Alaska Software Inc. - Xades -Cades
Username: Password:
AuthorTopic: Xades -Cades
Hector PezoaXades -Cades
on Sun, 08 Apr 2018 17:46:08 -0400
Good afternoon.  Matej Jurac

You have an example of how to use it to sign

xmlsec1 sign --pkcs12 ../../certificado-ceres-alfredo-esteban.p12

 --output hola.xsig --pwd xxxxxxxxxxxxx ejemplo-xades-enveloped.xml

Vefify ..

 xmlsec1 verify --trusted-der aet-cert.der

 ejemplo-xades-enveloped.xsig

 Thank you

Hector
Matej JuracRe: Xades -Cades
on Thu, 12 Apr 2018 08:06:33 +0200
Hello to Chile.

You are missing parameter which part of xml to sign with xmlsec and in course
of that also some addition to xml in header on method of signing, placement of
signature, etc.

1. look on parameter --id-attr:Id NameOfWhichTagGroupToSign
2. In header somewhere there should be something like
xmlns:ds="http://www.w3.org/2000/09/xmldsig#
3. and somewhere in body after end of tag/group that is signed a block of
signature will be placed that is something like

"<ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#Chr(35)#">
<ds:SignedInfo>
<ds:CanonicalizationMethod
Algorithm="http://www.w3.org/TR/2001/REC-xml-c14n-20010315"/>
<ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig# ..... AND MORE"


Greetings


"Hector Pezoa" <hpezoa@telsur.cl> wrote in message
news:7e50cf74$18db34d6$51c36@news.alaska-software.com...
>Good afternoon.  Matej Jurac
>
>You have an example of how to use it to sign
>
>xmlsec1 sign --pkcs12 ../../certificado-ceres-alfredo-esteban.p12
>
> --output hola.xsig --pwd xxxxxxxxxxxxx ejemplo-xades-enveloped.xml
>
>Vefify ..
>
> xmlsec1 verify --trusted-der aet-cert.der
>
> ejemplo-xades-enveloped.xsig
>
> Thank you
>
>Hector
Hector PezoaRe: Xades -Cades
on Fri, 13 Apr 2018 21:05:21 -0400
Hello Matej

Excellent tips
Thankful for you

best Regard
Hector Pezoa

<Matej Jurac> escribi en el mensaje 
news:256f107c$5b8cc1c6$1c549a@news.alaska-software.com...
> Hello to Chile.
>
> You are missing parameter which part of xml to sign with xmlsec and in 
> course
> of that also some addition to xml in header on method of signing, 
> placement of
> signature, etc.
>
> 1. look on parameter --id-attr:Id NameOfWhichTagGroupToSign
> 2. In header somewhere there should be something like
> xmlns:ds="http://www.w3.org/2000/09/xmldsig#
> 3. and somewhere in body after end of tag/group that is signed a block of
> signature will be placed that is something like
>
> "<ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#Chr(35)#">
> <ds:SignedInfo>
> <ds:CanonicalizationMethod
> Algorithm="http://www.w3.org/TR/2001/REC-xml-c14n-20010315"/>
> <ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig# ..... 
> AND MORE"
>
>
> Greetings
>
>
> "Hector Pezoa" <hpezoa@telsur.cl> wrote in message
> news:7e50cf74$18db34d6$51c36@news.alaska-software.com...
>>Good afternoon.  Matej Jurac
>>
>>You have an example of how to use it to sign
>>
>>xmlsec1 sign --pkcs12 ../../certificado-ceres-alfredo-esteban.p12
>>
>> --output hola.xsig --pwd xxxxxxxxxxxxx ejemplo-xades-enveloped.xml
>>
>>Vefify ..
>>
>> xmlsec1 verify --trusted-der aet-cert.der
>>
>> ejemplo-xades-enveloped.xsig
>>
>> Thank you
>>
>>Hector