Compare signatures

[ertankucukoglu]

Hello,

I am completely new to this XMLDSig and pretty much confused.

I am using v1.3.2 (openssl) release of xmlsec

I have two signed XML files provided. I am not signing them.
Both individual files signatures verify OK.
But I know second one with double signature does not match the first one.
What I am told is (one to one translation)
"signature value of the first file does not match the second file approved certificate."

I wonder if it is possible to use xmlsec for figuring out if two such files check.

PS D:\xmlsec> .\xmlsec.exe --version
xmlsec 1.3.2 (openssl)
PS D:\xmlsec> .\xmlsec.exe --verify .\GIB-9370646431-202304-KB-000000.xml
Verification status: OK
PS D:\xmlsec> .\xmlsec.exe --verify .\9370646431-202304-Y-000000.xml
Verification status: OK
PS D:\xmlsec>

Thanks & Regards,
Ertan

[lsh123]

I am not sure I understand what is the problem and w/o files it's impossible to even try to answer.

[ertankucukoglu]

Hi, Thanks for the reply.
How can I share files in private?

[lsh123]

Sorry this is an open source project, I don't do private consulting. You can try to reproduce the problem with non-proprietary files you can share.

[ertankucukoglu]

I'll see if I can find such files. Thanks.