[xmlsec] Error with verification of signature.

Sean Truman struman at nuparadigm.com
Wed Mar 15 09:35:50 PST 2006


I am in the process of writing my own XML Signature library in java.  I
am using http://www.aleksey.com/xmlsec/xmldsig-verifier.html to verify
my Signature. For the life of me I am unable to figure out what is
wrong. My DigestValue is verified. (So I am assuming my Canonicalizer is
working correctly, I haven written fully to spec of w3c).

I keep receiving this error.

sha1:subj=EVP_VerifyFinal:error=18:data do not match:signature do not

I have attached the test.xml for which I am trying to sign the root
element, test-signed.xml which output from my XML Signing library. Also
attached is the X509Certificate in PKCS12 format. The password is
'test'.  Could someone please help me to determine what the issues might


-------------- next part --------------
A non-text attachment was scrubbed...
Name: XML Signature Test.p12
Type: application/x-pkcs12
Size: 1889 bytes
Desc: XML Signature Test.p12
Url : http://www.aleksey.com/pipermail/xmlsec/attachments/20060315/f3a4d581/XMLSignatureTest-0002.p12
-------------- next part --------------
A non-text attachment was scrubbed...
Name: test.xml
Type: text/xml
Size: 182 bytes
Desc: test.xml
Url : http://www.aleksey.com/pipermail/xmlsec/attachments/20060315/f3a4d581/test-0002.xml
-------------- next part --------------
A non-text attachment was scrubbed...
Name: test-signed.xml
Type: text/xml
Size: 1190 bytes
Desc: test-signed.xml
Url : http://www.aleksey.com/pipermail/xmlsec/attachments/20060315/f3a4d581/test-signed-0002.xml

More information about the xmlsec mailing list