You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@santuario.apache.org by Raul Benito <ra...@r-bg.com> on 2004/12/17 09:31:40 UTC

RE: Bug or Corrupted version 1.2: version 1.2 doesn't sign docum ent a s the version 1.1 !!!

> I don't where is the problem, I just know that a document that has been
> signed and verified with version 1.1 is considered has not valid in
> version
> 1.2 !
> The digest values of the of external reference are the same, but the
> digest
> value of XML (filter is "intersect" and value ="edoc:EDOC/edoc:Object"
> don't
> return the same value. Which do I have to consider wrong ? Where is the
> problem ?
First of all, Without the whole document I cannot give you the exact
reason, sorry.
I supose that you are including the ds:Signature element in the reference,
and that's something you are not suppose to do. If this is your case, the
way the digest are calculated are implementation dependant, and we have
change a lot the way the c14n and digesting method work from 1.1 to 1.2,
and that's why it fails when previously works, but anyway in this case
your signatures will fail in other implementations.
But it can also be that you have found a real bug. But until we have all
information, I think is more likely the first cause(you are including the
signature)

Regards,

Raul