[xmlsec] Urgent help needed : Certificate verification failed

Aleksey Sanin aleksey at aleksey.com
Thu Jun 4 10:59:06 PDT 2009


Try to put the certs into separate files and use
the following command:

openssl verify -CAfile Root.pem -untrusted A.pem B.pem

Aleksey

Ashish Agrawal wrote:
> Hi Aleksey,
> 
> I got something interesting now, earlier i said that the certificate 
> chain was working fine with openssl.
> 
> I command i gave was :
> openssl verify -CAfile Root.pem EE.pem
> where the EE,pem was having the intermediate cert & then the end 
> certificate and it said OK (passed0
> now inside the ee.pem's end certificate if i add some junk characters 
> and give the same command then also it passes, seems like only one 
> certificate is getting verified and not the whole chain.
> 
> Similarly with xmlsec in the signature file if i only put the 
> intermediate cert it gets verified, :-(
> 
> I am getting this feeeling that there might be a problem with the 
> certificate chain provided to me, what do u think ..
> 
> ny idea how can i confirm the same.
> 
> Regards,
> Ashish
> 
> 
> On Thu, Jun 4, 2009 at 10:44 PM, Aleksey Sanin <aleksey at aleksey.com 
> <mailto:aleksey at aleksey.com>> wrote:
> 
>     There are checks for expired certs, etc. Same as openssl.
> 
>     Aleksey
> 
>     Ashish Agrawal wrote:
> 
>         Hi Aleksey,
> 
>         i ve a doubt that since this chain was successfully verified by
>         openssl, so we put an additional checks in xmlsec which might
>         fail the validation interms of the certificate constraints ?
> 
>         Regards,
>         Ashish
> 
>         On Thu, Jun 4, 2009 at 10:01 PM, Ashish Agrawal
>         <meetashish at gmail.com <mailto:meetashish at gmail.com>
>         <mailto:meetashish at gmail.com <mailto:meetashish at gmail.com>>> wrote:
> 
>            Yes i am trying to debug simultaneously . Hopefully i will
>         get some
>            luck.
> 
>            I am attaching the certificate chain for ur reference, can u pls
>            take a look and see if you can find some thing suspicious.
> 
>            Your help is deeply appreciated.
> 
>            Regards,
>            Ashish
> 
> 
> 
> 
>            On Thu, Jun 4, 2009 at 9:54 PM, Aleksey Sanin
>         <aleksey at aleksey.com <mailto:aleksey at aleksey.com>
>            <mailto:aleksey at aleksey.com <mailto:aleksey at aleksey.com>>> wrote:
> 
>                No specific order. Sorry, you will need to debug it to
>         see what is
>                going on.
> 
>                Aleksey
> 
>                Ashish Agrawal wrote:
> 
>                    I tried the same but for same error :
>                  
>          func=xmlSecOpenSSLX509StoreVerify:file=x509vfy.c:line=360:obj=x509-store:subj=X509_verify_cert:error=4:crypto
>                    library function
>         failed:subj=/C=CN/ST=BJ/O=JIL/OU=JIL/CN=JIL
>                    EE demo;err=20;msg=unable to get local issuer certificate
>                  
>          func=xmlSecOpenSSLX509StoreVerify:file=x509vfy.c:line=408:obj=x509-store:subj=unknown:error=71:certificate
>                    verification failed:err=20;msg=unable to get local issuer
>                    certificate
>                  
>          func=xmlSecKeysMngrGetKey:file=keys.c:line=1364:obj=unknown:subj=xmlSecKeysMngrFindKey:error=1:xmlsec
>                    library function failed:
>                  
>          func=xmlSecDSigCtxProcessKeyInfoNode:file=xmldsig.c:line=884:obj=unknown:subj=unknown:error=45:key
>                    is not found:
>                  
>          func=xmlSecDSigCtxProcessSignatureNode:file=xmldsig.c:line=578:obj=unknown:subj=xmlSecDSigCtxProcessKeyInfoNode:error=1:xmlsec
>                    library function failed:
>                  
>          func=xmlSecDSigCtxVerify:file=xmldsig.c:line=379:obj=unknown:subj=xmlSecDSigCtxSigantureProcessNode:error=1:xmlsec
>                    library function failed:
> 
>                    Is there ny specfic order in which certificates should be
>                    present in the signature file ? can there be problem with
>                    the certificate fields ?
> 
> 
>                    Regards,
>                    Ashish
> 
>                    On Thu, Jun 4, 2009 at 9:39 PM, Aleksey Sanin
>                    <aleksey at aleksey.com <mailto:aleksey at aleksey.com>
>         <mailto:aleksey at aleksey.com <mailto:aleksey at aleksey.com>>
>                    <mailto:aleksey at aleksey.com
>         <mailto:aleksey at aleksey.com> <mailto:aleksey at aleksey.com
>         <mailto:aleksey at aleksey.com>>>>
>                    wrote:
> 
>                       Try
> 
>                       xmlsec1 --verify \
>                              --trusted-pem root.pem \
>                              --trusted-pem int.pem  \
>                              signature.xml
> 
>                       Aleksey
> 
>                       Ashish Agrawal wrote:
> 
>                           I have tried with:
>                           xmlsec1 --verify --trusted-pem root.pem
>                    --untrusted-pem int.pem
>                           signature.xml  (removing the intermedaite CA cert
>                    from signature
>                           file)
>                           &
>                           xmlsec1 --verify --trusted-pem root.pem
>         signature.xml
>                    ( keeping
>                           the intermedia CA cert and end certtificate in the
>                    signature file)
> 
>                           Got same result..
>                           Regards,
>                           Ashish
> 
>                           On Thu, Jun 4, 2009 at 9:25 PM, Aleksey Sanin
>                           <aleksey at aleksey.com
>         <mailto:aleksey at aleksey.com> <mailto:aleksey at aleksey.com
>         <mailto:aleksey at aleksey.com>>
>                    <mailto:aleksey at aleksey.com
>         <mailto:aleksey at aleksey.com> <mailto:aleksey at aleksey.com
>         <mailto:aleksey at aleksey.com>>>
>                           <mailto:aleksey at aleksey.com
>         <mailto:aleksey at aleksey.com>
>                    <mailto:aleksey at aleksey.com
>         <mailto:aleksey at aleksey.com>> <mailto:aleksey at aleksey.com
>         <mailto:aleksey at aleksey.com>
>                    <mailto:aleksey at aleksey.com
>         <mailto:aleksey at aleksey.com>>>>> wrote:
> 
>                              What command line options do you use?
> 
>                              Aleksey
> 
>                              Ashish Agrawal wrote:
> 
>                                  Srry, I did not understand your reply
>         completely,
>                                  You mean to check the subject field for the
>                    certifices:
> 
>                                  I see them as :
> 
>                                  End Cert: Subject: C=CN, ST=BJ, O=JIL,
>         OU=JIL,
>                    CN=JIL EE demo
>                                                  Issuer: C=CN, ST=BJ, O=JIL,
>                    OU=JIL,
>                           CN=JIL subCA
>                                  demo
> 
>                                  Intermediate cert: Subject: C=CN, ST=BJ,
>                    O=JIL, OU=JIL,
>                           CN=JIL
>                                  subCA demo
>                                                               Issuer: C=CN,
>                    ST=BJ, O=JIL,
>                           OU=JIL,
>                                  CN=JIL Root demo
> 
>                                  Root Cert:  Subject: C=CN, ST=BJ, O=JIL,
>                    OU=JIL, CN=JIL
>                           Root demo
>                                                  Issuer: C=CN, ST=BJ, O=JIL,
>                    OU=JIL,
>                           CN=JIL Root demo
> 
>                                  So seems like the chain is correct. but
>                    verification
>                                  fails.strange thing is it passes with
>         openssl
>                    but not here.
> 
>                                  Regards,
>                                  Ashish
> 
>                                  On Thu, Jun 4, 2009 at 8:59 PM, Aleksey
>         Sanin
>                                  <aleksey at aleksey.com
>         <mailto:aleksey at aleksey.com>
>                    <mailto:aleksey at aleksey.com
>         <mailto:aleksey at aleksey.com>> <mailto:aleksey at aleksey.com
>         <mailto:aleksey at aleksey.com>
>                    <mailto:aleksey at aleksey.com
>         <mailto:aleksey at aleksey.com>>>
>                           <mailto:aleksey at aleksey.com
>         <mailto:aleksey at aleksey.com>
>                    <mailto:aleksey at aleksey.com
>         <mailto:aleksey at aleksey.com>> <mailto:aleksey at aleksey.com
>         <mailto:aleksey at aleksey.com>
>                    <mailto:aleksey at aleksey.com
>         <mailto:aleksey at aleksey.com>>>>
>                                  <mailto:aleksey at aleksey.com
>         <mailto:aleksey at aleksey.com>
>                    <mailto:aleksey at aleksey.com
>         <mailto:aleksey at aleksey.com>> <mailto:aleksey at aleksey.com
>         <mailto:aleksey at aleksey.com>
>                    <mailto:aleksey at aleksey.com
>         <mailto:aleksey at aleksey.com>>>
>                           <mailto:aleksey at aleksey.com
>         <mailto:aleksey at aleksey.com>
>                    <mailto:aleksey at aleksey.com
>         <mailto:aleksey at aleksey.com>> <mailto:aleksey at aleksey.com
>         <mailto:aleksey at aleksey.com>
>                    <mailto:aleksey at aleksey.com
>         <mailto:aleksey at aleksey.com>>>>>> wrote:
> 
>                                     No there is no ordering problems.
>         You have
>                    the subject
>                                     of certificate which is at the end
>         of the
>                    chain. Try
>                                     to figure out "why?".
> 
>                                     Aleksey
> 
>                                     Ashish Agrawal wrote:
> 
>                                         Yes Aleksey,
>                                         I have already tried with the
>         openssl
>                    utility,
> 
>                                         openssl verify -CAfile root.pem
>         EE.pem
>                                         here root.pem is the root ca pem
>         file &
>                    EE,pem
>                           contains the
>                                         intermediate certificate and
>         then the end
>                           certificate. and it
>                                         passess with no error.
> 
>                                         but xmlsec fails :(
>                                         Can there be any ordering issue
>         ? shall
>                    i send my
>                           certs, will
>                                         that help in root causing ?
> 
>                                         Regards,
>                                         Ashish
> 
>                                         On Thu, Jun 4, 2009 at 8:53 PM,
>         Aleksey
>                    Sanin
>                                         <aleksey at aleksey.com
>         <mailto:aleksey at aleksey.com>
>                    <mailto:aleksey at aleksey.com
>         <mailto:aleksey at aleksey.com>> <mailto:aleksey at aleksey.com
>         <mailto:aleksey at aleksey.com>
>                    <mailto:aleksey at aleksey.com
>         <mailto:aleksey at aleksey.com>>>
>                           <mailto:aleksey at aleksey.com
>         <mailto:aleksey at aleksey.com>
>                    <mailto:aleksey at aleksey.com
>         <mailto:aleksey at aleksey.com>> <mailto:aleksey at aleksey.com
>         <mailto:aleksey at aleksey.com>
>                    <mailto:aleksey at aleksey.com
>         <mailto:aleksey at aleksey.com>>>>
>                                  <mailto:aleksey at aleksey.com
>         <mailto:aleksey at aleksey.com>
>                    <mailto:aleksey at aleksey.com
>         <mailto:aleksey at aleksey.com>> <mailto:aleksey at aleksey.com
>         <mailto:aleksey at aleksey.com>
>                    <mailto:aleksey at aleksey.com
>         <mailto:aleksey at aleksey.com>>>
>                           <mailto:aleksey at aleksey.com
>         <mailto:aleksey at aleksey.com>
>                    <mailto:aleksey at aleksey.com
>         <mailto:aleksey at aleksey.com>> <mailto:aleksey at aleksey.com
>         <mailto:aleksey at aleksey.com>
>                    <mailto:aleksey at aleksey.com
>         <mailto:aleksey at aleksey.com>>>>>
>                                         <mailto:aleksey at aleksey.com
>         <mailto:aleksey at aleksey.com>
>                    <mailto:aleksey at aleksey.com <mailto:aleksey at aleksey.com>>
>                           <mailto:aleksey at aleksey.com
>         <mailto:aleksey at aleksey.com>
>                    <mailto:aleksey at aleksey.com
>         <mailto:aleksey at aleksey.com>>> <mailto:aleksey at aleksey.com
>         <mailto:aleksey at aleksey.com>
>                    <mailto:aleksey at aleksey.com <mailto:aleksey at aleksey.com>>
>                           <mailto:aleksey at aleksey.com
>         <mailto:aleksey at aleksey.com>
>                    <mailto:aleksey at aleksey.com
>         <mailto:aleksey at aleksey.com>>>>
>                                  <mailto:aleksey at aleksey.com
>         <mailto:aleksey at aleksey.com>
>                    <mailto:aleksey at aleksey.com
>         <mailto:aleksey at aleksey.com>> <mailto:aleksey at aleksey.com
>         <mailto:aleksey at aleksey.com>
>                    <mailto:aleksey at aleksey.com
>         <mailto:aleksey at aleksey.com>>>
>                           <mailto:aleksey at aleksey.com
>         <mailto:aleksey at aleksey.com>
>                    <mailto:aleksey at aleksey.com
>         <mailto:aleksey at aleksey.com>> <mailto:aleksey at aleksey.com
>         <mailto:aleksey at aleksey.com>
>                    <mailto:aleksey at aleksey.com
>         <mailto:aleksey at aleksey.com>>>>>>> wrote:
> 
>                                            Try to verify your certs
>         chain using
>                    openssl
>                           command line
>                                         tool directly.
> 
>                                            Aleksey
> 
>                                            Ashish Agrawal wrote:
> 
>                                                Hi Aleksey,
> 
>                                                My signature.xml file has two
>                    certificate,
>                           one is
>                                  the end
>                                                certificate and the other
>         is the
>                           intermediate CA.
>                                                In the intermediate
>         certificate
>                    also the "CA"
>                                  field is true
>                                                .Could this be the root
>         cause of
>                    the problem.
> 
>                                                Attaching the intermediate CA
>                    pem file
> 
>                                                Thanks for ur help.
> 
>                                                Regards,
>                                                Ashish
> 
> 
>                                                On Thu, Jun 4, 2009 at
>         8:21 PM,
>                    Aleksey Sanin
>                                                <aleksey at aleksey.com
>         <mailto:aleksey at aleksey.com>
>                    <mailto:aleksey at aleksey.com <mailto:aleksey at aleksey.com>>
>                           <mailto:aleksey at aleksey.com
>         <mailto:aleksey at aleksey.com>
>                    <mailto:aleksey at aleksey.com
>         <mailto:aleksey at aleksey.com>>> <mailto:aleksey at aleksey.com
>         <mailto:aleksey at aleksey.com>
>                    <mailto:aleksey at aleksey.com <mailto:aleksey at aleksey.com>>
>                           <mailto:aleksey at aleksey.com
>         <mailto:aleksey at aleksey.com>
>                    <mailto:aleksey at aleksey.com
>         <mailto:aleksey at aleksey.com>>>>
>                                  <mailto:aleksey at aleksey.com
>         <mailto:aleksey at aleksey.com>
>                    <mailto:aleksey at aleksey.com
>         <mailto:aleksey at aleksey.com>> <mailto:aleksey at aleksey.com
>         <mailto:aleksey at aleksey.com>
>                    <mailto:aleksey at aleksey.com
>         <mailto:aleksey at aleksey.com>>>
>                           <mailto:aleksey at aleksey.com
>         <mailto:aleksey at aleksey.com>
>                    <mailto:aleksey at aleksey.com
>         <mailto:aleksey at aleksey.com>> <mailto:aleksey at aleksey.com
>         <mailto:aleksey at aleksey.com>
>                    <mailto:aleksey at aleksey.com
>         <mailto:aleksey at aleksey.com>>>>>
>                                         <mailto:aleksey at aleksey.com
>         <mailto:aleksey at aleksey.com>
>                    <mailto:aleksey at aleksey.com <mailto:aleksey at aleksey.com>>
>                           <mailto:aleksey at aleksey.com
>         <mailto:aleksey at aleksey.com>
>                    <mailto:aleksey at aleksey.com
>         <mailto:aleksey at aleksey.com>>> <mailto:aleksey at aleksey.com
>         <mailto:aleksey at aleksey.com>
>                    <mailto:aleksey at aleksey.com <mailto:aleksey at aleksey.com>>
>                           <mailto:aleksey at aleksey.com
>         <mailto:aleksey at aleksey.com>
>                    <mailto:aleksey at aleksey.com
>         <mailto:aleksey at aleksey.com>>>>
>                                  <mailto:aleksey at aleksey.com
>         <mailto:aleksey at aleksey.com>
>                    <mailto:aleksey at aleksey.com
>         <mailto:aleksey at aleksey.com>> <mailto:aleksey at aleksey.com
>         <mailto:aleksey at aleksey.com>
>                    <mailto:aleksey at aleksey.com
>         <mailto:aleksey at aleksey.com>>>
>                           <mailto:aleksey at aleksey.com
>         <mailto:aleksey at aleksey.com>
>                    <mailto:aleksey at aleksey.com
>         <mailto:aleksey at aleksey.com>> <mailto:aleksey at aleksey.com
>         <mailto:aleksey at aleksey.com>
>                    <mailto:aleksey at aleksey.com
>         <mailto:aleksey at aleksey.com>>>>>>
>                                              
>          <mailto:aleksey at aleksey.com <mailto:aleksey at aleksey.com>
>                    <mailto:aleksey at aleksey.com <mailto:aleksey at aleksey.com>>
>                           <mailto:aleksey at aleksey.com
>         <mailto:aleksey at aleksey.com> <mailto:aleksey at aleksey.com
>         <mailto:aleksey at aleksey.com>>>
>                                  <mailto:aleksey at aleksey.com
>         <mailto:aleksey at aleksey.com>
>                    <mailto:aleksey at aleksey.com
>         <mailto:aleksey at aleksey.com>> <mailto:aleksey at aleksey.com
>         <mailto:aleksey at aleksey.com>
>                    <mailto:aleksey at aleksey.com
>         <mailto:aleksey at aleksey.com>>>>
>                           <mailto:aleksey at aleksey.com
>         <mailto:aleksey at aleksey.com>
>                    <mailto:aleksey at aleksey.com
>         <mailto:aleksey at aleksey.com>> <mailto:aleksey at aleksey.com
>         <mailto:aleksey at aleksey.com>
>                    <mailto:aleksey at aleksey.com
>         <mailto:aleksey at aleksey.com>>>
>                                  <mailto:aleksey at aleksey.com
>         <mailto:aleksey at aleksey.com>
>                    <mailto:aleksey at aleksey.com
>         <mailto:aleksey at aleksey.com>> <mailto:aleksey at aleksey.com
>         <mailto:aleksey at aleksey.com>
>                    <mailto:aleksey at aleksey.com
>         <mailto:aleksey at aleksey.com>>>>>
>                                         <mailto:aleksey at aleksey.com
>         <mailto:aleksey at aleksey.com>
>                    <mailto:aleksey at aleksey.com <mailto:aleksey at aleksey.com>>
>                           <mailto:aleksey at aleksey.com
>         <mailto:aleksey at aleksey.com>
>                    <mailto:aleksey at aleksey.com
>         <mailto:aleksey at aleksey.com>>> <mailto:aleksey at aleksey.com
>         <mailto:aleksey at aleksey.com>
>                    <mailto:aleksey at aleksey.com <mailto:aleksey at aleksey.com>>
>                           <mailto:aleksey at aleksey.com
>         <mailto:aleksey at aleksey.com>
>                    <mailto:aleksey at aleksey.com
>         <mailto:aleksey at aleksey.com>>>>
>                                  <mailto:aleksey at aleksey.com
>         <mailto:aleksey at aleksey.com>
>                    <mailto:aleksey at aleksey.com
>         <mailto:aleksey at aleksey.com>> <mailto:aleksey at aleksey.com
>         <mailto:aleksey at aleksey.com>
>                    <mailto:aleksey at aleksey.com
>         <mailto:aleksey at aleksey.com>>>
>                           <mailto:aleksey at aleksey.com
>         <mailto:aleksey at aleksey.com>
>                    <mailto:aleksey at aleksey.com
>         <mailto:aleksey at aleksey.com>> <mailto:aleksey at aleksey.com
>         <mailto:aleksey at aleksey.com>
>                    <mailto:aleksey at aleksey.com
>         <mailto:aleksey at aleksey.com>>>>>>>> wrote:
> 
>                                                   This error means that
>         xmlsec
>                    can't build
>                           certs
>                                  chain
>                                         for some
>                                                reasons.
> 
>                                                   Aleksey
> 
>                                                   Ashish Agrawal wrote:
> 
>                                                       Hi Aleksey,
> 
>                                                       I ve a problem
>         where i v
>                    a root CA
>                           and and two
>                                                certificates in
>                                                       the chain, when i
>         try to
>                    verify the
>                           chain using
>                                         openssl
>                                                it works :
>                                                       openssl verify -CAfile
>                    root.pem EE.pem
>                                                       but when i to to
>         verify
>                    using xmlsec it
>                                  fails with the
>                                                error :
>                                                                        
>                        
>         func=xmlSecOpenSSLX509StoreVerify:file=x509vfy.c:line=360:obj=x509-store:subj=X509_verify_cert:error=4:crypto
>                                                       library function
>                                                        
>          failed:subj=/C=CN/ST=BJ/O=JIL/OU=JIL/CN=JIL EE
>                                                      
>         demo;err=20;msg=unable to
>                    get local
>                           issuer
>                                  certificate
>                                                                        
>                        
>         func=xmlSecOpenSSLX509StoreVerify:file=x509vfy.c:line=408:obj=x509-store:subj=unknown:error=71:certificate
>                                                       verification
>                    failed:err=20;msg=unable to
>                                  get local
>                                         issuer
>                                                       certificate
>                                                                        
>                        
>         func=xmlSecKeysMngrGetKey:file=keys.c:line=1364:obj=unknown:subj=xmlSecKeysMngrFindKey:error=1:xmlsec
>                                                       library function
>         failed:
>                                                                        
>                        
>         func=xmlSecDSigCtxProcessKeyInfoNode:file=xmldsig.c:line=884:obj=unknown:subj=unknown:error=45:key
>                                                       is not found:
>                                                                        
>                        
>         func=xmlSecDSigCtxProcessSignatureNode:file=xmldsig.c:line=578:obj=unknown:subj=xmlSecDSigCtxProcessKeyInfoNode:error=1:xmlsec
>                                                       library function
>         failed:
>                                                                        
>                        
>         func=xmlSecDSigCtxVerify:file=xmldsig.c:line=379:obj=unknown:subj=xmlSecDSigCtxSigantureProcessNode:error=1:xmlsec
>                                                       library function
>         failed:
>                                                       Error: signature
>         failed
>                                                       ERROR
>                                                       SignedInfo References
>                    (ok/all): 6/6
>                                                       Manifests References
>                    (ok/all): 0/0
> 
> 
>                                                       Does xmlsec imposes ny
>                    additional
>                                  constraint on the
>                                                certificate
>                                                       validation and if yes
>                    what are they ?
> 
>                                                       Regards,
>                                                       Ashish
> 
> 
>                                                                        
>                        
>         ------------------------------------------------------------------------
> 
>                                                                      
>         _______________________________________________
>                                                       xmlsec mailing list
>                                                       xmlsec at aleksey.com
>         <mailto:xmlsec at aleksey.com>
>                    <mailto:xmlsec at aleksey.com <mailto:xmlsec at aleksey.com>>
>                           <mailto:xmlsec at aleksey.com
>         <mailto:xmlsec at aleksey.com> <mailto:xmlsec at aleksey.com
>         <mailto:xmlsec at aleksey.com>>>
>                                  <mailto:xmlsec at aleksey.com
>         <mailto:xmlsec at aleksey.com>
>                    <mailto:xmlsec at aleksey.com
>         <mailto:xmlsec at aleksey.com>> <mailto:xmlsec at aleksey.com
>         <mailto:xmlsec at aleksey.com>
>                    <mailto:xmlsec at aleksey.com <mailto:xmlsec at aleksey.com>>>>
>                           <mailto:xmlsec at aleksey.com
>         <mailto:xmlsec at aleksey.com>
>                    <mailto:xmlsec at aleksey.com
>         <mailto:xmlsec at aleksey.com>> <mailto:xmlsec at aleksey.com
>         <mailto:xmlsec at aleksey.com>
>                    <mailto:xmlsec at aleksey.com <mailto:xmlsec at aleksey.com>>>
>                                  <mailto:xmlsec at aleksey.com
>         <mailto:xmlsec at aleksey.com>
>                    <mailto:xmlsec at aleksey.com
>         <mailto:xmlsec at aleksey.com>> <mailto:xmlsec at aleksey.com
>         <mailto:xmlsec at aleksey.com>
>                    <mailto:xmlsec at aleksey.com
>         <mailto:xmlsec at aleksey.com>>>>>
>                                         <mailto:xmlsec at aleksey.com
>         <mailto:xmlsec at aleksey.com>
>                    <mailto:xmlsec at aleksey.com <mailto:xmlsec at aleksey.com>>
>                           <mailto:xmlsec at aleksey.com
>         <mailto:xmlsec at aleksey.com>
>                    <mailto:xmlsec at aleksey.com
>         <mailto:xmlsec at aleksey.com>>> <mailto:xmlsec at aleksey.com
>         <mailto:xmlsec at aleksey.com>
>                    <mailto:xmlsec at aleksey.com <mailto:xmlsec at aleksey.com>>
>                           <mailto:xmlsec at aleksey.com
>         <mailto:xmlsec at aleksey.com> <mailto:xmlsec at aleksey.com
>         <mailto:xmlsec at aleksey.com>>>>
>                                  <mailto:xmlsec at aleksey.com
>         <mailto:xmlsec at aleksey.com>
>                    <mailto:xmlsec at aleksey.com
>         <mailto:xmlsec at aleksey.com>> <mailto:xmlsec at aleksey.com
>         <mailto:xmlsec at aleksey.com>
>                    <mailto:xmlsec at aleksey.com <mailto:xmlsec at aleksey.com>>>
>                           <mailto:xmlsec at aleksey.com
>         <mailto:xmlsec at aleksey.com>
>                    <mailto:xmlsec at aleksey.com
>         <mailto:xmlsec at aleksey.com>> <mailto:xmlsec at aleksey.com
>         <mailto:xmlsec at aleksey.com>
>                    <mailto:xmlsec at aleksey.com
>         <mailto:xmlsec at aleksey.com>>>>>>
>                                              
>          <mailto:xmlsec at aleksey.com <mailto:xmlsec at aleksey.com>
>                    <mailto:xmlsec at aleksey.com <mailto:xmlsec at aleksey.com>>
>                           <mailto:xmlsec at aleksey.com
>         <mailto:xmlsec at aleksey.com> <mailto:xmlsec at aleksey.com
>         <mailto:xmlsec at aleksey.com>>>
>                                  <mailto:xmlsec at aleksey.com
>         <mailto:xmlsec at aleksey.com>
>                    <mailto:xmlsec at aleksey.com
>         <mailto:xmlsec at aleksey.com>> <mailto:xmlsec at aleksey.com
>         <mailto:xmlsec at aleksey.com>
>                    <mailto:xmlsec at aleksey.com <mailto:xmlsec at aleksey.com>>>>
>                           <mailto:xmlsec at aleksey.com
>         <mailto:xmlsec at aleksey.com>
>                    <mailto:xmlsec at aleksey.com
>         <mailto:xmlsec at aleksey.com>> <mailto:xmlsec at aleksey.com
>         <mailto:xmlsec at aleksey.com>
>                    <mailto:xmlsec at aleksey.com <mailto:xmlsec at aleksey.com>>>
>                                  <mailto:xmlsec at aleksey.com
>         <mailto:xmlsec at aleksey.com>
>                    <mailto:xmlsec at aleksey.com
>         <mailto:xmlsec at aleksey.com>> <mailto:xmlsec at aleksey.com
>         <mailto:xmlsec at aleksey.com>
>                    <mailto:xmlsec at aleksey.com
>         <mailto:xmlsec at aleksey.com>>>>>
>                                         <mailto:xmlsec at aleksey.com
>         <mailto:xmlsec at aleksey.com>
>                    <mailto:xmlsec at aleksey.com <mailto:xmlsec at aleksey.com>>
>                           <mailto:xmlsec at aleksey.com
>         <mailto:xmlsec at aleksey.com>
>                    <mailto:xmlsec at aleksey.com
>         <mailto:xmlsec at aleksey.com>>> <mailto:xmlsec at aleksey.com
>         <mailto:xmlsec at aleksey.com>
>                    <mailto:xmlsec at aleksey.com <mailto:xmlsec at aleksey.com>>
>                           <mailto:xmlsec at aleksey.com
>         <mailto:xmlsec at aleksey.com> <mailto:xmlsec at aleksey.com
>         <mailto:xmlsec at aleksey.com>>>>
>                                  <mailto:xmlsec at aleksey.com
>         <mailto:xmlsec at aleksey.com>
>                    <mailto:xmlsec at aleksey.com
>         <mailto:xmlsec at aleksey.com>> <mailto:xmlsec at aleksey.com
>         <mailto:xmlsec at aleksey.com>
>                    <mailto:xmlsec at aleksey.com <mailto:xmlsec at aleksey.com>>>
>                           <mailto:xmlsec at aleksey.com
>         <mailto:xmlsec at aleksey.com>
>                    <mailto:xmlsec at aleksey.com
>         <mailto:xmlsec at aleksey.com>> <mailto:xmlsec at aleksey.com
>         <mailto:xmlsec at aleksey.com>
>                    <mailto:xmlsec at aleksey.com
>         <mailto:xmlsec at aleksey.com>>>>>>>
> 
> 
>                                                                      
>         http://www.aleksey.com/mailman/listinfo/xmlsec
> 
> 
> 
>                                                                        
>          
>          ------------------------------------------------------------------------
> 
>                                                        
>          _______________________________________________
>                                                xmlsec mailing list
>                                                xmlsec at aleksey.com
>         <mailto:xmlsec at aleksey.com>
>                    <mailto:xmlsec at aleksey.com <mailto:xmlsec at aleksey.com>>
>                           <mailto:xmlsec at aleksey.com
>         <mailto:xmlsec at aleksey.com>
>                    <mailto:xmlsec at aleksey.com
>         <mailto:xmlsec at aleksey.com>>> <mailto:xmlsec at aleksey.com
>         <mailto:xmlsec at aleksey.com>
>                    <mailto:xmlsec at aleksey.com <mailto:xmlsec at aleksey.com>>
>                           <mailto:xmlsec at aleksey.com
>         <mailto:xmlsec at aleksey.com> <mailto:xmlsec at aleksey.com
>         <mailto:xmlsec at aleksey.com>>>>
>                                  <mailto:xmlsec at aleksey.com
>         <mailto:xmlsec at aleksey.com>
>                    <mailto:xmlsec at aleksey.com
>         <mailto:xmlsec at aleksey.com>> <mailto:xmlsec at aleksey.com
>         <mailto:xmlsec at aleksey.com>
>                    <mailto:xmlsec at aleksey.com <mailto:xmlsec at aleksey.com>>>
>                           <mailto:xmlsec at aleksey.com
>         <mailto:xmlsec at aleksey.com>
>                    <mailto:xmlsec at aleksey.com
>         <mailto:xmlsec at aleksey.com>> <mailto:xmlsec at aleksey.com
>         <mailto:xmlsec at aleksey.com>
>                    <mailto:xmlsec at aleksey.com
>         <mailto:xmlsec at aleksey.com>>>>>
>                                         <mailto:xmlsec at aleksey.com
>         <mailto:xmlsec at aleksey.com>
>                    <mailto:xmlsec at aleksey.com <mailto:xmlsec at aleksey.com>>
>                           <mailto:xmlsec at aleksey.com
>         <mailto:xmlsec at aleksey.com>
>                    <mailto:xmlsec at aleksey.com
>         <mailto:xmlsec at aleksey.com>>> <mailto:xmlsec at aleksey.com
>         <mailto:xmlsec at aleksey.com>
>                    <mailto:xmlsec at aleksey.com <mailto:xmlsec at aleksey.com>>
>                           <mailto:xmlsec at aleksey.com
>         <mailto:xmlsec at aleksey.com> <mailto:xmlsec at aleksey.com
>         <mailto:xmlsec at aleksey.com>>>>
>                                  <mailto:xmlsec at aleksey.com
>         <mailto:xmlsec at aleksey.com>
>                    <mailto:xmlsec at aleksey.com
>         <mailto:xmlsec at aleksey.com>> <mailto:xmlsec at aleksey.com
>         <mailto:xmlsec at aleksey.com>
>                    <mailto:xmlsec at aleksey.com <mailto:xmlsec at aleksey.com>>>
>                           <mailto:xmlsec at aleksey.com
>         <mailto:xmlsec at aleksey.com>
>                    <mailto:xmlsec at aleksey.com
>         <mailto:xmlsec at aleksey.com>> <mailto:xmlsec at aleksey.com
>         <mailto:xmlsec at aleksey.com>
>                    <mailto:xmlsec at aleksey.com
>         <mailto:xmlsec at aleksey.com>>>>>>
>                                                        
>          http://www.aleksey.com/mailman/listinfo/xmlsec
> 
> 
> 
>                                                              
>         ------------------------------------------------------------------------
> 
>                                                  
>         _______________________________________________
>                                         xmlsec mailing list
>                                         xmlsec at aleksey.com
>         <mailto:xmlsec at aleksey.com>
>                    <mailto:xmlsec at aleksey.com
>         <mailto:xmlsec at aleksey.com>> <mailto:xmlsec at aleksey.com
>         <mailto:xmlsec at aleksey.com>
>                    <mailto:xmlsec at aleksey.com <mailto:xmlsec at aleksey.com>>>
>                           <mailto:xmlsec at aleksey.com
>         <mailto:xmlsec at aleksey.com>
>                    <mailto:xmlsec at aleksey.com
>         <mailto:xmlsec at aleksey.com>> <mailto:xmlsec at aleksey.com
>         <mailto:xmlsec at aleksey.com>
>                    <mailto:xmlsec at aleksey.com <mailto:xmlsec at aleksey.com>>>>
>                                  <mailto:xmlsec at aleksey.com
>         <mailto:xmlsec at aleksey.com>
>                    <mailto:xmlsec at aleksey.com
>         <mailto:xmlsec at aleksey.com>> <mailto:xmlsec at aleksey.com
>         <mailto:xmlsec at aleksey.com>
>                    <mailto:xmlsec at aleksey.com <mailto:xmlsec at aleksey.com>>>
>                           <mailto:xmlsec at aleksey.com
>         <mailto:xmlsec at aleksey.com>
>                    <mailto:xmlsec at aleksey.com
>         <mailto:xmlsec at aleksey.com>> <mailto:xmlsec at aleksey.com
>         <mailto:xmlsec at aleksey.com>
>                    <mailto:xmlsec at aleksey.com
>         <mailto:xmlsec at aleksey.com>>>>>
>                                                  
>         http://www.aleksey.com/mailman/listinfo/xmlsec
> 
> 
> 
>                                                
>          ------------------------------------------------------------------------
> 
>                                
>          _______________________________________________
>                                  xmlsec mailing list
>                                  xmlsec at aleksey.com
>         <mailto:xmlsec at aleksey.com> <mailto:xmlsec at aleksey.com
>         <mailto:xmlsec at aleksey.com>>
>                    <mailto:xmlsec at aleksey.com
>         <mailto:xmlsec at aleksey.com> <mailto:xmlsec at aleksey.com
>         <mailto:xmlsec at aleksey.com>>>
>                           <mailto:xmlsec at aleksey.com
>         <mailto:xmlsec at aleksey.com>
>                    <mailto:xmlsec at aleksey.com
>         <mailto:xmlsec at aleksey.com>> <mailto:xmlsec at aleksey.com
>         <mailto:xmlsec at aleksey.com>
>                    <mailto:xmlsec at aleksey.com <mailto:xmlsec at aleksey.com>>>>
>                                
>          http://www.aleksey.com/mailman/listinfo/xmlsec
> 
> 
> 
>                                    
>         ------------------------------------------------------------------------
> 
>                           _______________________________________________
>                           xmlsec mailing list
>                           xmlsec at aleksey.com <mailto:xmlsec at aleksey.com>
>         <mailto:xmlsec at aleksey.com <mailto:xmlsec at aleksey.com>>
>                    <mailto:xmlsec at aleksey.com
>         <mailto:xmlsec at aleksey.com> <mailto:xmlsec at aleksey.com
>         <mailto:xmlsec at aleksey.com>>>
>                           http://www.aleksey.com/mailman/listinfo/xmlsec
> 
> 
> 
>                  
>          ------------------------------------------------------------------------
> 
>                    _______________________________________________
>                    xmlsec mailing list
>                    xmlsec at aleksey.com <mailto:xmlsec at aleksey.com>
>         <mailto:xmlsec at aleksey.com <mailto:xmlsec at aleksey.com>>
>                    http://www.aleksey.com/mailman/listinfo/xmlsec
> 
> 
> 
> 
>         ------------------------------------------------------------------------
> 
>         _______________________________________________
>         xmlsec mailing list
>         xmlsec at aleksey.com <mailto:xmlsec at aleksey.com>
>         http://www.aleksey.com/mailman/listinfo/xmlsec
> 
> 


More information about the xmlsec mailing list