signature=622be37089ce9941219effaa6174b9e9,c++ - Verify XML Signature with libxmlsec1 - Stack Overfl...

南省Begind

于 2021-05-30 02:38:54 发布

阅读量269

点赞数

文章标签： signature=622be37089ce9941219effaa6174b9e9

I can verify a XML Signature with Apache Santuario XML security for Java. The code is like:

ByteArrayInputStream bais = new ByteArrayInputStream(readData("signature.xml"));

DocumentBuilderFactory f = DocumentBuilderFactory.newInstance();

f.setNamespaceAware(true);

Document doc = f.newDocumentBuilder().parse(bais);

bais.close();

NodeList nodes = doc.getElementsByTagNameNS(Constants.SignatureSpecNS, Constants._TAG_SIGNATURE);

Element sigElement = (Element) nodes.item(0);

XMLSignature signature = new XMLSignature(sigElement, "");

signature.addResourceResolver(new ResolverWidget(this));

X509Certificate cert = signature.getKeyInfo().getX509Certificate();

signature.checkSignatureValue(cert);

Now, I want to implement it in C++. I've tried Apache Santuario XML security for C++, but it failed because it said that it doesn't support c14n11 (I hope I'm wrong). So, I changed to use libxmlsec1, but the problem is I don't know how to implement with libxmlsec1. It doesn't have to verify all the files of Reference element. I just want to verify SignedInfo element. I've only done the following code.

xmlDocPtr doc = xmlParseFile("signature.xml");

xmlNodePtr node = xmlSecFindNode(xmlDocGetRootElement(doc), xmlSecNodeX509Certificate, xmlSecDSigNs);

xmlNodePtr data = node->children;

mngr = xmlSecKeysMngrCreate();

xmlSecCryptoAppDefaultKeysMngrInit(mngr);

xmlSecCryptoAppKeysMngrCertLoadMemory(mngr, data->content, size, xmlSecKeyDataFormatPem, xmlSecKeyDataTypeTrusted);

It fails with the following errors:

func=xmlSecOpenSSLAppCertLoadBIO:file=app.c:line=1254:obj=unknown:subj=PEM_read_bio_X509_AUX:error=4:crypto library function failed:

func=xmlSecOpenSSLAppKeysMngrCertLoadBIO:file=app.c:line=1139:obj=unknown:subj=xmlSecOpenSSLAppCertLoadBIO:error=1:xmlsec library function failed:

func=xmlSecOpenSSLAppKeysMngrCertLoadMemory:file=app.c:line=1091:obj=unknown:subj=xmlSecOpenSSLAppKeysMngrCertLoadBIO:error=1:xmlsec library function failed:

Please does anyone know how to make xmlsec1 read all the x509Certificate elements from the signature.xml, and verify signature.xml?

The following is signature.xml.

ddnUD1cNeIG1a3uj96Y/VS+WBC5qT24PL/j/91Tfl/0=

I+Sv8L0e9Px1aMAdlo5a2uQjXecYjv7wIyJxP50h8Fk=

HVThAjM5iEcTVJB6dgC5zehhQjYVu1JV7oN+OyezI2Y=

rf75zmIiY5uFijILpSBnhNEZA+5twK1OqDhjA/yri/A=

Kbbugd59Tj/M1MhsWySrQAeTwz8zhf4RqQsO+xRInqsdDQdhv5vqaNqJOAWStYcr

g26RD426JcJc3P7qy2C8VHuZMQ30krrwCbaQcNIptjBD83xAbOzUu2ZiHmadNJFQ

MY1Uc5RAdJmxBZ0AaNKQaZ6n7NBkm/AM/G9OU9rNJ5AdjyeQIy81P3T6eTSVC4U3

6y++A3/FpWwHJyX6mFuNrgAXZENjBWUuPrpIFCgSvXKr0X8U4q7TMvGCntd+TMsl

YtSnRYdFokzCSuoY5Xi7qDnC9u91BPBiMDrwVvJk8cWKQ5QRRyO035QPwwv2+BaN

jd67IdmbzRr6jpPx4A/H9w==

MIIDlDCCAnygAwIBAgIBAjANBgkqhkiG9w0BAQsFADBPMQswCQYDVQQGEwJVSzEQ

MA4GA1UECBMHRW5nbGFuZDEMMAoGA1UEChMDVzNDMRAwDgYDVQQLEwdXZWJhcHBz

MQ4wDAYDVQQDEwUyLnJzYTAeFw0xMTA1MjUxNDI1MjRaFw0zMTA1MjAxNDI1MjRa

ME8xCzAJBgNVBAYTAlVLMRAwDgYDVQQIEwdFbmdsYW5kMQwwCgYDVQQKEwNXM0Mx

EDAOBgNVBAsTB1dlYmFwcHMxDjAMBgNVBAMTBTMucnNhMIIBIjANBgkqhkiG9w0B

AQEFAAOCAQ8AMIIBCgKCAQEAtgkBd9V2J1o+Ezsmvko8EiiTPtGwm3ZYkR8oxFje

4h1z6clJqCz20bdbjTb5flbq/sPt2cn0b9YY9cYuALJNq8ydtHtYfraltKodqtNj

2jZIAYrbUk2EXsNjISUyJamDHMKxz2ssUscQzPYulFLx+ZfSpaZdOIKV4ChOmXZw

WjW4TaEjh8DkAvS/qkTOW+2CKk8b//Q+VmxhCyeLgqqj3AX9hO3+ZB62zUEZekes

sQNT2ZudgM0M2pOAcAieBjEi7rXj59w89MRMF3rekp9UeXMmlTBPQbDD+yBi/bQh

DOYLr+nORI2AlBosKsqCb9+Qttpmk4XpGJWtqzDfxCRHAwIDAQABo3sweTAJBgNV

HRMEAjAAMCwGCWCGSAGG+EIBDQQfFh1PcGVuU1NMIEdlbmVyYXRlZCBDZXJ0aWZp

Y2F0ZTAdBgNVHQ4EFgQUCP3WcRe6mbgSPueiisha3Lzd4WIwHwYDVR0jBBgwFoAU

frSCRp58oUe+iPCV3IgbnoTtf40wDQYJKoZIhvcNAQELBQADggEBABC5cDDE4SgP

z1w1OUrsBJ+d3ceU/2AKnu5iYfmkg8plDAYW5w8gZz+ha+KlO4vJtwljBFqBEzkf

vaRGIqSv3pVKEGWO1Tl9X5CnV6Bj65x21YbkbFJadEakoNWFpAkuGQYvVaf0d6TC

GJA5rJXePW5Th6uN4vmHyZLqwgZG9VnjSRWRlYytEXYQzxeXwts3e22BNr9Dv4kt

RCGe8FNU2b2WcZqqPmA33mS0Fn97BdqhAC7KKZrgLaKSPcNFjSJJZjMrIf5v/jWm

4fdl+GxvprkHsuP9HSHuDCCPtc8YzGFM+pptS8pHYTiJP1kZjFGdguazT8jYBFw+

Vkz5ajGl/zk=