[xmlsec] Error xpointer(id('XXXXXXX')) again

Tue Oct 20 06:26:50 PDT 2015

Well man,
I'm grateful for your help with attempts to solve this problem, but I can not solve it alone.
I know that is not your problem, but I promise to you that it will be my last attempt because my deadline is coming to an end for release this software, and if I can not solve this time I'll need to use another tool. Unfortunately.
Please, how can I sign with XMLSEC the XML File attached in this email?I need to sign first the id="Ass_1332" and after the Id="AssLote_133"
Please be honest with me, Is it possible?
Tks for you help along this problem and sorry any inconvenience.
John

> Subject: Re: [xmlsec] Error xpointer(id('XXXXXXX')) again
> To: juaumkiko at msn.com; xmlsec at aleksey.com
> From: aleksey at aleksey.com
> Date: Thu, 17 Sep 2015 17:44:10 -0700
> 
> 
> 
> Error: failed to find node with name="LoteRps"
> 
> <GerarNfseEnvio xmlns="http://www.abrasf.org.br/nfse.xsd">
> <LoteRps Id="133" versao="1.00">
> 
> Aleksey
> 
> On 9/15/15 11:46 AM, João Henrique Souza wrote:
> > Thank You Aleksey,
> > 
> > When you say to check xmlsec help , are you talking about this?
> > https://www.aleksey.com/xmlsec/xmlsec-man.html
> > 
> > If is true, how can I point to a start node?
> > I try 
> >>xmlsec --sign --node-name LoteRps file.xml > file_sign.xml
> > 
> > But I get the error:
> > Error: failed to find node with name="LoteRps"
> > Error: failed to load template "file.xml"
> > Error: failed to sign file "file.xml"
> > 
> > Sorry for anything but I'm really aimlessly with this problem.
> > 
> > Joao
> > 
> >> Subject: Re: [xmlsec] Error xpointer(id('XXXXXXX')) again
> >> To: juaumkiko at msn.com; xmlsec at aleksey.com
> >> From: aleksey at aleksey.com
> >> Date: Tue, 15 Sep 2015 09:27:06 -0700
> >>
> >> The error talks about expr=xpointer(id('1332') thus it is trying
> >> to sign that Reference and there is no DTD for it.
> >>
> >> By default, xmlsec utility signs the first Signature node it finds.
> >> Check xmlsec help to find out how to point it to any start node.
> >>
> >> Best,
> >>
> >> Aleksey
> >>
> >> On 9/15/15 9:23 AM, João Henrique Souza wrote:
> >> > Aleksey,
> >> > Thanks again.
> >> >
> >> > But if you realize in the XML which I sent before, it has Two Tags of
> >> > Signature. I'm trying to sign the second one.
> >> >
> >> > When you say about the:
> >> > <Reference URI="#1332">
> >> > <InfRps Id="1332">
> >> > It's about the first Signature which I'd already done with sucess.
> >> > Please see the XML
> >> >
> >> > And when you say about the DTC:
> >> > <!DOCTYPE test [<!ATTLIST LoteRps Id ID #IMPLIED>]>
> >> > This is about the Signature which I'm trying to make. In the XML, see
> >> > the last Signature's Tags. They are empty.
> >> >
> >> > Have a way to specify the DTC in a way to sign the two tag groups
> >> > (InfRps and LoteRps) with a single step?
> >> >
> >> > Thanks Again and sorry if I can't see (yet) what you are trying to
> >> > explain me.
> >> > Joao
> >> >
> >> >> Subject: Re: [xmlsec] Error xpointer(id('XXXXXXX')) again
> >> >> To: juaumkiko at msn.com; xmlsec at aleksey.com
> >> >> From: aleksey at aleksey.com
> >> >> Date: Tue, 15 Sep 2015 08:22:38 -0700
> >> >>
> >> >>
> >> >
> > func=xmlSecXPathDataExecute:file=..\src\xpath.c:line=273:obj=unknown:subj=xmlXPtrEval:error=5:libxml2
> >> >> library function failed:expr=xpointer(id('1332'))
> >> >>
> >> >> <Reference URI="#1332">
> >> >>
> >> >> <InfRps Id="1332">
> >> >>
> >> >> <!DOCTYPE test [<!ATTLIST LoteRps Id ID #IMPLIED>]>
> >> >>
> >> >> Aleksey
> >> >>
> >> >> On 9/15/15 4:08 AM, João Henrique Souza wrote:
> >> >> > Hello Aleksey,
> >> >> >
> >> >> > Before anything else... Thank you so much for spend your time with my
> >> >> > question.
> >> >> > About you answer, I couldn't understand.
> >> >> >
> >> >> > I already sign the URI 1332 (InfRps Node ).
> >> >> > Now I need to sign URI 133 (LoteRps Node ).
> >> >> >
> >> >> > I realize that if I try to sign the LoteRps Node without the
> > Signature
> >> >> > TAGS of URI 1332 (already signed), the signature process occurs
> > without
> >> >> > problem. But that don't solve my problem. What I need is first to
> > sign
> >> >> > the InfRps Node and after the LoteRps node.
> >> >> >
> >> >> > Thank you in advance, again, any other hint.
> >> >> >
> >> >> > Joao Henrique
> >> >> >
> >> >> >> Subject: Re: [xmlsec] Error xpointer(id('XXXXXXX')) again
> >> >> >> To: juaumkiko at msn.com; xmlsec at aleksey.com
> >> >> >> From: aleksey at aleksey.com
> >> >> >> Date: Mon, 14 Sep 2015 13:36:33 -0700
> >> >> >>
> >> >> >> <Reference URI="#1332">
> >> >> >>
> >> >> >> <InfRps Id="1332">
> >> >> >>
> >> >> >> <!ATTLIST LoteRps Id ID #IMPLIED>
> >> >> >>
> >> >> >> Aleksey
> >> >> >>
> >> >> >> On 9/14/15 12:57 PM, João Henrique Souza wrote:
> >> >> >> > Hello,
> >> >> >> > I've trying to sign a XML which already has a signed node.
> >> >> >> > I've already read the Faq Section and the other emails with
> > the same
> >> >> >> > subject, but this unfortunatelly didn't solve my problem.
> >> >> >> >
> >> >> >> > The XML (node LoteRps) which I've been trying to sign is this
> > (I'm a
> >> >> >> > Brazilian, so the XML is in my home language):
> >> >> >> >
> >> >> >> > <!DOCTYPE test [<!ATTLIST LoteRps Id ID #IMPLIED>]>
> >> >> >> > <GerarNfseEnvio xmlns="http://www.abrasf.org.br/nfse.xsd">
> >> >> >> > <LoteRps Id="133" versao="1.00">
> >> >> >> > <NumeroLote>133</NumeroLote>
> >> >> >> > <Cnpj>04220031000100</Cnpj>
> >> >> >> > <InscricaoMunicipal>25252525</InscricaoMunicipal>
> >> >> >> > <QuantidadeRps>1</QuantidadeRps>
> >> >> >> > <ListaRps>
> >> >> >> > <Rps>
> >> >> >> > <InfRps Id="1332">
> >> >> >> > <IdentificacaoRps>
> >> >> >> > <Numero>133</Numero>
> >> >> >> > <Serie>2</Serie>
> >> >> >> > <Tipo>1</Tipo>
> >> >> >> > </IdentificacaoRps>
> >> >> >> > <DataEmissao>2015-09-11T00:00:00</DataEmissao>
> >> >> >> > <NaturezaOperacao>1</NaturezaOperacao>
> >> >> >> > <RegimeEspecialTributacao>2</RegimeEspecialTributacao>
> >> >> >> > <OptanteSimplesNacional>2</OptanteSimplesNacional>
> >> >> >> > <IncentivadorCultural>2</IncentivadorCultural>
> >> >> >> > <Status>1</Status>
> >> >> >> > <Servico>
> >> >> >> > <Valores>
> >> >> >> > <ValorServicos>35.00</ValorServicos>
> >> >> >> > <IssRetido>2</IssRetido>
> >> >> >> > <ValorIss>1.75</ValorIss>
> >> >> >> > <BaseCalculo>35.00</BaseCalculo>
> >> >> >> > <Aliquota>5.0000</Aliquota>
> >> >> >> > <ValorLiquidoNfse>35.00</ValorLiquidoNfse>
> >> >> >> > </Valores>
> >> >> >> > <ItemListaServico>11.01</ItemListaServico>
> >> >> >> > <CodigoCnae>5210</CodigoCnae>
> >> >> >> >
> >> >> >> > <CodigoTributacaoMunicipio>11010011</CodigoTributacaoMunicipio>
> >> >> >> > <Discriminacao>ROTATIVS</Discriminacao>
> >> >> >> > <CodigoMunicipio>4314902</CodigoMunicipio>
> >> >> >> > </Servico>
> >> >> >> > <Prestador>
> >> >> >> > <Cnpj>04220031000100</Cnpj>
> >> >> >> > <InscricaoMunicipal>25252525</InscricaoMunicipal>
> >> >> >> > </Prestador>
> >> >> >> > <Tomador>
> >> >> >> > <RazaoSocial>NAO INFORMADO</RazaoSocial>
> >> >> >> > <Endereco>
> >> >> >> > <Endereco>-</Endereco>
> >> >> >> > <Numero>-</Numero>
> >> >> >> > <Bairro>-</Bairro>
> >> >> >> > <CodigoMunicipio>4314902</CodigoMunicipio>
> >> >> >> > <Uf>RS</Uf>
> >> >> >> > <Cep>0</Cep>
> >> >> >> > </Endereco>
> >> >> >> > </Tomador>
> >> >> >> > </InfRps>
> >> >> >> > <Signature xmlns="http://www.w3.org/2000/09/xmldsig#"
> >> >> >> > Id="Ass_1332">
> >> >> >> > <SignedInfo>
> >> >> >> > <CanonicalizationMethod
> >> >> >> > Algorithm="http://www.w3.org/TR/2001/REC-xml-c14n-20010315"/>
> >> >> >> > <SignatureMethod
> >> >> >> > Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
> >> >> >> > <Reference URI="#1332">
> >> >> >> > <Transforms>
> >> >> >> > <Transform
> >> >> >> >
> > Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/>
> >> >> >> > <Transform
> >> >> >> > Algorithm="http://www.w3.org/TR/2001/REC-xml-c14n-20010315"/>
> >> >> >> > </Transforms>
> >> >> >> > <DigestMethod
> >> >> >> > Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>
> >> >> >> > <DigestValue>QRTdVOZ2MdM5iTlIpHA13EHtMOQ=</DigestValue>
> >> >> >> > </Reference>
> >> >> >> > </SignedInfo>
> >> >> >> >
> >> >> >> >
> >> >> >
> >> >
> > <SignatureValue>K3YMZ97ZUyaH/LpQI+gUULMc+NB9a+rHoSFZL78OoKLn+fs4l1jqjMsEHXoDuXJE9xcdpaYtuXp9mdPT8u5jwU8wuHSe6am5N9b3AygmW/fQIIvXmnLiUyc/tagmxGnOgjy0fCKA/PdDqT9l0jWBvB1wmhQKUdYljBi+kiH36FVTwXzPaZizdtk40tferleCU/sUZP2MSDPvP2xMPUAKxpXnTBTIUlDB1kzJ0drzBUpRlyAdRvqy7Sk1vxAS4GMtKOgFErQccVualTolUAZ0u/9l8cTvI/n7sUcJaWaZ8R56hWBoSUkDh7wKeIAo6hOHBXP1m9apzIK2I09dWSWrWw==</SignatureValue>
> >> >> >> > <KeyInfo>
> >> >> >> > <X509Data>
> >> >> >> >
> >> >> >> >
> >> >> >
> >> >
> > <X509Certificate>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
> 
> >>
> >> >>
> >> >> >> C
> >> >> >>
> >> >> >
> >> >
> > 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
> 
> >>
> >> >> d
> >> >> G
> >> >> >> l
> >> >> >>
> >> >> >
> >> >
> > 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</X509Certificate>
> >> >> >> > </X509Data>
> >> >> >> > </KeyInfo>
> >> >> >> > </Signature>
> >> >> >> > </Rps>
> >> >> >> > </ListaRps>
> >> >> >> > </LoteRps>
> >> >> >> > <Signature xmlns="http://www.w3.org/2000/09/xmldsig#"
> >> > Id="AssLote_133">
> >> >> >> > <SignedInfo>
> >> >> >> > <CanonicalizationMethod
> >> >> >> > Algorithm="http://www.w3.org/TR/2001/REC-xml-c14n-20010315" />
> >> >> >> > <SignatureMethod
> >> >> >> > Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1" />
> >> >> >> > <Reference URI="#133">
> >> >> >> > <Transforms>
> >> >> >> > <Transform
> >> >> >> >
> > Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature" />
> >> >> >> > <Transform
> >> >> >> > Algorithm="http://www.w3.org/TR/2001/REC-xml-c14n-20010315" />
> >> >> >> > </Transforms>
> >> >> >> > <DigestMethod
> >> >> >> > Algorithm="http://www.w3.org/2000/09/xmldsig#sha1" />
> >> >> >> > <DigestValue></DigestValue>
> >> >> >> > </Reference>
> >> >> >> > </SignedInfo>
> >> >> >> > <SignatureValue></SignatureValue>
> >> >> >> > <KeyInfo>
> >> >> >> > <X509Data>
> >> >> >> > <X509Certificate></X509Certificate>
> >> >> >> > </X509Data>
> >> >> >> > </KeyInfo>
> >> >> >> > </Signature>
> >> >> >> > </GerarNfseEnvio>
> >> >> >> >
> >> >> >> >
> >> >> >> > The error message that I receive is this:
> >> >> >> >
> >> >> >> >
> >> >> >
> >> >
> > func=xmlSecXPathDataExecute:file=..\src\xpath.c:line=273:obj=unknown:subj=xmlXPtrEval:error=5:libxml2
> >> >> >> > library function failed:expr=xpointer(id('1332'))
> >> >> >> >
> >> >> >
> >> >
> > func=xmlSecXPathDataListExecute:file=..\src\xpath.c:line=356:obj=unknown:subj=xmlSecXPathDataExecute:error=1:xmlsec
> >> >> >> > library function failed:
> >> >> >> >
> >> >> >
> >> >
> > func=xmlSecTransformXPathExecute:file=..\src\xpath.c:line=466:obj=xpointer:subj=xmlSecXPathDataExecute:error=1:xmlsec
> >> >> >> > library function failed:
> >> >> >> >
> >> >> >
> >> >
> > func=xmlSecTransformDefaultPushXml:file=..\src\transforms.c:line=2371:obj=xpointer:subj=xmlSecTransformExecute:error=1:xmlsec
> >> >> >> > library function failed:
> >> >> >> >
> >> >> >
> >> >
> > func=xmlSecTransformCtxXmlExecute:file=..\src\transforms.c:line=1207:obj=unknown:subj=xmlSecTransformPushXml:error=1:xmlsec
> >> >> >> > library function failed:transform=xpointer
> >> >> >> >
> >> >> >
> >> >
> > func=xmlSecTransformCtxExecute:file=..\src\transforms.c:line=1267:obj=unknown:subj=xmlSecTransformCtxXmlExecute:error=1:xmlsec
> >> >> >> > library function failed:
> >> >> >> >
> >> >> >
> >> >
> > func=xmlSecDSigReferenceCtxProcessNode:file=..\src\xmldsig.c:line=1568:obj=unknown:subj=xmlSecTransformCtxExecute:error=1:xmlsec
> >> >> >> > library function failed:
> >> >> >> >
> >> >> >
> >> >
> > func=xmlSecDSigCtxProcessSignedInfoNode:file=..\src\xmldsig.c:line=804:obj=unknown:subj=xmlSecDSigReferenceCtxProcessNode:error=1:xmlsec
> >> >> >> > library function failed:node=Reference
> >> >> >> >
> >> >> >
> >> >
> > func=xmlSecDSigCtxProcessSignatureNode:file=..\src\xmldsig.c:line=547:obj=unknown:subj=xmlSecDSigCtxProcessSignedInfoNode:error=1:xmlsec
> >> >> >> > library function failed:
> >> >> >> >
> >> >> >
> >> >
> > func=xmlSecDSigCtxSign:file=..\src\xmldsig.c:line=303:obj=unknown:subj=xmlSecDSigCtxSigantureProcessNode:error=1:xmlsec
> >> >> >> > library function failed:
> >> >> >> > Error: signature failed
> >> >> >> >
> >> >> >> > Thanks in advance for any help
> >> >> >> >
> >> >> >> > Joao Henrique
> >> >> >> >
> >> >> >> >
> >> >> >> > _______________________________________________
> >> >> >> > xmlsec mailing list
> >> >> >> > xmlsec at aleksey.com
> >> >> >> > http://www.aleksey.com/mailman/listinfo/xmlsec
> >> >> >> >
> >> >> >
> >> >> >
> >> >> > _______________________________________________
> >> >> > xmlsec mailing list
> >> >> > xmlsec at aleksey.com
> >> >> > http://www.aleksey.com/mailman/listinfo/xmlsec
> >> >> >

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.aleksey.com/pipermail/xmlsec/attachments/20151020/67c0b9c0/attachment-0001.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: XmlToSign.xml
Type: application/xml
Size: 3839 bytes
Desc: not available
URL: <http://www.aleksey.com/pipermail/xmlsec/attachments/20151020/67c0b9c0/attachment-0001.xml>