[xmlsec] RetrievalMethod with local URI?

[Aleksey Sanin]

How do you verify signature? Do you use xmlsec application or your code?

Aleksey

John Belmonte wrote:

> I'm not having any luck with RetrievalMethod on a local URI during 
> signature verify, again with xmlsec tool 0.0.5.  Synopsis:
>
>   <KeyInfo Id="foo">
>     <KeyValue>...</KeyValue>
>   </KeyInfo>
>
>   ...
>
>   <Signature xmlns="http://www.w3.org/2000/09/xmldsig#">
>     <SignedInfo>
>       <CanonicalizationMethod
>         Algorithm="http://www.w3.org/TR/2001/REC-xml-c14n-20010315"/>
>       <SignatureMethod
>         Algorithm="http://www.w3.org/2000/09/xmldsig#dsa-sha1"/>
>       <Reference URI="">...</Reference>
>     </SignedInfo>
>     <SignatureValue>...</SignatureValue>
>     <KeyInfo>
>       <RetrievalMethod URI="#foo"/>
>     </KeyInfo>
>   </Signature>
>
>
> The xmlsec tool reports "xmlSecKeysMngrGetKey: failed to find key". 
> Maybe I'm misunderstanding the spec?
>
> -John
>
>
>