Re: CheckSignature Output?

From: Ivan Medvedev [MS] (ivanmed@online.microsoft.com)
Date: 04/22/03 

From: "Ivan Medvedev [MS]" <ivanmed@online.microsoft.com>
Date: Tue, 22 Apr 2003 13:44:06 -0700

Unfortunately there is no easy way to figure out why exactly the SignedXml
signature check failed. It is strange however that the Security Suite
verifies the signature and .net classes do not. If you could send/post the
signature I could take a look and try to figure out why the results differ.
Thanks,
--Ivan

This posting is provided "AS IS" with no warranties, and confers no rights.

"kcronin" <nospam@devnull8.com> wrote in message
news:#rrdGuMCDHA.1604@TK2MSFTNGP10.phx.gbl...
> We have a SOAP message (from an Axis server) that is signed with a X.509
> certificate. WSE doesn't recognize the signature sections (not using
> WS-Security headers perhaps) so we are trying to check by loading up the
XML
> document and using CheckSignature.
>
> CheckSignature is returning false but no other data. Does anyone know if
> other data is available on the validation process? I feel like we're
> groping around in the dark as to the cause. BTW: I cross checked the XML
> against the IBM Security Suite verifier and it thinks the document
signature
> is valid.
>
> Any help would be most appreciated.
>
> kwc
>
>

Relevant Pages

  • Re: CheckSignature Output?
    ... Signed message file attached. ... Signature, Encyrption and key ... It is strange however that the Security Suite ... > verifies the signature and .net classes do not. ...
    (microsoft.public.dotnet.security)
  • RSA verification problem
    ... I need to write a PHP script which verifies a RSA signature. ... The Public Key created using MS CryptoAPI is in Base64 format. ... // Get Modulus Bit Length ...
    (comp.security.misc)
  • Re: Security and Encryption Faq - Revision 22.6
    ... The signature on the FAQ 22.6 verifies. ... This is basic PGP stuff guys. ... If I can get a verifiable signature from two servers, ...
    (alt.privacy)
  • Re: [opensuse] [OT] My PGP Signature
    ... saying that my PGP signature is not verifying properly for ... it verifies fine on my local side. ... and it says there is a problem with the signature. ... gpg command line and output: ...
    (SuSE)
  • Re: Choosing key to verify someone elses sig?
    ... > - Given a signed document from Bob, you shouldn't assume that Bob was ... - Given a signature that verifies with Bob's key, ... Bob's public key, so the most we can verify is that some holder of Bob's ...
    (sci.crypt)