[xmlsec] Attempting to sign with DSA key

Aleksey Sanin aleksey at aleksey.com
Mon Dec 7 09:33:53 PST 2020


Not sure what do you mean. If you want to sign both signatures, then
you need to run xmlsec1 tool twice with correct --node-id, --node-xpath,
or --node-name params:

https://www.aleksey.com/xmlsec/xmlsec-man.html

Aleksey

On 12/7/20 9:27 AM, Timothy Legge wrote:
> Ah, it will not sign both nodes with an ID?
> 
> On Mon, Dec 7, 2020 at 1:26 PM Aleksey Sanin <aleksey at aleksey.com> wrote:
>>
>> I see two signatures in the document. By default xmlsec1 tool will sign
>> the first signature it finds.
>>
>> Best,
>>
>> Aleksey
>>
>> On 12/5/20 7:22 PM, Timothy Legge wrote:
>>> Hi
>>>
>>> I am attempting to sign https://pastebin.com/36Nvqdpp with a dsa key:
>>>
>>> xmlsec1 --sign --privkey-pem t/dsa.private.key --id-attr:ID "Response"
>>> --id-attr:ID "Assertion" t/xml-sig-unsigned-dsa-multiple.xml
>>>
>>> It does not show any error messages however it does not sign the
>>> output.  Any ideas what I am doing wrong?
>>>
>>> Tim
>>> _______________________________________________
>>> xmlsec mailing list
>>> xmlsec at aleksey.com
>>> http://www.aleksey.com/mailman/listinfo/xmlsec
>>>


More information about the xmlsec mailing list