On Data Power V10 virtual appliance, I have an issue with generating digital signature for (XML) message.

I exchanged the certificate with the other side, the receiving side gets signature verification error "Invalid Signature".

I tried to test verification in same policy, on another rule, and I got this error "Hash values do not match".

- The configuration of Sign Action is :

1. XML security.
2. Envelope method equal enveloped method.
3. Message type equal Raw XML Document, including SAML for Enveloped.
4. Add in Key field the private key.
5. Add in certificate field the certificate.

- The configuration of Verify Action is :

1. Add in certificate field the certificate.

Any help to solve this issue is highly appreciated.

------------------------------
ahmed eldeeb
------------------------------

Hi Ahmed,
It's been a while since I've worked with digital signatures, but are you sure that the message is not being modified in any way, including whitespace, after it was signed?  The hash value error would make me think that the document has changed, and thus the validation will fail with the signature's hash not matching the hash of the current document.  For the verify action I don't believe the certificate field is required.  If not provided, per documentation "the certificate information is taken from the WS-Sec token or the signature information."

Regards,
Steve

------------------------------
Steve Linn
Senior Consulting I/T Specialist
IBM
------------------------------