[xmlsec] xmlsec1 signing with x509 cert. (NO x509 cert)

Braja Biswal be.biswal at gmail.com
Sun Jun 14 21:39:13 PDT 2009


Yes I have.

      <X509Data>
        <X509SubjectName/>
        <X509IssuerSerial/>
        <X509SKI/>
        <X509Certificate/>
        <X509CRL/>
      </X509Data>

On Sat, Jun 13, 2009 at 10:03 PM, Aleksey Sanin <aleksey at aleksey.com> wrote:

> Do you have <X509Data> element in your template?
>
> Aleksey
>
> Braja Biswal wrote:
>
>> HI Aleksey,
>>
>> I make the following steps
>> 1. ./configure --enable-crypto-dl=no --enable-x509=yes
>> --with-openssl=/usr/local/ssl
>> (./configure --enable-crypto-dl=no  --with-openssl=/usr/local/ssl)
>> 2. make
>> make install.
>>
>> Now I tried to sign the templete files
>> x509data-sn-test.tmpl
>> x509data-test.tmpl
>> enveloping-sha224-rsa-sha224.tmpl
>> couple of other files with below options.
>> *THERE IS NO X509 DATA *available in signed output files.
>>
>> I used some commands like
>> 1.
>> xmlsec1 --sign --output x509data-test-signed-untrusted.xml --print-debug
>> --pkcs12 rsakey.p12 x509data-test.tmpl
>> 2.
>> xmlsec1 --sign --output x509data-sn-test-untrusted.xml --privkey-pem
>> rsakey.pem --untrusted-pem rsacert.pem --print-debug x509data-sn-test.tmpl
>>
>> Can you please help?
>> Where I am doing mistake.
>>
>> Regards
>> Braja
>>
>>
>> ------------------------------------------------------------------------
>>
>> _______________________________________________
>> xmlsec mailing list
>> xmlsec at aleksey.com
>> http://www.aleksey.com/mailman/listinfo/xmlsec
>>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://www.aleksey.com/pipermail/xmlsec/attachments/20090615/0b17d898/attachment.htm


More information about the xmlsec mailing list