[xmlsec] Obtaining verification result
aleksey at aleksey.com
Thu Aug 8 08:13:59 PDT 2002
In order to make sure that signature is verified correctly you need to check
1) the function returned a value >=0
2) result->result == xmlSecTransformStatusOk.
This guaranties that all References in this Signature are OK too (so you
to check them by hands).
However, if your document contains Manifests then you have to iterate
the list of Manifests in order to make sure that all (or some) are ok
(the reasons for this
is that the Manifests are not included in Signature).
Jacek Nowacki wrote:
> Hello Aleksey, I am using xmlsec to verify docs which contain just one
> signature. Which way is the best to check if the verification was
> successful: 1. result->result == xmlSecTransformStatusOk; 2. iterate
> through the references in "result" structure, find corresponding ID
> and check for "result" value 3. other way Thank you, Jacek
More information about the xmlsec