436 questions
-1
votes
0
answers
117
views
VeriFactu AEAT Sandbox always returns Error 1207 "Error interno en el servidor" even with official signed XML example
I'm trying to integrate with the Spanish AEAT VeriFactu system for electronic invoice registration. I'm consistently getting an error
Error 1207 "Error interno en el servidor
from the sandbox ...
0
votes
1
answer
142
views
Calculating DigestValue of SignedProperties in XAdES
I am trying to create an application to sign xml documents in xades format by using PKCS11Interop library. I have a xades sign application provided by a government institute to test my results. I am ...
0
votes
1
answer
91
views
SignXML Verifier Fails When XML Signature Uses Default Namespace Without ds: Prefix
I'm working on generating a signed XML document where the element (and related elements like , , etc.) must not include the ds: prefix. This is because the legacy application I’m integrating with ...
0
votes
1
answer
36
views
Forging SAML Metadata By Replacing BOTH the ds:Signature and public key used to generate it?
I have been given the impression that it is possible and considered reasonable to sign SAML metadata and include the signature and public key necessary to validate it within the metadata file.
Could ...
0
votes
0
answers
41
views
In .NET 9, when signing a XML document, how to sign only a portion of the document without using XPath or a Reference ID?
I'm trying to digitally sign a specific portion of a XML document in C# (.NET 9). The signing process itself seems fine. I'm using XmlDsigXPathTransform which uses the "http://www.w3.org/TR/1999/...
1
vote
0
answers
86
views
In a digitally signed (by .NET 9) XML document, how can I alter the prefix in the generated <Signature> tag without invalidating the signature?
I'm using C# with .NET 9, and I need to digitally sign a XML document using a X.509 certificate. The signing process itself works perfectly. However, I've been given a very specific requirement: the &...
0
votes
1
answer
108
views
XML signature reference digestion value is different than it is supposed to be (probably not doing exc c14n correctly)
I have to create a request for getting a SAML ticket and I am stuck with the digestvalues.
As far as I understand I have to use exclusive c14n, then sha256 then base64, but I'm receiving different ...
3
votes
1
answer
137
views
How to correctly generate values to sign a SOAP envelope?
I'm working on signing a SOAP envelope using the xmlsec1 tool and the XML Digital Signature (XMLDSIG) standard. Here's the unsigned SOAP envelope I'm working with.
<soapenv:Envelope xmlns:soapenv=&...
0
votes
1
answer
61
views
Named certificate '' not found API response XML signing and encryption [closed]
I am working on an integration which requires signing and encryption of the xml payload before passing it into the request content.
I am using java to sign and encrypt the xml document and this is ...
0
votes
0
answers
100
views
How to use WS-Security with Spring Boot and client stubs
I'm trying to understand how to use WS-Security with Spring Boot and client stubs generated from WSDL. My goal is to include WS-Security header with XML Signature to SOAP request with no code changes ...
0
votes
0
answers
42
views
Anyone done TicketBAI XML Signing using .NET Core?
Anyone done TicketBAI XML Signing using .NET Core?
After sending request to TicketBAI, I get this error:
The signature does not meet the requirements of the TicketBAI signature policy. (The message ...
0
votes
1
answer
161
views
Extending an XAdES-XL signature to XAdES-A
I want to extend a XAdES-XL signature to XAdES-A by adding an Archive Timestamp. I have followed every step in section 5.5.2.2 of ETSI EN 319 132-1 V1.2.1 (2022-02), but I still receive an error ...
1
vote
0
answers
385
views
Issues Signing XML with RSASSA-PSS (SHA256-RSA-MGF1) Using PHP
I'm trying to sign an XML document using the RSASSA-PSS (SHA256-RSA-MGF1) algorithm in PHP. I created a certificate with the following OpenSSL command:
openssl req -newkey rsa-pss -new -nodes -x509 -...
0
votes
0
answers
597
views
Cannot install postgres on Centos 7 as signature cannot be verified/gpg keys not imported
I am currently trying to access a postgres 12 RDS on a private VPC through an EC2 instance on the same VPC, and in order to do so I am trying to install postgres on this instance (which is a Centos 7 ...
5
votes
1
answer
592
views
How to Add Reference to KeyInfo in XML Signature Using xml-crypto in TypeScript?
I'm working on a project using the xml-crypto package in TypeScript to sign XML documents. My goal is to sign the XML and include a reference to the KeyInfo element within the same signature.
Here's ...