[xmlsec] Signing with X509 certificate using mscrypto provider

Jirka Kosek jirka at kosek.cz
Fri Apr 23 23:44:03 PDT 2010

Aleksey Sanin wrote:

> Thanks a lot for sending me the example certs to me! Could you
> please try one more version?
> http://www.aleksey.com/public/xmlsec-20100423.tar.gz

Many thanks, excellent support! I can confirm that it now works even
with the real certificate.

Do you have rough idea when the next "official" version of xmlsec could
be released with this patch applied?

> Unfortunately, MSCrypto is not smart enough to always normalize
> the certificates subjects in its internal store and I had to add
> one more option in the certificate search chain: try with UTF8
> encoded subject.

Thanks for explanation.

Have a nice day,


  Jirka Kosek      e-mail: jirka at kosek.cz      http://xmlguru.cz
       Professional XML consulting and training services
  DocBook customization, custom XSLT/XSL-FO document processing
 OASIS DocBook TC member, W3C Invited Expert, ISO JTC1/SC34 member

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 259 bytes
Desc: OpenPGP digital signature
URL: <http://www.aleksey.com/pipermail/xmlsec/attachments/20100424/415b4b1a/attachment.pgp>

More information about the xmlsec mailing list