Children order and number DO NOT MATCH specification

• SignedSignatureProperties-{CheckSchemaForChildren}
• SignedSignatureProperties/SignaturePolicyIdentifier/SignaturePolicyId/SigPolicyId/DocumentationReferences-{CheckSchemaForChildren}

brew installation 1.3.4 throws "key not found" error

https://stackoverflow.com/questions/76805174/getting-key-not-found-with-xmlsec1-on-macos

func=xmlSecDSigCtxSign:file=xmldsig.c:line=301:obj=unknown:subj=xmlSecDSigCtxProcessSignatureNode:error=1:xmlsec library function failed:
func=xmlSecKeysMngrGetKey:file=keys.c:line=1346:obj=unknown:subj=unknown:error=45:key is not found:details=NULL
func=xmlSecDSigCtxPr

current version is 1.2.32

Children order and number DO NOT MATCH specification

• SignedSignatureProperties/SignaturePolicyIdentifier/SignaturePolicyId/SigPolicyId/DocumentationReferences-{CheckSchemaForChildren}

Children order and number DO NOT MATCH specification

• SignedSignatureProperties/SignaturePolicyIdentifier/SignaturePolicyId/SigPolicyId/DocumentationReferences-{CheckSchemaForChildren}

• KeyInfo-{CheckIfSigningCertIsReferenced}

• SignedSignatureProperties-{CheckSchemaForChildren}

Hello,
I have checked "XMLDsig" plugin.
I need to sign the Bolivian invoice with these steps, do I understand that the canonization process is inside "xmldsig"?

1. Apply the canonicalization algorithm to the XML document, that is, carry out a processing that allows obtaining its canonical form or normalizing the original document.

2. Apply the sha256 algorithm to the result in order to obtain the HASH.

3. Obtain a string by applying the Base64 algorithm to the previous HASH.

4. Add the signature tags to the XML.

5. Add to the Digest Value tag the value obtained in step 4.

6. Take the signature section and obtain a HASH of it applying the SHA256 algorithm.

7.Encrypt the HASH obtained using the RSA SHA256 algorithm with the private key

8. Apply the Base64 algorithm to the resulting string to obtain a string

9. Add the above string to the Signature Value tag.

10. Finally place the public key in the X509 Certificate label

11. Return the signed XML

Thanks for your time

it is always http://www.w3.org/2000/09/xmldsig#enveloped-signature

Hello Miyako.

Mac OS 12.6.1
4D 19R6.282985

At time of execute xmlsec sign

We get the error failed:xmlSecDSigCtxSign

In all your examples

In v18 it works fine.

Children order and number DO NOT MATCH specification

• SignedSignatureProperties/SignaturePolicyIdentifier/SignaturePolicyId/SigPolicyId/DocumentationReferences-{CheckSchemaForChildren}

• SignedDataObjectProperties-{CheckIfDOFsPointToAllReferencesToSignedObjects}

Errors detected when checking that any xades:DataObjectFormat property incorporated to the signature points to one ds:Reference referencing a signed data object AND that each ds:Reference element referencing a signed data object is pointed by one xades:DataObjectFormat property. Not each ds:Reference referencing a signed data object, is pointed by one xades:DataObjectFormat element. ds:Reference elements not pointed: ds:Signature/ds:SignedInfo/ds:Reference[2] (first in sequence is number 1). First in sequence is number 1. Please check that the ds:Reference pointing to the xadesv132:SignedProperties element does have the Type attribute set to "http://uri.etsi.org/01903#SignedProperties"