Question

我正在尝试在签名的SOAP消息上验证签名。（为了解决这个问题，我无法控制我收到的消息）消息正文由Java设备签名并发送。

SignedXml.CheckSignature方法失败，但我确定我收到的邮件是正确的。

相关位：

        Dim sdoc As New SignedXml(doc)
        Dim nodeList As XmlNodeList = doc.GetElementsByTagName("Signature", "http://www.w3.org/2000/09/xmldsig#")
        sdoc.LoadXml(CType(nodeList.Item(0), XmlElement))
        Dim result As Boolean = sdoc.CheckSignature(cert, False)
        'Also tried sdoc.CheckSignature()

签名：

   <E:Envelope xmlns:E="http://schemas.xmlsoap.org/soap/envelope/">
      <SOAP:Header xmlns:SOAP="http://schemas.xmlsoap.org/soap/envelope/">
         <SOAP-SEC:Signature SOAP:mustUnderstand="1" xmlns:SOAP-SEC="http://schemas.xmlsoap.org/soap/security/2000-12">
            <Signature xmlns="http://www.w3.org/2000/09/xmldsig#">
              <SignedInfo>
                <CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" />
                <SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1" />
                <Reference URI="#Body">
                  <Transforms>
                    <Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" />
                  </Transforms>
                  <DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1" />
                   <DigestValue>xxxc</DigestValue>
                </Reference>
             </SignedInfo>
      <SignatureValue>xxx</SignatureValue>
            <KeyInfo>
              <X509Data>
                <X509Certificate />
                <X509IssuerSerial>
                  <X509IssuerName>OU=www.verisign.com/CPS Incorp.by Ref. LIABILITY LTD.(c)97 VeriSign, OU=VeriSign International Server CA - Class 3, OU="VeriSign, Inc.", O=VeriSign Trust Network</X509IssuerName>
                  <X509SerialNumber>xxx</X509SerialNumber>
                </X509IssuerSerial>
             </X509Data>
            </KeyInfo>
          </Signature>
      </SOAP-SEC:Signature>
    </SOAP:Header>
    <E:Body id="Body">

WCF - SignedXml.CheckSignature在签名的soap body上失败

0 个答案: