[xmlsec] rsakey sign fail

Kai Hendry hendry at iki.fi
Wed Aug 26 07:26:02 PDT 2009


http://git.webvm.net/?p=wgtqa;a=blob;f=xmldsig/Makefile;

hendry at x61 xmldsig$ make dsatest
func=xmlSecOpenSSLX509StoreVerify:file=x509vfy.c:line=360:obj=x509-store:subj=X509_verify_cert:error=4:crypto
library function failed:subj=/C=US/ST=California/O=XML Security
Library (http://www.aleksey.com/xmlsec)/OU=Test Root
Certificate/CN=Aleksey
Sanin/emailAddress=xmlsec at aleksey.com;err=19;msg=self signed
certificate in certificate chain
func=xmlSecOpenSSLX509StoreVerify:file=x509vfy.c:line=408:obj=x509-store:subj=unknown:error=71:certificate
verification failed:err=19;msg=self signed certificate in certificate
chain
OK
SignedInfo References (ok/all): 2/2
Manifests References (ok/all): 0/0
hendry at x61 xmldsig$ make clean
rm -f helloworld/author-signature.xml signing-template.xml
rm -f helloworld.wgt example*
hendry at x61 xmldsig$ make rsatest
func=xmlSecKeysMngrGetKey:file=keys.c:line=1364:obj=unknown:subj=xmlSecKeysMngrFindKey:error=1:xmlsec
library function failed:
func=xmlSecDSigCtxProcessKeyInfoNode:file=xmldsig.c:line=871:obj=unknown:subj=unknown:error=45:key
is not found:
func=xmlSecDSigCtxProcessSignatureNode:file=xmldsig.c:line=565:obj=unknown:subj=xmlSecDSigCtxProcessKeyInfoNode:error=1:xmlsec
library function failed:
func=xmlSecDSigCtxSign:file=xmldsig.c:line=303:obj=unknown:subj=xmlSecDSigCtxSigantureProcessNode:error=1:xmlsec
library function failed:
Error: signature failed
Error: failed to sign file "../signing-template.xml"
make: *** [rsatest] Error 1
hendry at x61 xmldsig$


Hi Aleksey,

I've using your rsakey.p12 to sign, though it doesn't work. However
the dsakey.p12 does work. I don't understand why there is a problem
with the rsakey. There is no special KeyInfo defined in the template.

Do you have a better idea?

Kind regards,


More information about the xmlsec mailing list