[xmlsec] Enveloped signing with multiple signatures

Dmitry Belyavsky beldmit at cryptocom.ru
Tue Oct 5 02:31:48 PDT 2004


On Mon, 4 Oct 2004, Aleksey Sanin wrote:

> In some case, you may also need to include enveloped transform first
> because of protocol requirements (for example, I believe ebxml requires
> this).

Yes, I include enveloped transform and XPath transform after that. I get
identical digest values at 1st signatures, but digest value differs
second time. Whether I am wrong, or it is expected result?

Another problem is XPath is unhappy: though xmlSecTmplTransformAddXPath
allows to omit the last parameter, I get an error message

XPath error : Undefined namespace prefix.

Looking through libxml sources, I found possibly your comment about it.
Who is wrong?

> Finaly note, that unless every signature in the document excludes all
> others the order of signatures is *very* important in the case of
> multiple signatures.

I see.

SY, Dmitry Belyavsky (ICQ UIN 11116575)

More information about the xmlsec mailing list