Hi Aleksey,<br><br>I am verifying the signature file with following format from W3C spec  <br>&lt;?xml version=&quot;1.0&quot; encoding=&quot;UTF-8&quot;?&gt;<br><br>&lt;Signature xmlns=“<a href="http://www.w3.org/2000/09/xmldsig#" target="_blank">http://www.w3.org/2000/09/xmldsig#</a>” Id=&quot;DistributorASignature&quot; &gt;<br>

&lt;SignedInfo&gt;<br>  &lt;CanonicalizationMethod Algorithm=&quot;<a href="http://www.w3.org/2001/10/xml-exc-c14n#" target="_blank">http://www.w3.org/2001/10/xml-exc-c14n#</a>&quot;/&gt;<br>  &lt;SignatureMethod Algorithm=&quot;<a href="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256" target="_blank">http://www.w3.org/2001/04/xmldsig-more#rsa-sha256</a>&quot;/&gt;<br>

  &lt;Reference URI=&quot;config.xml&quot;&gt;<br>        &lt;DigestMethod Algorithm=&quot;<a href="http://www.w3.org/2001/04/xmlenc#sha256" target="_blank">http://www.w3.org/2001/04/xmlenc#sha256</a>&quot;/&gt;<br>        &lt;DigestValue&gt;...&lt;/DigestValue&gt;<br>

  &lt;/Reference&gt;<br>  &lt;Reference URI=&quot;index.html&quot;&gt;<br>        &lt;DigestMethod Algorithm=&quot;<a href="http://www.w3.org/2001/04/xmlenc#sha256" target="_blank">http://www.w3.org/2001/04/xmlenc#sha256</a>&quot;/&gt;<br>

        &lt;DigestValue&gt;.... &lt;/DigestValue&gt;<br>  &lt;/Reference&gt;<br>  <span style="color: rgb(255, 0, 0);">&lt;Reference URI=&quot;#prop &quot;&gt;</span><br style="color: rgb(255, 0, 0);"><span style="color: rgb(255, 0, 0);">        &lt;DigestMethod Algorithm=&quot;<a href="http://www.w3.org/2001/04/xmlenc#sha256" target="_blank">http://www.w3.org/2001/04/xmlenc#sha256</a>&quot;/&gt;</span><br style="color: rgb(255, 0, 0);">

<span style="color: rgb(255, 0, 0);">        &lt;DigestValue&gt;.... &lt;/DigestValue&gt;</span><br style="color: rgb(255, 0, 0);"><span style="color: rgb(255, 0, 0);">  &lt;/Reference&gt;</span><br>&lt;/SignedInfo&gt;<br>

&lt;SignatureValue&gt;... &lt;/SignatureValue&gt;<br>  &lt;KeyInfo&gt;&lt;X509Data&gt;<br>     &lt;X509Certificate&gt;MI...&lt;/X509Certificate&gt;<br>     &lt;X509Certificate&gt;MI...&lt;/X509Certificate&gt;<br>  &lt;/X509Data&gt;&lt;/KeyInfo&gt;<br>

 <span style="color: rgb(255, 0, 0);"> &lt;Object Id=&quot;prop&quot;&gt;</span><br style="color: rgb(255, 0, 0);"><span style="color: rgb(255, 0, 0);">         &lt;SignatureProperties xmlns:dsp=&quot;<a href="http://www.w3.org/2009/xmldsig-properties" target="_blank">http://www.w3.org/2009/xmldsig-properties</a>&quot;&gt;</span><br style="color: rgb(255, 0, 0);">

<span style="color: rgb(255, 0, 0);">              &lt;SignatureProperty Id=&quot;profile&quot; Target=&quot;#DistributorASignature&quot;&gt;</span><br style="color: rgb(255, 0, 0);"><span style="color: rgb(255, 0, 0);">                  &lt;dsp:Profile URI=&quot;<a href="http://www.w3.org/ns/widgets-digsig#profile" target="_blank">http://www.w3.org/ns/widgets-digsig#profile</a>&quot; /&gt; &lt;/SignatureProperty&gt;</span><br style="color: rgb(255, 0, 0);">

<span style="color: rgb(255, 0, 0);">              &lt;SignatureProperty Id=&quot;role&quot; Target=&quot;#DistributorASignature&quot;&gt;</span><br style="color: rgb(255, 0, 0);"><span style="color: rgb(255, 0, 0);">                  &lt;dsp:Role         URI=&quot;<a href="http://www.w3.org/ns/widgets-digsig#role-distributor" target="_blank">http://www.w3.org/ns/widgets-digsig#role-distributor</a>&quot; /&gt; &lt;/SignatureProperty&gt;</span><br style="color: rgb(255, 0, 0);">

<span style="color: rgb(255, 0, 0);">              &lt;SignatureProperty Id=&quot;identifier&quot; Target=&quot;#DistributorASignature&quot;&gt;</span><br style="color: rgb(255, 0, 0);"><span style="color: rgb(255, 0, 0);">                  &lt;dsp:Identifier&gt;J............&lt;/dsp:Identifier&gt; &lt;/SignatureProperty&gt;</span><br style="color: rgb(255, 0, 0);">

<span style="color: rgb(255, 0, 0);">         &lt;/SignatureProperties&gt;</span><br>  &lt;/Object&gt;<br>&lt;/Signature&gt;<br><br>I am getting the signature verification failure<br>Error is : func=xmlSecOpenSSLEvpSignatureVerify:file=signatures.c:line=346:obj=rsa-sha256:subj=EVP_VerifyFinal:error=18:data do not match:signature do not match<br>

<br>I am concluding that the problem is because of #prop is due to the fact that i am not getting any error with other signature files which don,t have  #prop.<br><br>So my question is does xmlsec supports &lt;Reference URI=&quot;#prop &quot;&gt; ? If yes then to which version i have to update?<br>
If not please point me to where i have to make changes to support this.<br><br><br>
Thanks and Regards<br>Gaurav<br><br><br><br><br>