Re: Verify Sign Issue

Renato Fermi <[email protected]> Mon, 24 Nov 2014 16:15:57 -0200

Newsgroups	gmane.text.xml.xmlsec
Message-ID	<CAB_QqmW4Nv=s=mAB4pjPg3j+dbo+X+_hM_FkpZ_t2ONJ90M5Qw@mail.gmail.com>

I've added 2 files (inuput) 0AU00209.xml and output.xml.




2014-11-24 16:05 GMT-02:00 Aleksey Sanin <[email protected]>:

> How does the input.xml looks like?
>
> Aleksey
>
> On 11/24/14 9:58 AM, Renato Fermi wrote:
> > Hello Aleksey,
> >
> > I'm having troubles after sucessfully signing a XML, when verifying it.
> >
> > What I've done:
> >  - Signed XML with my cert key and cacert :
> >  $ xmlsec1 --sign --id-attr:Id infNFe --privkey-pem nfcek.pem,cacert.pem
> > --output signed.xml input.xml
> >  - Verified the signature:
> > xmlsec1 --verify --id-attr:Id infNFe --privkey-pem nfcek.pem,cacert.pem
> > signed.xml
> >
> > And received the return:
> >
> func=xmlSecOpenSSLEvpSignatureVerify:file=signatures.c:line=493:obj=rsa-sha1:subj=EVP_VerifyFinal:error=18:data
> > do not match:signature do not match
> > FAIL
> > SignedInfo References (ok/all): 1/1
> > Manifests References (ok/all): 0/0
> > Error: failed to verify file "signed.xml"
> >
> > Am I doing anything wrong?
> >
> > Thanks in advance.
> >
> > Renato Fermi
> >
> >
> > _______________________________________________
> > xmlsec mailing list
> > [email protected]
> > http://www.aleksey.com/mailman/listinfo/xmlsec
> >
>

_______________________________________________
xmlsec mailing list
[email protected]
http://www.aleksey.com/mailman/listinfo/xmlsec

0AU00209.xml (text/xml, 4 KB)

<?xml version="1.0" encoding="utf-8"?>
<soap12:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap12="http://www.w3.org/2003/05/soap-envelope">
<soap12:Header>
  <nfeCabecMsg xmlns="http://www.portalfiscal.inf.br/nfe/wsdl/NfeAutorizacao">
    <cUF>13</cUF>
    <versaoDados>3.10</versaoDados>
  </nfeCabecMsg>
</soap12:Header>
<soap12:Body>
  <nfeDadosMsg xmlns="http://www.portalfiscal.inf.br/nfe/wsdl/NfeAutorizacao">
    <enviNFe xmlns="http://www.portalfiscal.inf.br/nfe" versao="3.10">
      <idLote>00001</idLote>
      <indSinc>0</indSinc>
<NFe xmlns="http://www.portalfiscal.inf.br/nfe">
  <infNFe Id="NFe13141104429478000192650100000002091100003222" versao="3.10">
    <ide>
      <cUF>13</cUF>
      <cNF>10000322</cNF>
      <natOp>VENDA</natOp>
      <indPag>0</indPag>
      <mod>65</mod>
      <serie>10</serie>
      <nNF>209</nNF>
      <dhEmi>2014-11-24T16:13:08-04:00</dhEmi>
      <tpNF>1</tpNF>
      <idDest>1</idDest>
      <cMunFG>1302603</cMunFG>
      <tpImp>4</tpImp>
      <tpEmis>9</tpEmis>
      <cDV>2</cDV>
      <tpAmb>2</tpAmb>
      <finNFe>1</finNFe>
      <indFinal>1</indFinal>
      <indPres>1</indPres>
      <procEmi>0</procEmi>
      <verProc>nfce_2.7.1AD</verProc>
    </ide>
    <emit>
      <CNPJ>04429478000192</CNPJ>
      <xNome>SB COMERCIO LTDA</xNome>
      <xFant>SB LOG</xFant>
        <enderEmit>
          <xLgr>R  Terezina</xLgr>
          <nro>351</nro>
          <xBairro>Adrianopolis</xBairro>
          <cMun>1302603</cMun>
          <xMun>Manaus</xMun>
          <UF>AM</UF>
          <CEP>69053138</CEP>
          <cPais>1058</cPais>
          <xPais>BRASIL</xPais>
        </enderEmit>
     <IE>042097940</IE>
     <CRT>3</CRT>
   </emit>
   <autXML>
     <CNPJ>04429478000192</CNPJ>
   </autXML>
   <det nItem="1">
     <prod>
       <cProd>1</cProd>
       <cEAN>7894904890330</cEAN>
       <xProd>Produto1</xProd>
       <NCM>00</NCM>
       <EXTIPI>000</EXTIPI>
       <CFOP>5102</CFOP>
       <uCom>Kg</uCom>
       <qCom>1.0000</qCom>
       <vUnCom>1.00</vUnCom>
       <vProd>1.00</vProd>
       <cEANTrib>7894904890330</cEANTrib>
       <uTrib>Kg</uTrib>
       <qTrib>1.000</qTrib>
       <vUnTrib>1.00</vUnTrib>
       <indTot>1</indTot>
     </prod>
     <imposto>
       <ICMS>
         <ICMS00>
         <orig>0</orig>
         <CST>00</CST>
         <modBC>3</modBC>
         <vBC>1.00</vBC>
         <pICMS>12.00</pICMS>
         <vICMS>0.12</vICMS>
         </ICMS00>
       </ICMS>
     </imposto>
   </det>
   <total>
     <ICMSTot>
       <vBC>100.00</vBC>
       <vICMS>0.12</vICMS>
       <vICMSDeson>0.00</vICMSDeson>
       <vBCST>0.00</vBCST>
       <vST>0.00</vST>
       <vProd>1.00</vProd>
       <vFrete>0.00</vFrete>
       <vSeg>0.00</vSeg>
       <vDesc>0.00</vDesc>
       <vII>0.00</vII>
       <vIPI>0.00</vIPI>
       <vPIS>0.00</vPIS>
       <vCOFINS>0.00</vCOFINS>
       <vOutro>0.00</vOutro>
       <vNF>1.00</vNF>
     </ICMSTot>
   </total>
   <transp>
     <modFrete>9</modFrete>
     <vol>
       <qVol>100</qVol>
       <esp>UNIDADE</esp>
       <pesoL>30.500</pesoL>
       <pesoB>36.000</pesoB>
     </vol>
   </transp>
   <pag>
     <tPag>01</tPag>
     <vPag>1.00</vPag>
   </pag>
 </infNFe>
  <Signature xmlns="http://www.w3.org/2000/09/xmldsig#">
    <SignedInfo>
      <CanonicalizationMethod Algorithm="http://www.w3.org/TR/2001/REC-xml-c14n-20010315"/>
      <SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
      <Reference URI="#NFe13141104429478000192650100000002091100003222">
        <Transforms>
          <Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/>
          <Transform Algorithm="http://www.w3.org/TR/2001/REC-xml-c14n-20010315"/>
        </Transforms>
        <DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>
        <DigestValue />
      </Reference>
    </SignedInfo>
    <SignatureValue />
    <KeyInfo><X509Data><X509Certificate/></X509Data></KeyInfo>
  </Signature>
</NFe>
</enviNFe>
</nfeDadosMsg>
</soap12:Body>
</soap12:Envelope>

signed.xml (text/xml, 6.7 KB)

<?xml version="1.0" encoding="utf-8"?>
<soap12:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap12="http://www.w3.org/2003/05/soap-envelope">
<soap12:Header>
  <nfeCabecMsg xmlns="http://www.portalfiscal.inf.br/nfe/wsdl/NfeAutorizacao">
    <cUF>13</cUF>
    <versaoDados>3.10</versaoDados>
  </nfeCabecMsg>
</soap12:Header>
<soap12:Body>
  <nfeDadosMsg xmlns="http://www.portalfiscal.inf.br/nfe/wsdl/NfeAutorizacao">
    <enviNFe xmlns="http://www.portalfiscal.inf.br/nfe" versao="3.10">
      <idLote>00001</idLote>
      <indSinc>0</indSinc>
<NFe xmlns="http://www.portalfiscal.inf.br/nfe">
  <infNFe Id="NFe13141104429478000192650100000002091100003222" versao="3.10">
    <ide>
      <cUF>13</cUF>
      <cNF>10000322</cNF>
      <natOp>VENDA</natOp>
      <indPag>0</indPag>
      <mod>65</mod>
      <serie>10</serie>
      <nNF>209</nNF>
      <dhEmi>2014-11-24T16:13:08-04:00</dhEmi>
      <tpNF>1</tpNF>
      <idDest>1</idDest>
      <cMunFG>1302603</cMunFG>
      <tpImp>4</tpImp>
      <tpEmis>9</tpEmis>
      <cDV>2</cDV>
      <tpAmb>2</tpAmb>
      <finNFe>1</finNFe>
      <indFinal>1</indFinal>
      <indPres>1</indPres>
      <procEmi>0</procEmi>
      <verProc>nfce_2.7.1AD</verProc>
    </ide>
    <emit>
      <CNPJ>04429478000192</CNPJ>
      <xNome>SB COMERCIO LTDA</xNome>
      <xFant>SB LOG</xFant>
        <enderEmit>
          <xLgr>R  Terezina</xLgr>
          <nro>351</nro>
          <xBairro>Adrianopolis</xBairro>
          <cMun>1302603</cMun>
          <xMun>Manaus</xMun>
          <UF>AM</UF>
          <CEP>69053138</CEP>
          <cPais>1058</cPais>
          <xPais>BRASIL</xPais>
        </enderEmit>
     <IE>042097940</IE>
     <CRT>3</CRT>
   </emit>
   <autXML>
     <CNPJ>04429478000192</CNPJ>
   </autXML>
   <det nItem="1">
     <prod>
       <cProd>1</cProd>
       <cEAN>7894904890330</cEAN>
       <xProd>Produto1</xProd>
       <NCM>00</NCM>
       <EXTIPI>000</EXTIPI>
       <CFOP>5102</CFOP>
       <uCom>Kg</uCom>
       <qCom>1.0000</qCom>
       <vUnCom>1.00</vUnCom>
       <vProd>1.00</vProd>
       <cEANTrib>7894904890330</cEANTrib>
       <uTrib>Kg</uTrib>
       <qTrib>1.000</qTrib>
       <vUnTrib>1.00</vUnTrib>
       <indTot>1</indTot>
     </prod>
     <imposto>
       <ICMS>
         <ICMS00>
         <orig>0</orig>
         <CST>00</CST>
         <modBC>3</modBC>
         <vBC>1.00</vBC>
         <pICMS>12.00</pICMS>
         <vICMS>0.12</vICMS>
         </ICMS00>
       </ICMS>
     </imposto>
   </det>
   <total>
     <ICMSTot>
       <vBC>100.00</vBC>
       <vICMS>0.12</vICMS>
       <vICMSDeson>0.00</vICMSDeson>
       <vBCST>0.00</vBCST>
       <vST>0.00</vST>
       <vProd>1.00</vProd>
       <vFrete>0.00</vFrete>
       <vSeg>0.00</vSeg>
       <vDesc>0.00</vDesc>
       <vII>0.00</vII>
       <vIPI>0.00</vIPI>
       <vPIS>0.00</vPIS>
       <vCOFINS>0.00</vCOFINS>
       <vOutro>0.00</vOutro>
       <vNF>1.00</vNF>
     </ICMSTot>
   </total>
   <transp>
     <modFrete>9</modFrete>
     <vol>
       <qVol>100</qVol>
       <esp>UNIDADE</esp>
       <pesoL>30.500</pesoL>
       <pesoB>36.000</pesoB>
     </vol>
   </transp>
   <pag>
     <tPag>01</tPag>
     <vPag>1.00</vPag>
   </pag>
 </infNFe>
  <Signature xmlns="http://www.w3.org/2000/09/xmldsig#">
    <SignedInfo>
      <CanonicalizationMethod Algorithm="http://www.w3.org/TR/2001/REC-xml-c14n-20010315"/>
      <SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
      <Reference URI="#NFe13141104429478000192650100000002091100003222">
        <Transforms>
          <Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/>
          <Transform Algorithm="http://www.w3.org/TR/2001/REC-xml-c14n-20010315"/>
        </Transforms>
        <DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>
        <DigestValue>xFVRV1IT6GPGJIyYYCyutSP3E80=</DigestValue>
      </Reference>
    </SignedInfo>
    <SignatureValue>JvzrQIeKCeMYUXvhmMDJ373DNcaoGnSjr1DYQYjbDmfFRlALvWNuWZWk16YvMRyr
xuMOzXFHVfiH6EQ0ZINJcBU03tCWzNH4H7h7zgB+vAedRZ1rRcemlXK9xZ2RXTaH
28yIV8suFn/cj8mCAPE0l8yxbSS+iSQ5T3Xz6N9h9vzoDpQh7qjT4W4WaCRxrbAw
EZRqyube4VDdJJh/hGUMUDjUroJys+heRnEIwAHFzfoJ043jgDDLCOYI8/esq/Rx
GFkesWg0WuygsmFIhVnVZoiwtP+tIZ/YuJi+M//JzIToJTsZh+ZCtdUCCpWlFhKr
opbWz4kbf3XH4365pGcimw==</SignatureValue>
    <KeyInfo><X509Data>
<X509Certificate>MIIGoTCCBImgAwIBAgIBATANBgkqhkiG9w0BAQ0FADCBlzELMAkGA1UEBhMCQlIx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</X509Certificate>
</X509Data></KeyInfo>
  </Signature>
</NFe>
</enviNFe>
</nfeDadosMsg>
</soap12:Body>
</soap12:Envelope>