[xmlsec] MD5 signature values are different for same file...

Aleksey Sanin aleksey at aleksey.com
Thu Apr 29 06:48:59 PDT 2010

No, "..." don't have any special meaning except the usual one - indicate
that something is skipped from the text.

Please use xmlsec mailing list for your questions.


On 4/29/2010 4:32 AM, Naval Patel wrote:
> Hi Aleksey...
> I am sorry for the previous email... I wonder why i didnt think that the
> digest value stored is base64 encoded and not Hex. Sorry about that.
> But I have another question to you... I am currently enabling digital
> signature on my product. I would be making a template document and then
> sign it. I have come across few samples on internet where they keep 3
> dots for eg. <DigestValue>...</DigestValue> and the sample document
> provided with XMLSEC has these 3 dots missing. Though adding the 3 dots
> throws an error to me. Is there any peculiar significance to add those 3
> dots?
> Thanks,
> Naval.
> On Thu, Apr 29, 2010 at 1:51 PM, Naval Patel <www.naval.com
> <http://www.naval.com>@gmail.com <http://gmail.com>> wrote:
>     Hi Aleksey,
>     First of all, thanks a ton for this library which is coming very
>     helpful to me.
>     I am using XMLSEC along with OpenSSL for digital signature document
>     signing as well as verification. I have come across a point where I
>     see the digest value for the same file as two separate values under
>     two conditions mentioned below:
>     Case 1: I am using the MD5 algorithm for digest value of the file
>     that is pointed by URI of <Reference>. The generated digest value is
>     lets say something. On verification this goes in very well, it does
>     not bother me atall.
>     Case 2: I use the openssl.exe on commandline and I fear that the MD5
>     value for the same file differs from what I am getting in case 1. I
>     also cross verified the results by entering the text on an online
>     tool for generating MD5 value at
>     http://www.adamek.biz/md5-generator.php
>     Also I am observing that each of the digest or signature value ends
>     with and equal to sign '='. Is this a normal behavior?
>     Please do reply to me, else i would be stuck.
>     Regards,
>     Naval Patel
>     ~ have fun ~
> --
> Naval Patel
> ~ have fun ~

More information about the xmlsec mailing list