437 questions
1
vote
2
answers
118
views
Why do I get verification failure in my xmlsec example?
I have to sign an xml file using xmlsec in python.
In the following there is a complete example, including all needed stuff:
The raw xml consists of elements Header and Body and (as a requirement) the ...
- 1,512
-1
votes
1
answer
188
views
VeriFactu AEAT Sandbox always returns Error 1207 "Error interno en el servidor" even with official signed XML example
I'm trying to integrate with the Spanish AEAT VeriFactu system for electronic invoice registration. I'm consistently getting an error
Error 1207 "Error interno en el servidor
from the sandbox ...
- 127
0
votes
1
answer
159
views
Calculating DigestValue of SignedProperties in XAdES
I am trying to create an application to sign xml documents in xades format by using PKCS11Interop library. I have a xades sign application provided by a government institute to test my results. I am ...
0
votes
1
answer
96
views
SignXML Verifier Fails When XML Signature Uses Default Namespace Without ds: Prefix
I'm working on generating a signed XML document where the element (and related elements like , , etc.) must not include the ds: prefix. This is because the legacy application I’m integrating with ...
- 131
0
votes
1
answer
36
views
Forging SAML Metadata By Replacing BOTH the ds:Signature and public key used to generate it?
I have been given the impression that it is possible and considered reasonable to sign SAML metadata and include the signature and public key necessary to validate it within the metadata file.
Could ...
- 455
0
votes
0
answers
43
views
In .NET 9, when signing a XML document, how to sign only a portion of the document without using XPath or a Reference ID?
I'm trying to digitally sign a specific portion of a XML document in C# (.NET 9). The signing process itself seems fine. I'm using XmlDsigXPathTransform which uses the "http://www.w3.org/TR/1999/...
- 1,263
1
vote
0
answers
86
views
In a digitally signed (by .NET 9) XML document, how can I alter the prefix in the generated <Signature> tag without invalidating the signature?
I'm using C# with .NET 9, and I need to digitally sign a XML document using a X.509 certificate. The signing process itself works perfectly. However, I've been given a very specific requirement: the &...
- 1,263
0
votes
1
answer
111
views
XML signature reference digestion value is different than it is supposed to be (probably not doing exc c14n correctly)
I have to create a request for getting a SAML ticket and I am stuck with the digestvalues.
As far as I understand I have to use exclusive c14n, then sha256 then base64, but I'm receiving different ...
3
votes
1
answer
144
views
How to correctly generate values to sign a SOAP envelope?
I'm working on signing a SOAP envelope using the xmlsec1 tool and the XML Digital Signature (XMLDSIG) standard. Here's the unsigned SOAP envelope I'm working with.
<soapenv:Envelope xmlns:soapenv=&...
- 477
0
votes
1
answer
61
views
Named certificate '' not found API response XML signing and encryption [closed]
I am working on an integration which requires signing and encryption of the xml payload before passing it into the request content.
I am using java to sign and encrypt the xml document and this is ...
- 36
0
votes
0
answers
107
views
How to use WS-Security with Spring Boot and client stubs
I'm trying to understand how to use WS-Security with Spring Boot and client stubs generated from WSDL. My goal is to include WS-Security header with XML Signature to SOAP request with no code changes ...
- 23.8k
0
votes
0
answers
44
views
Anyone done TicketBAI XML Signing using .NET Core?
Anyone done TicketBAI XML Signing using .NET Core?
After sending request to TicketBAI, I get this error:
The signature does not meet the requirements of the TicketBAI signature policy. (The message ...
0
votes
1
answer
174
views
Extending an XAdES-XL signature to XAdES-A
I want to extend a XAdES-XL signature to XAdES-A by adding an Archive Timestamp. I have followed every step in section 5.5.2.2 of ETSI EN 319 132-1 V1.2.1 (2022-02), but I still receive an error ...
- 25
1
vote
0
answers
395
views
Issues Signing XML with RSASSA-PSS (SHA256-RSA-MGF1) Using PHP
I'm trying to sign an XML document using the RSASSA-PSS (SHA256-RSA-MGF1) algorithm in PHP. I created a certificate with the following OpenSSL command:
openssl req -newkey rsa-pss -new -nodes -x509 -...
- 13
0
votes
0
answers
610
views
Cannot install postgres on Centos 7 as signature cannot be verified/gpg keys not imported
I am currently trying to access a postgres 12 RDS on a private VPC through an EC2 instance on the same VPC, and in order to do so I am trying to install postgres on this instance (which is a Centos 7 ...
- 1