Author | Topic: Xades -Cades | |
---|---|---|
Hector Pezoa | Xades -Cades on Sun, 08 Apr 2018 17:46:08 -0400 Good afternoon. Matej Jurac You have an example of how to use it to sign xmlsec1 sign --pkcs12 ../../certificado-ceres-alfredo-esteban.p12 --output hola.xsig --pwd xxxxxxxxxxxxx ejemplo-xades-enveloped.xml Vefify .. xmlsec1 verify --trusted-der aet-cert.der ejemplo-xades-enveloped.xsig Thank you Hector | |
Matej Jurac | Re: Xades -Cades on Thu, 12 Apr 2018 08:06:33 +0200 Hello to Chile. You are missing parameter which part of xml to sign with xmlsec and in course of that also some addition to xml in header on method of signing, placement of signature, etc. 1. look on parameter --id-attr:Id NameOfWhichTagGroupToSign 2. In header somewhere there should be something like xmlns:ds="http://www.w3.org/2000/09/xmldsig# 3. and somewhere in body after end of tag/group that is signed a block of signature will be placed that is something like "<ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#Chr(35)#"> <ds:SignedInfo> <ds:CanonicalizationMethod Algorithm="http://www.w3.org/TR/2001/REC-xml-c14n-20010315"/> <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig# ..... AND MORE" Greetings "Hector Pezoa" <hpezoa@telsur.cl> wrote in message news:7e50cf74$18db34d6$51c36@news.alaska-software.com... >Good afternoon. Matej Jurac > >You have an example of how to use it to sign > >xmlsec1 sign --pkcs12 ../../certificado-ceres-alfredo-esteban.p12 > > --output hola.xsig --pwd xxxxxxxxxxxxx ejemplo-xades-enveloped.xml > >Vefify .. > > xmlsec1 verify --trusted-der aet-cert.der > > ejemplo-xades-enveloped.xsig > > Thank you > >Hector | |
Hector Pezoa | Re: Xades -Cades on Fri, 13 Apr 2018 21:05:21 -0400 Hello Matej Excellent tips Thankful for you best Regard Hector Pezoa <Matej Jurac> escribi en el mensaje news:256f107c$5b8cc1c6$1c549a@news.alaska-software.com... > Hello to Chile. > > You are missing parameter which part of xml to sign with xmlsec and in > course > of that also some addition to xml in header on method of signing, > placement of > signature, etc. > > 1. look on parameter --id-attr:Id NameOfWhichTagGroupToSign > 2. In header somewhere there should be something like > xmlns:ds="http://www.w3.org/2000/09/xmldsig# > 3. and somewhere in body after end of tag/group that is signed a block of > signature will be placed that is something like > > "<ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#Chr(35)#"> > <ds:SignedInfo> > <ds:CanonicalizationMethod > Algorithm="http://www.w3.org/TR/2001/REC-xml-c14n-20010315"/> > <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig# ..... > AND MORE" > > > Greetings > > > "Hector Pezoa" <hpezoa@telsur.cl> wrote in message > news:7e50cf74$18db34d6$51c36@news.alaska-software.com... >>Good afternoon. Matej Jurac >> >>You have an example of how to use it to sign >> >>xmlsec1 sign --pkcs12 ../../certificado-ceres-alfredo-esteban.p12 >> >> --output hola.xsig --pwd xxxxxxxxxxxxx ejemplo-xades-enveloped.xml >> >>Vefify .. >> >> xmlsec1 verify --trusted-der aet-cert.der >> >> ejemplo-xades-enveloped.xsig >> >> Thank you >> >>Hector |