[xmlsec] MultiPartSign and SinglePartSign

Si St sigbj-st at operamail.com
Wed Oct 26 11:32:47 PDT 2011


Is this an actual subject with the following in mind:
1) "Multipart sign":
a. C_SignInit()
b. C_SignUpdate()
c. C_SignFinal()
2) "Single part sign":
a. C_SignInit()
b. C_Sign()

Some card drivers/modules only support Multipart or Singlepart. Are
these 2 signing types part of the xmlsec code? With Signserver from
primekey.se and pkcs11-tool they both support Multipart, while a certain
type of smartcard(its driver) only supports Singlepart.
Will it matter with XMLSEC and cryptoengine? It could be a reason why
xmlsec does not find the key (error:45), but there are no return with
e.g. "C_SignUpdate() : CKR_FUNCTION_NOT_SUPPORTED" which I assume always
comes from the card module, so then there are other reasons why error 45
appears.
-- 
  Si St
  sigbj-st at operamail.com

-- 
http://www.fastmail.fm - A fast, anti-spam email service.



More information about the xmlsec mailing list