[xmlsec] nss integration error

Aleksey Sanin aleksey at aleksey.com
Tue Oct 13 20:42:52 PDT 2015


Does the example work for you? If yes then the two changes you made
are the cause of the error.

Aleksey

On 10/13/15 8:26 PM, Mazola Winstrol wrote:
> Hello,
> 
> I'm new to xmlsec.
> 
> I'm trying to sign a xml using nss engine.
> 
> I'm using the code base of the example "sign a xml with 509 certificate
> (https://www.aleksey.com/xmlsec/api/xmlsec-examples-sign-x509.html)"
> with some changes:
> 
>   * The initialization code include the required initialization code for
>     the nss engine;
>   * For the steps of loading the private key and certificate, i replaced
>     the generic functions "xmlSecCryptoAppKeyLoad" and
>     "xmlSecCryptoAppKeyCertLoad" with the "xmlSecNssAppKeyLoadSECItem"
>     and "xmlSecNssAppKeyCertLoadSECItem" (my application already has a
>     reference to a CERTCertificate object at the time of the document
>     signing). 
> 
> All the steps are performed successfully.
> 
> The error occurs when executing the function "xmlSecDSigCtxSign". I get
> function result of -1 and the error reporting bellow:
> 
> file: xmldsig.c
> line: 871
> func: xmlSecDSigCtxProcessKeyInfoNode
> errorObject:
> errorSubject:
> reason: 45
> msg: 
> -------------------------------
> file: xmldsig.c
> line: 565
> func: xmlSecDSigCtxProcessSignatureNode
> errorObject:
> errorSubject: xmlSecDSigCtxProcessKeyInfoNode
> reason: 1
> msg: 
> -------------------------------
> file: xmldsig.c
> line: 303
> func: xmlSecDSigCtxSign
> errorObject:
> errorSubject: xmlSecDSigCtxSignatureProcessNode
> reason: 1
> msg: 
> -------------------------------
> 
> 
> What may be the cause of the error?
> Best regards
> 
> 
> 
> 
> 
> _______________________________________________
> xmlsec mailing list
> xmlsec at aleksey.com
> http://www.aleksey.com/mailman/listinfo/xmlsec
> 


More information about the xmlsec mailing list