432
questions
0
votes
0
answers
14
views
Anyone done TicketBAI XML Signing using .NET Core?
Anyone done TicketBAI XML Signing using .NET Core?
After sending request to TicketBAI, I get this error:
The signature does not meet the requirements of the TicketBAI signature policy. (The message ...
0
votes
0
answers
33
views
Extending an XAdES-XL signature to XAdES-A
I want to extend a XAdES-XL signature to XAdES-A by adding an Archive Timestamp. I have followed every step in section 5.5.2.2 of ETSI EN 319 132-1 V1.2.1 (2022-02), but I still receive an error ...
0
votes
0
answers
107
views
Issues Signing XML with RSASSA-PSS (SHA256-RSA-MGF1) Using PHP
I'm trying to sign an XML document using the RSASSA-PSS (SHA256-RSA-MGF1) algorithm in PHP. I created a certificate with the following OpenSSL command:
openssl req -newkey rsa-pss -new -nodes -x509 -...
0
votes
0
answers
81
views
Cannot install postgres on Centos 7 as signature cannot be verified/gpg keys not imported
I am currently trying to access a postgres 12 RDS on a private VPC through an EC2 instance on the same VPC, and in order to do so I am trying to install postgres on this instance (which is a Centos 7 ...
1
vote
0
answers
37
views
How to Add Reference to KeyInfo in XML Signature Using xml-crypto in TypeScript?
I'm working on a project using the xml-crypto package in TypeScript to sign XML documents. My goal is to sign the XML and include a reference to the KeyInfo element within the same signature.
Here's ...
0
votes
0
answers
11
views
SignedXml.CheckSignature different after .NET 8 upgrade
I'm currently working to upgrade some projects from .NET 6 to .NET 8. Right now, I'm having an issue with signature validation.
Currently, I take an XML document and parse out the X509Certificate ...
1
vote
0
answers
32
views
'Malformed reference element' when I use only numbers in XML id [duplicate]
I get an error,
Malformed reference element
when I use only numbers, if the Id has any letters, it works perfectly.
Example:
Id="01500843090020001000000122024073010080819774" returns ...
0
votes
1
answer
39
views
Remove Signing Certificate From Qualifying Properties Xades4j
I'm using Xades4j to Sign XMl Documents, How can I remove this node from the Qualifying Properties
<xades:SigningCertificate>
<xades:Cert>
<xades:CertDigest>
&...
1
vote
0
answers
65
views
Signature verification of xml signature in Java with Apache Santuario does not work if xml is encrypted - how to disable decryption?
I am using Apache Santuarion for decryption and validating using StAX. The thing is that when my xml file is encrypted and I want to only check the signature, it seems that it is being decrypted and ...
1
vote
0
answers
42
views
Manually verifying RSA signature in SAML response
I've been trying to verify a signature of a SAML Response after finding that .NET's SignedXml has an issue (where the exact same SAML Response can be verified using Java).
I know why this is, which ...
1
vote
0
answers
62
views
Signing an XML using python
I'm trying to sign an XML and verify the signature with the following code:
import signxml
from lxml import etree
root = etree.parse('...')
with open('...', 'r') as f:
cert = f.read()
with open('....
0
votes
0
answers
125
views
How to generate XAdES signature with pre-calculated signature-value?
I am working on a project that is related with Health Care.
There is a function which is designed as below:
Backend(me) need to generate a hash value from a EMR object(electronic medical record) then ...
0
votes
0
answers
62
views
Python XML Signing, bad signature when using detached
We're using Python Signxml (https://pypi.org/project/signxml/) to sign an XML message that is going to a Modirum MPI server - however we are getting a "bad signature" error and we can't ...
0
votes
0
answers
77
views
Howto generate ECDSA SignatureValue for XML with python and cryptography (wsse)
I have a canonicalized XML with wsse (http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd) headers, ds:Signature and ds:SignedInfo elements (xmlns:ds="http://www.w3....
0
votes
1
answer
127
views
How to correctly CryptoConfig.AddAlgorithm for ECDsa in C# .NET?
I have a XMLDocument that was signed with edcsa-sha384, out of the box .NET SignedXml does not support that algorithm, so I followed this article (https://www.scottbrady91.com/c-sharp/ecdsa-xml-dotnet)...
1
vote
1
answer
84
views
How should I solve the problem with the xmlsec1 library that I compiled myself for iOS - transformCtx.first is NULL after xmlSecTransformCtxPrepare()
I have built xmlsec1 on my own for iOS and when I test it it seems as if my build is not quite successful :)
I have the code that worked fine on Mac OS with xmlsec I got via macports.
But since there ...
0
votes
0
answers
41
views
How to verify XML signature in kotlin?
I have the value of signature (extracted from the xml data), public key (extracted from a certificate), and the SignedInfo, which i have to canonicalize first. I've bee verifying it but returning an ...
0
votes
0
answers
133
views
XML Digital Signature Failure: Works Locally, Fails on Preproduction Environment
I'm encountering an issue with XML Digital Signature when attempting to sign an XML file using the xmlsec1 command. The script works flawlessly on my local environment, but fails on the preproduction ...
0
votes
0
answers
98
views
Is there an appropriate security provider for the DOM document type when using Android API Version >=24?
I've been trying to build XML documents using the javax.xml.crypto.dsig.XMLSignatureFactory library.
When instantiating the class, I need to pass a security provider as the argument of the getInstance(...
0
votes
1
answer
142
views
How to sign a SOAP request multiple times using nodejs
I am new to SOAP and I need to use it here.
I am trying to send a SOAP request to an external endpoint.
For it to work I have to sign the SOAP request multiple times using certificates and encrypt it.
...
0
votes
0
answers
133
views
SOAP SW-SECURITY SIGNATURE BINARY_TOKEN AND TIMESTAMP
hello i am developing a service for a SOAP call with x509 authentication and i need to sign the body and timestamp, but i can't get it to work java side while in SoapUI it does.
The error (with java ...
1
vote
1
answer
221
views
How to avoid " " (CR) in XMLSignature generated from webapp running on Tomcat 8.5 with JDK8
I'm experiencing a problem with java XMLSignature: when I try to generate the signature and then sign the XML file, an unwanted HTML-like Carriage Return (" ") is placed at then end ...
0
votes
0
answers
107
views
Validate the signature of a response from a web service with .net
I want to validate a signature with c# .net, I already have the Key.cert:
Response SOAP
<?xml version="1.0" encoding="UTF-8"?>
<SOAP-ENV:Envelope
xmlns:SOAP-ENV="...
2
votes
0
answers
94
views
C# - Cannot ComputeSignature() with mscorlib.dll
I have an app that used to allow users to sign XML files via USB token with their certificate within.
Some days ago, the company of the tokens updated their driver software (SafeNet Authentication ...
0
votes
1
answer
114
views
How to pass a signed image url in JSON, Fetch API, Django
I am having an issue with displaying images from the database when generating content dynamically using javascript and Fetch API. The images display correctly when accessing them with template tags.
I ...
0
votes
0
answers
39
views
SHA256 signature Method for XML files not working on Windows Server 2003
I use the some program on Windows Server 2003. The database is loaded into this program as an XML file. Everything worked correctly until the developers changed the XML signature from sha1 to sha256.
...
1
vote
1
answer
2k
views
Why passport-saml can't find a signature - Invalid document signature
Why a signature can't be found?
I've checked the code during execution and saw that signatures was empty:
if (signatures.length !== 1) {
return false;
}
Because an ID from Response didn't match ...
0
votes
1
answer
909
views
Problem generating and verifying signature with signxml in python (namespaces and signature)
sorry for my english firstly. I'm taking my first steps with signxml in Python, and from the articles I've seen it looks quite easy to use, but I haven't been able to correctly sign the document as I ...
1
vote
1
answer
206
views
Why does Python cryptography and xmlsec1 produce different signatures
I am working on an integration with an xml based API. I am able to sign xml requests successfully using xmlsec1 like this...
xmlsec1 --sign --lax-key-search --privkey-pem test_privkey.pem,test_cert....
1
vote
0
answers
246
views
How to add digital signature to SOAP request which has an attachment in java
I need to add a digital signature to the SOAP request which has an attachment. I have tried several methods using xmlsec-3.0.2.jar and javax.xml.crypto library. But none of them worked as expected.
...
0
votes
1
answer
340
views
How to set a Java digital signature to an XML DSIG DTO
I have a requirement to send a signed XML message via REST. The XSD contains the schema https://www.w3.org/TR/2002/REC-xmldsig-core-20020212/xmldsig-core-schema.xsd. I was able to successfully ...
0
votes
2
answers
2k
views
Signature validation failed after formatting an XML with SignatureValue on it
From apache santuario xmlsignature test,
I do a test: add a signature to the XML file, then save it as a file, after that read it from that file, and verify the signature.
Please refer to the comments ...
0
votes
0
answers
312
views
How to sign soap message in Python and generate wss security header?
I would like to sign below soap message in python....and resultant message should have security headers as mentioned later.How can I achieve this?
<SOAP-ENV:Body xmlns:wsu="http://docs.oasis-...
1
vote
0
answers
283
views
XAdES external signing using client privateKey
I'm trying to digitally sign XML document using client-server signing.
The certificate is in a Workstation, I'm using a C# desktop app to read the certificates and do the signing with the private key.
...
1
vote
0
answers
246
views
XMLSigner - sign multiple references
I'm developing a digital signature system and I have a question about the XMLSigner library. I could not find my answer by looking at documentation, so I'm gonna ask here.
I have a XML file, which I ...
1
vote
1
answer
574
views
Signed payload is not valid when using signxml but xmlsec one is valid
Could you help me to find out why the two libraries (signxml and xmlsec) do not sign the same.
The signature accepted by the server is xmlsec.
Code sign signxml:
signer = XMLSigner(
method=methods....
1
vote
1
answer
469
views
What is getting signed in XML Signature (XMLDsig)?
I want to parse an XML-DSIG file and it's content. I've read on wikipedia about it's structure and a little of RFC. But I can't figure out some things, let's say this is an example XML-DSIG I got:
<...
1
vote
1
answer
830
views
Python: xmlsec.VerificationError: Signature is invalid Error, even after receiving HTTP 200 and successful response
I have the following code -
import os
import requests
import urllib3
from zeep import Client, Settings
from zeep.transports import Transport
from requests import Session
from requests_pkcs12 import ...
0
votes
1
answer
487
views
Adding Digital Signature to an XML Document - Error Bad UID
I'm trying a digital signature to xml file. This code is running asynchronous
ExecutorService executor = Executors.newFixedThreadPool(10);
When the code run a time then output exception:
javax.xml....
0
votes
1
answer
438
views
Python signxml XML signature package. Set signature id
I have an issue tryton to assign an Id to the ds:Signature tag. According to https://signxml.readthedocs.io/en/latest/
The SAML assertion schema specifies a location for the enveloped XML signature (...
1
vote
1
answer
122
views
How to refer certificate element from KeyInfo in Apache Santuario
I want to create a xml signature with Apache Santuario and KeyInfo should refer the certificate element(BinarySecurityToken) like below
<ds:KeyInfo Id="KI-FBB16D2886CB8FE58213384666945692"...
0
votes
1
answer
341
views
C# sign part of xml but can't verify in java
There is a cetificate and original.xml
when I try to sign full part of this xml(set url in Reference as ""), I can get the same result in C# and java.
but when I try to sign part of this ...
3
votes
3
answers
1k
views
Remove "ds:" in signed XML tree namespace in python's signxml
I am working with Python's lxml and signxml to generate an xml file and sign it with a pem certificate and private key.
I am required to validate the signed xml in the followign website validate XML. ...
0
votes
1
answer
469
views
How to canonicalize and digest the Body of SOAP with xmlib2
I am trying to sign manually a SOAP request. Using libxml2 in my cpp app I can canonicalize and digest the whole xml soap document using the xmlC14NDocDumpMemory function with xmlNodeSetPtr as null ...
0
votes
1
answer
757
views
How to validate Aadhaar XML signature in Python?
I'm trying to do XML signature validation.
Here is the link to Aadhaar Paperless Offline e-kyc tutorial https://uidai.gov.in/ecosystem/authentication-devices-documents/about-aadhaar-paperless-offline-...
1
vote
2
answers
945
views
How to verify aadhar XML signature with the help of public key certificate in Java?
I am working on Aadhaar Paperless Offline e-kyc, trying to validate aadhaar XML signature using public key certificate. But I'm not sure is this the right way to do. Below is the java code for the ...
1
vote
1
answer
724
views
Why is my signed XML getting rejected by authorization?
I'm trying to create a signed XML post request. The XML needs to be sent in the body of the request.
The signing needs to have the following:
The digest needs to have inclusive canonicalization ...
1
vote
0
answers
447
views
golang/goxmldig - Signed element verification failed
I am trying to sign a xml file in Golang. I have used goxmldig to create the digital signature. I am unable to sign any document except very simple elements without any child in etree. I have used the ...
0
votes
1
answer
657
views
What is difference between RawECDSA and NoneWithECDSA signature algorithm
I'm searching for a perfect answer what is the basic difference between "RawECDSA" and "NoneWithECDSA" signature algorithm. At glance I did not see any difference between them, as ...
0
votes
1
answer
2k
views
how sign correctly xml python using signxml?
Hi everybody i'm trying create and sign xml from json data.
I retrieve my object as json from this i create the xml with my xsd file.
when i sign at the output file i can't see (this is empty on my ...