[xmlsec] KeyValue by MsCrypto

Jürgen Heiss jheiss at Mesonic.com
Sun Aug 27 23:40:37 PDT 2006


Hi Aleksey,

I tried the following 

<template>

[...]
			<dsig:KeyName>Juergen Heiss,  (Test)</dsig:KeyName>
			<dsig:KeyValue>
			</dsig:KeyValue>
			<dsig:X509Data>
[...] 


<signed>
		<dsig:SignatureValue>WxW5734Emf4kpGQWFNOCA9x0djPw6VNYK3NRTALozYrHcVmLqFjnec/a6L5qBZv6
bkW4HF5f34chLREq7DhehES0FETV3t7tXft9GrSMx1SN0WDu53o1UB1yC1XbQz2H
E6dRq9bqDO2b+/S+G4pOPkAajChkiAdh3vhVSjOCMdM=</dsig:SignatureValue>
		<dsig:KeyInfo>
			<dsig:KeyName>Juergen Heiss,  (Test)</dsig:KeyName>
			<dsig:KeyValue>
			</dsig:KeyValue>
			<dsig:X509Data>


I used the commandline tool to sign.

xmlsec --sign --crypto mscrypto --output template.xml output.xml



-----Original Message-----
From: Aleksey Sanin [mailto:aleksey at aleksey.com] 
Sent: Freitag, 25. August 2006 16:59
To: Jürgen Heiss
Cc: xmlsec at aleksey.com
Subject: Re: [xmlsec] KeyValue by MsCrypto

So, I believe that openssl can not verify it because the KeyValue is empty... Thus, the question is: why mscrypto does not want to write public key info into the document?.
Do you have any errors on the output?

Can you try to use the following template (just key value node w/o any content), please?

<dsig:KeyValue></dsig:KeyValue>

Aleksey






More information about the xmlsec mailing list