4d-plugin-xmlsec

XML signature based on xmlsec.

Library Package Managers

as of 2024-04-16, Monterey/Ventura bottle is 1.3.4, vcpkg is 1.3.3.

1.3.x breaks compatibility. set flag.

pDsigCtx->keyInfoReadCtx.flags  |= XMLSEC_KEYINFO_FLAGS_LAX_KEY_SEARCH;
pDsigCtx->keyInfoWriteCtx.flags |= XMLSEC_KEYINFO_FLAGS_LAX_KEY_SEARCH;

OpenSSL3 may not work with legacy PKCS#12

https://www.openssl.org/docs/man3.0/man1/openssl-pkcs12.html

PKCS12_parse:error=4:crypto library function failed:openssl error: error:0308010C:digital envelope routines::unsupported

miyako.github.io

OpenSSL tips

• https://www.ssl.com/how-to/export-certificates-private-key-from-pkcs12-file-with-openssl/

the plugin accepts P12 or PEM/DER, but you can convert keys and certificates from one format to another.

XAdES tools

• www.evrotrust.com

• lovele0107/signatures-conformance-checker on ETSI

XML:DSIG tools

• https://tools.chilkat.io/xmlDsigVerify.cshtml