[xmlsec] xmlsec1 signing with x509 cert. (NO x509 cert)

Aleksey Sanin aleksey at aleksey.com
Sun Jun 14 22:21:30 PDT 2009


Do you have certs in the rsakey.p12 ?

Aleksey

Braja Biswal wrote:
> Yes I have.
> 
>       <X509Data>
>         <X509SubjectName/>
>         <X509IssuerSerial/>
>         <X509SKI/>
>         <X509Certificate/>
>         <X509CRL/>
>       </X509Data>
> 
> On Sat, Jun 13, 2009 at 10:03 PM, Aleksey Sanin <aleksey at aleksey.com 
> <mailto:aleksey at aleksey.com>> wrote:
> 
>     Do you have <X509Data> element in your template?
> 
>     Aleksey
> 
>     Braja Biswal wrote:
> 
>         HI Aleksey,
> 
>         I make the following steps
>         1. ./configure --enable-crypto-dl=no --enable-x509=yes
>         --with-openssl=/usr/local/ssl
>         (./configure --enable-crypto-dl=no  --with-openssl=/usr/local/ssl)
>         2. make
>         make install.
> 
>         Now I tried to sign the templete files
>         x509data-sn-test.tmpl
>         x509data-test.tmpl
>         enveloping-sha224-rsa-sha224.tmpl
>         couple of other files with below options.
>         *THERE IS NO X509 DATA *available in signed output files.
> 
>         I used some commands like
>         1.
>         xmlsec1 --sign --output x509data-test-signed-untrusted.xml
>         --print-debug --pkcs12 rsakey.p12 x509data-test.tmpl
>         2.
>         xmlsec1 --sign --output x509data-sn-test-untrusted.xml
>         --privkey-pem rsakey.pem --untrusted-pem rsacert.pem
>         --print-debug x509data-sn-test.tmpl
> 
>         Can you please help?
>         Where I am doing mistake.
> 
>         Regards
>         Braja
> 
> 
>         ------------------------------------------------------------------------
> 
>         _______________________________________________
>         xmlsec mailing list
>         xmlsec at aleksey.com <mailto:xmlsec at aleksey.com>
>         http://www.aleksey.com/mailman/listinfo/xmlsec
> 
> 


More information about the xmlsec mailing list