacaoMunicipio>11010011</CodigoTributacaoMunicipio>
>> >> > <Discriminacao>ROTATIVS</Discriminacao>
>> >> > <CodigoMunicipio>4314902</CodigoMunicipio>
>> >> > </Servico>
>> >> > <Prestador>
>> >> > <Cnpj>04220031000100</Cnpj>
>> >> > <InscricaoMunicipal>25252525</InscricaoMunicipal>
>> >> > </Prestador>
>> >> > <Tomador>
>> >> > <RazaoSocial>NAO INFORMADO</RazaoSocial>
>> >> > <Endereco>
>> >> > <Endereco>-</Endereco>
>> >> > <Numero>-</Numero>
>> >> > <Bairro>-</Bairro>
>> >> > <CodigoMunicipio>4314902</CodigoMunicipio>
>> >> > <Uf>RS</Uf>
>> >> > <Cep>0</Cep>
>> >> > </Endereco>
>> >> > </Tomador>
>> >> > </InfRps>
>> >> > <Signature xmlns="http://www.w3.org/2000/09/xmldsig#"
>> >> > Id="Ass_1332">
>> >> > <SignedInfo>
>> >> > <CanonicalizationMethod
>> >> > Algorithm="http://www.w3.org/TR/2001/REC-xml-c14n-20010315"/>
>> >> > <SignatureMethod
>> >> > Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
>> >> > <Reference URI="#1332">
>> >> > <Transforms>
>> >> > <Transform
>> >> > Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/>
>> >> > <Transform
>> >> > Algorithm="http://www.w3.org/TR/2001/REC-xml-c14n-20010315"/>
>> >> > </Transforms>
>> >> > <DigestMethod
>> >> > Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>
>> >> > <DigestValue>QRTdVOZ2MdM5iTlIpHA13EHtMOQ=</DigestValue>
>> >> > </Reference>
>> >> > </SignedInfo>
>> >> >
>> >> >
>> >
> <SignatureValue>K3YMZ97ZUyaH/LpQI+gUULMc+NB9a+rHoSFZL78OoKLn+fs4l1jqjMsEHXoDuXJE9xcdpaYtuXp9mdPT8u5jwU8wuHSe6am5N9b3AygmW/fQIIvXmnLiUyc/tagmxGnOgjy0fCKA/PdDqT9l0jWBvB1wmhQKUdYljBi+kiH36FVTwXzPaZizdtk40tferleCU/sUZP2MSDPvP2xMPUAKxpXnTBTIUlDB1kzJ0drzBUpRlyAdRvqy7Sk1vxAS4GMtKOgFErQccVualTolUAZ0u/9l8cTvI/n7sUcJaWaZ8R56hWBoSUkDh7wKeIAo6hOHBXP1m9apzIK2I09dWSWrWw==</SignatureValue>
>> >> > <KeyInfo>
>> >> > <X509Data>
>> >> >
>> >> >
>> >
> <X509Certificate>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

>>
>> >> C
>> >>
>> >
> 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

>> d
>> G
>> >> l
>> >>
>> >
> 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</X509Certificate>
>> >> > </X509Data>
>> >> > </KeyInfo>
>> >> > </Signature>
>> >> > </Rps>
>> >> > </ListaRps>
>> >> > </LoteRps>
>> >> > <Signature xmlns="http://www.w3.org/2000/09/xmldsig#"
> Id="AssLote_133">
>> >> > <SignedInfo>
>> >> > <CanonicalizationMethod
>> >> > Algorithm="http://www.w3.org/TR/2001/REC-xml-c14n-20010315" />
>> >> > <SignatureMethod
>> >> > Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1" />
>> >> > <Reference URI="#133">
>> >> > <Transforms>
>> >> > <Transform
>> >> > Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature" />
>> >> > <Transform
>> >> > Algorithm="http://www.w3.org/TR/2001/REC-xml-c14n-20010315" />
>> >> > </Transforms>
>> >> > <DigestMethod
>> >> > Algorithm="http://www.w3.org/2000/09/xmldsig#sha1" />
>> >> > <DigestValue></DigestValue>
>> >> > </Reference>
>> >> > </SignedInfo>
>> >> > <SignatureValue></SignatureValue>
>> >> > <KeyInfo>
>> >> > <X509Data>
>> >> > <X509Certificate></X509Certificate>
>> >> > </X509Data>
>> >> > </KeyInfo>
>> >> > </Signature>
>> >> > </GerarNfseEnvio>
>> >> >
>> >> >
>> >> > The error message that I receive is this:
>> >> >
>> >> >
>> >
> func=xmlSecXPathDataExecute:file=..\src\xpath.c:line=273:obj=unknown:subj=xmlXPtrEval:error=5:libxml2
>> >> > library function failed:expr=xpointer(id('1332'))
>> >> >
>> >
> func=xmlSecXPathDataListExecute:file=..\src\xpath.c:line=356:obj=unknown:subj=xmlSecXPathDataExecute:error=1:xmlsec
>> >> > library function failed:
>> >> >
>> >
> func=xmlSecTransformXPathExecute:file=..\src\xpath.c:line=466:obj=xpointer:subj=xmlSecXPathDataExecute:error=1:xmlsec
>> >> > library function failed:
>> >> >
>> >
> func=xmlSecTransformDefaultPushXml:file=..\src\transforms.c:line=2371:obj=xpointer:subj=xmlSecTransformExecute:error=1:xmlsec
>> >> > library function failed:
>> >> >
>> >
> func=xmlSecTransformCtxXmlExecute:file=..\src\transforms.c:line=1207:obj=unknown:subj=xmlSecTransformPushXml:error=1:xmlsec
>> >> > library function failed:transform=xpointer
>> >> >
>> >
> func=xmlSecTransformCtxExecute:file=..\src\transforms.c:line=1267:obj=unknown:subj=xmlSecTransformCtxXmlExecute:error=1:xmlsec
>> >> > library function failed:
>> >> >
>> >
> func=xmlSecDSigReferenceCtxProcessNode:file=..\src\xmldsig.c:line=1568:obj=unknown:subj=xmlSecTransformCtxExecute:error=1:xmlsec
>> >> > library function failed:
>> >> >
>> >
> func=xmlSecDSigCtxProcessSignedInfoNode:file=..\src\xmldsig.c:line=804:obj=unknown:subj=xmlSecDSigReferenceCtxProcessNode:error=1:xmlsec
>> >> > library function failed:node=Reference
>> >> >
>> >
> func=xmlSecDSigCtxProcessSignatureNode:file=..\src\xmldsig.c:line=547:obj=unknown:subj=xmlSecDSigCtxProcessSignedInfoNode:error=1:xmlsec
>> >> > library function failed:
>> >> >
>> >
> func=xmlSecDSigCtxSign:file=..\src\xmldsig.c:line=303:obj=unknown:subj=xmlSecDSigCtxSigantureProcessNode:error=1:xmlsec
>> >> > library function failed:
>> >> > Error: signature failed
>> >> >
>> >> > Thanks in advance for any help
>> >> >
>> >> > Joao Henrique
>> >> >
>> >> >
>> >> > _______________________________________________
>> >> > xmlsec mailing list
>> >> > xmlsec at aleksey.com
>> >> > http://www.aleksey.com/mailman/listinfo/xmlsec
>> >> >
>> >
>> >
>> > _______________________________________________
>> > xmlsec mailing list
>> > xmlsec at aleksey.com
>> > http://www.aleksey.com/mailman/listinfo/xmlsec
>> >