Questions tagged [xml-crypto]

8 questions
1
vote
0 answers

xml-crypto Exclusive canonicalization

I'm using xml-crypto node.js package to perform Exclusive Canonicalization (http://www.w3.org/2001/10/xml-exc-c14n#) on my XML. My end result is just slightly malformed: Canonicalized XML ends up being wrapped in empty angle brackets, so:…
Damjan Vučina
  • 352
  • 2
  • 12
1
vote
0 answers

How can get a xml validated with xml-crypto?

I am having trouble with xml-crypto, I am generating a signed xml, but this is always failing validation. I would like to understand what I am doing wrong. For me looks like is alright, but i don't know if I have to tell the validation method which…
TalesMGodois
  • 124
  • 13
1
vote
1 answer

Signed xml with xml-crypto node.js library produces an error

I'm use xml-crypto node.js package to sign xml. When I use signed xml document in saml 2.0 I am getting an error: org.opensaml.xmlsec.signature.support.SignatureException: Signature cryptographic validation not successful My metthod full…
0
votes
1 answer

nodejs xml-crypto package giving a digest value and signature value mismatch error

I am using version "xml-crypto": "^4.0.1" node version v16.14.0 Error displayed as invalid signature: for uri calculated digest is 2U1suBt1sOA2olbnbMK1gC/3FHk= but the xml to validate supplies digest OGXcEIgUP1W+Hv9ghexl8gdMtrI= Generated…
IsekaM
  • 23
  • 6
0
votes
0 answers

Remove Improper Input Validation vulnerability from 'xmldom'

My project has a new Improper Input Validation vulnerability found by Synk. The problematic library is 'xmldom' version 0.1.19. Looking into the dependency tree, 'xmldom' is required by 'xml-crypto', which is ultimately required by 'soap'. What is…
0
votes
0 answers

Javascript signing XML File with xml-crypto - prevent standard XML signature with xmlns:ds attribute

I'm signing an XML File where I'm using the xml-crypto package for node.js The Signature looks like following: [...] Now I want to know, is there any way, to sign the XML File, to…
0
votes
1 answer

Error with signature verification - ADFS - SAML2

i'm looking for help about signature verification for SAML2 authentication. I wanted to connect a webapp to an ADFS server. I made some test : the signature verification works for sha1RSA signature algorithm the signature verification didn't work…
killer_minet
  • 55
  • 1
  • 1
  • 9
0
votes
1 answer

Nodejs xml digital signature digest does not match

I am using xml-crypto library to digitally sign the XML. The library is generating the digitally signed XML with no problem. However, when I try to verify it, it throws an error: invalid signature: for uri #_0 calculated digest is…
Akshay Sood
  • 6,366
  • 10
  • 36
  • 59