W3C home > Mailing lists > Public > w3c-ietf-xmldsig@w3.org > April to June 2005

Re: Xmlsecurity-C signed soap validation - can someone give me a hint

From: Rich Salz <rsalz@datapower.com>
Date: Fri, 13 May 2005 13:45:44 -0400
Message-ID: <4284E7C8.70204@datapower.com>
To: "Cullum, Steve" <steven.cullum@eds.com>
CC: "'w3c-ietf-xmldsig@w3.org.'" <w3c-ietf-xmldsig@w3.org>

> Using "checksig.exe" to test my document the exception "XSECException::IDNotFoundInDOMDoc"  is thrown. Because fNodeIDMap inside the fn() is 0

My guess is that xerces/xalan don't know what attributes are ID nodes, 
and that when xmlsecurity-c tries to track down the element pointed to 
within one of the dsig:References, it fails.

Looking at the specific signature you sent, it appears that you'll have 
to somehow tell xerces/xalan that wsu:Id attributes are ID attributes, 
so that the parser will recognize them and populate the IDmap.

I've never used any of the code you're using, so I can't tell you how to 
do that.  I suggest you ask the relevant Apache lists.  It may even be a 
FAQ (as it is with xmlsec :).

	/r$

-- 
Rich Salz, Chief Security Architect
DataPower Technology                           http://www.datapower.com
XS40 XML Security Gateway   http://www.datapower.com/products/xs40.html
Received on Friday, 13 May 2005 17:42:42 GMT

This archive was generated by hypermail 2.2.0 + w3c-0.30 : Friday, 13 May 2005 17:42:42 GMT