[xmlsec] Signing with root element not having namespace

[Aleksey Sanin]

Indeed in your XML file the Signature node doesn't have the correct
namespace:

<Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">

Is this standard publically available somewhere? This doesn't look
right to me.

Aleksey

On 6/3/20 7:50 AM, Kiss Ádám wrote:
> Hello!
> 
> 
> I've been using your lib for a long time with many success!
> 
> 
> Now I got a task which I cannot handle with my skills. I've attached a 
> simplified version of the XML.
> 
> 
> The main problem is that an industry standard determines the whole 
> structure of the XML in this application including the namespaces. When 
> I tried to sign it with the standard method in the doc I got the error: 
> 'node not found'. It turned out xmlsecGetNodeNSHref sees the <Signature> 
> block with (null) namepspace, which doesn't fit xmlsec's requirement. 
> Changing xmlSecFindNode to ignore the (null) namespace helped for a 
> short time, but some function calls later a similar error was found in 
> xmlSecFindParent. After getting over again C14N failed. I am not sure if 
> that (null) is the problem during the canonization.
> 
> 
> I cannot see that deep into the code. Could you help me out?
> 
> 
> Bests,
> 
> Adam
> 
> 
> _______________________________________________
> xmlsec mailing list
> xmlsec at aleksey.com
> http://www.aleksey.com/mailman/listinfo/xmlsec
>