[xmlsec] command line tool problem with xpointer

Steve McIntosh stevemci at yahoo.com
Fri Aug 8 21:51:42 PDT 2003


Hello,

I am trying to sign an xml doc using the command line
utility. I am using the following command:

xmlsec1 sign --privkey mykey.pem --output result.xml
mytest.xml

However, the command fails.

I believe the problem is due to the xpointer. 

The XML is as follows:

<?xml version="1.0" encoding="UTF-8"?>
<ds:Signature
xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
  <ds:SignedInfo>
    <ds:CanonicalizationMethod
Algorithm="http://www.w3.org/TR/2001/REC-xml-c14n-20010315"/>
    <ds:SignatureMethod
Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
    <ds:Reference
URI="#xpointer(/ds:Signature/ds:Object[1])">
    <ds:Transforms>
      <ds:Transform
Algorithm="http://www.w3.org/TR/2001/REC-xml-c14n-20010315"/>
    </ds:Transforms>
      <ds:DigestMethod
Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>
      <ds:DigestValue></ds:DigestValue>
    </ds:Reference>
  </ds:SignedInfo>
  <ds:SignatureValue>
  </ds:SignatureValue>  
<ds:KeyInfo>
	<ds:X509Data>
	</ds:X509Data>
</ds:KeyInfo>
  <ds:Object>
<AddressValidationWithTelephoneInput>
	<preOrderReq>
		<clecId>POA</clecId>
		<clecApplPassword>14the</clecApplPassword>
		<clecUserId>PPPBKTG</clecUserId>
	</preOrderReq>
	<queryTelephone>7704514941</queryTelephone>
</AddressValidationWithTelephoneInput></ds:Object>
</ds:Signature>

For some reason, the xpointer expression can not be
resolved. This is an xmlsec problem in general or a
problem with my xml? Unfortunately, I must process the
document using this xpointer and can not use a work
around due to verification requirements on the
receiving end.

Any help would be appreciated.

Thanks

Steve



More information about the xmlsec mailing list