[xmlsec] X509 - does cert need to be included in XML?

[Aleksey Sanin]

Sorry, a typo: "signed certificate" should be "signing certificate".

Re "certificate subject" - I would suggest you to find and read
a good book about PKI and X509 certificates.

Aleksey

Mark Young wrote:
> I'm not sure I understand.  What do you mean by "signed" cert and 
> certificate subject?
> 
>  > Date: Mon, 3 Nov 2008 12:16:17 -0800
>  > From: aleksey at aleksey.com
>  > To: ccgenealogy at hotmail.com
>  > CC: xmlsec at aleksey.com
>  > Subject: Re: [xmlsec] X509 - does cert need to be included in XML?
>  >
>  > You can refer to "signed" cert using certificate subject, etc.
>  > But some reference MUST present.
>  >
>  > Aleksey
>  >
>  > Mark Young wrote:
>  > > I've been verifying signed XML documents using an X509 chain, and I've
>  > > found that the verification is only successful if the actual signing
>  > > certificate is provided in the XML. The other certificates in the 
> chain
>  > > can just be placed in the keys manager. Is there a way for the
>  > > verification to succeed with all the certificates in the keys manager,
>  > > without requiring any to be included in the signed XML document? Mike
>  > >
>  > > 
> ------------------------------------------------------------------------
>  > > When your life is on the go—take your life with you. Try Windows 
> Mobile®
>  > > today <http://clk.atdmt.com/MRT/go/115298558/direct/01/>
>  > >
>  > >
>  > > 
> ------------------------------------------------------------------------
>  > >
>  > > _______________________________________________
>  > > xmlsec mailing list
>  > > xmlsec at aleksey.com
>  > > http://www.aleksey.com/mailman/listinfo/xmlsec
> 
> ------------------------------------------------------------------------
> Color coding for safety: Windows Live Hotmail alerts you to suspicious 
> email. Sign up today. 
> <http://windowslive.com/Explore/Hotmail?ocid=TXT_TAGLM_WL_hotmail_acq_safety_112008>
> 
> 
> ------------------------------------------------------------------------
> 
> _______________________________________________
> xmlsec mailing list
> xmlsec at aleksey.com
> http://www.aleksey.com/mailman/listinfo/xmlsec