<html><head><meta http-equiv="Content-Type" content="text/html charset=us-ascii"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; ">I'm also using the XMLSec and LibXML2 libraries and I'm just finishing off the verification of SMD signatures.<div><br></div><div>Slightly OT but the only issues I've encountered are around the 'id' attribute lacking the prescribed 'xml' prefix, I've had to adjust the invocation to XMLSec to get around the reference errors. <div><br></div><div>See section 3.2 of <a href="http://www.aleksey.com/xmlsec/faq.html">http://www.aleksey.com/xmlsec/faq.html</a> and <a href="http://www.w3.org/TR/xml-id/">http://www.w3.org/TR/xml-id/</a> (dated 9 Sept 2005)<br><div><br></div><div>Two questions:</div><div><br></div><div><ol class="MailOutline"><li>Has anyone else encountered this?</li><li>Which libraries is the TMCH using to generate the SMD signatures? </li></ol><div><br></div><div>Kind regards,</div><div><br></div><div>Mike O'Connell</div><div><br></div><div>
<span class="Apple-style-span" style="border-collapse: separate; border-spacing: 0px; "><div>--</div><div><br></div><div>If you don't know where you are going, any road will get you there.</div></span>
</div>
<br><div><div>On 06 Aug 2013, at 12:34 AM, Francisco Obispo <<a href="mailto:fobispo@isc.org">fobispo@isc.org</a>> wrote:</div><br class="Apple-interchange-newline"><blockquote type="cite">I agree,<br><br>I do use XMLSEC and LibXML and have not yet encountered any problems, but I do see it as a source of possible problems, so the least data to be transferred the better.<br><br><br><br>On Aug 5, 2013, at 1:29 PM, "Gould, James" <<a href="mailto:JGould@verisign.com">JGould@verisign.com</a>> wrote:<br><br><blockquote type="cite">It's actually a factor of the XML parser and the DSIG software, where based on my experience white space is a factor for validation. Troubleshooting validation issues is not a trivial task. Removing the extra white space and carriage returns (pretty print) will reduce the size and reduce the risk of validation errors. <br><br></blockquote><br>Francisco Obispo <br>Director of Applications and Services - ISC<br>email: <a href="mailto:fobispo@isc.org">fobispo@isc.org</a><br>Phone: +1 650 423 1374 || INOC-DBA *3557* NOC<br>PGP KeyID = B38DB1BE<br><br><br><br></blockquote></div><br></div></div></div></body></html>