<html>
<head>
<style>P {margin-top:2px;margin-bottom:2px;}</style>
</head>
<body>
<P>I try to verify signature using info of &lt;x509Data&gt; element.</P>
<P>Signature is follow.</P>
<P>&nbsp;</P>
<P>&lt;?xml version="1.0" encoding="UTF-8"?&gt;<BR>&lt;Envelope xmlns="urn:envelope"&gt;<BR>&nbsp; &lt;Data&gt;<BR>&nbsp;Hello, World!<BR>&nbsp; &lt;/Data&gt;<BR>&nbsp; &lt;Signature xmlns="http://www.w3.org/2000/09/xmldsig#"&gt;<BR>&nbsp;&nbsp;&nbsp; &lt;SignedInfo&gt;<BR>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;CanonicalizationMethod Algorithm="http://www.w3.org/TR/2001/REC-xml-c14n-20010315"/&gt;<BR>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/&gt;<BR>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;Reference URI=""&gt;<BR>&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&lt;Transforms&gt;<BR>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/&gt;<BR>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;/Transforms&gt;<BR>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/&gt;<BR>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;DigestValue&gt;9H/rQr2Axe9hYTV2n/tCp+3UIQQ=&lt;/DigestValue&gt;<BR>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;/Reference&gt;<BR>&nbsp;&nbsp;&nbsp; &lt;/SignedInfo&gt;<BR>&nbsp;&nbsp;&nbsp; &lt;SignatureValue&gt;meSE9vU3J9R1/ZmeLLcR7swATefF6Tq7jcR+BMd+AdRMVk1KnCgxymHVfCSzxEuSWgvPzUA/hEWu7Xh3atg0zhkD25FWhG48z+gxqDqm9rW2CAQ3Q1auQ+F8Zb6eDVS6REpPLy5UbdqXF7QPbBEYJK0mv4U+f9xnQR88Hgg54oE=&lt;/SignatureValue&gt;<BR>&nbsp;&nbsp;&nbsp; &lt;KeyInfo&gt;<BR>&nbsp;&nbsp;&lt;keyValue/&gt;<BR>&nbsp;&nbsp;&nbsp; &lt;X509Data&gt;<BR>&lt;X509Certificate&gt;<BR>MIICUjCCAbsCBTEyMzQ1MA0GCSqGSIb3DQEBBAUAMIGaMQswCQYDVQQGEwJLUjESMBAGA1UE<BR>CBMJQ2hvb25nTmFtMRAwDgYDVQQHEwdZb29TdW5nMQ0wCwYDVQQKEwRFVFJJMRswGQYDVQQL<BR>ExJEUk0gRGV2ZWxvcGVyIFRlYW0xFTATBgNVBAMTDEVUUkkgU29od2FuZzEiMCAGCSmGSIb3<BR>DQEJARYTc293aGFuZ0BldHJpLnJlLm5ldDAeFw0wMjA1MDEwMDE5MzdaFw0wMzA1MDIwNDEw<BR>MDBaMEQxCzAJBgNVBAYTAktSMQ4wDAYDVQQIEwVTZW91bDEPMA0GA1UEBxMGR29vbkphMRQw<BR>EgYDVQQKEwtTZWpvbmcgVW5pdjCBnzANBgkqhkiG9w0BAQEFAAOBjQAwgYkCgYEArEkqKvki<BR>EyMrB+KL+eh2Z3AVEVksEmy/S+lBwhcGOBOL8+LXHsM8LQNhp1dvFrdt9EqC1OUceI4nScmr<BR>y9fpc3aMGgaJ6s+uX13WCHyj2ymB+ZIb+pYy8K0KHk5wUeg84CYk+yTIFmX8EIUeNJwqtm13<BR>KNMAxQ00yse7ZhmvBisCAwEAATANBgkqhkiG9w0BAQQFAAOBgQCDkBvHtUGxiAevrXYkmEx/<BR>3dOmpCjbL9WzkvIO/XNdfLwgMlK7jyOxE7emrjqtnUjclU7r4ST6woqUigKfoKEYVFAfjOzR<BR>i3cMEXCeewyDKThc3BL9bxW5aMUirsI1AeppPvKqMs9rl8MUowe8La+icsUeinVjRZnGB1qP<BR>y20S7g==<BR>&lt;/X509Certificate&gt;<BR>&lt;/X509Data&gt;<BR>&nbsp;&nbsp;&nbsp; &lt;/KeyInfo&gt;<BR>&nbsp; &lt;/Signature&gt;<BR>&lt;/Envelope&gt;</P>
<P>&nbsp;</P>
<P>But verification failed because x509_STORE_CTX's error attribute assigns X509_V_ERR_UNABLE_TO_GET_ISSUER_CERT_LOCALLY in X509_verify_cert().</P>
<P>&nbsp;</P>
<P>What is wrong?</P>
<P>&nbsp;</P>
<P>System Environment</P>
<P>&nbsp;-XMLSEC lib : 0.0.7</P>
<P>&nbsp;-OS : Windows XP</P>
<P>&nbsp;-OpenSSL : 0.9.6D</P>
<P>&nbsp;-Certificate : Self Signed</P>
<img src='http://mail.freechal.com/messagecenter/email/RcvCheck.asp?uid=25138748&userid=kjho80&key=NRTOWDLRHWEUJMESERZKBT0' width=1 height=1><br><br><br><br><table align="center" border="0" cellpadding="0" cellspacing="0" width="572" height="49"><tr><td width="258" height="25"><a href="http://home.freechal.com/etc/event/fms/FMSEvent20.asp"><img src="http://218.145.54.39/common/slogan/05.gif" border="0"></a><br></td></tr></table></body>
</html>