我有一个问题，简单签名的 CheckSignature 总是失败。我正在使用 SignXml 对将存储为 MIME 附件的一些外部数据（在我的情况下是 AS4 有效负载的部分）进行签名。
这是代码（修改后的 MS 示例）：
static string flXML = @"D:\Test\Example.xml";
static string flSignedXML = @"D:\Test\SignedExample.xml";
private void button1_Click(object sender, EventArgs e)
{
try
{
// Generate a signing key.
RSACryptoServiceProvider Key = new RSACryptoServiceProvider();
CreateSomeXml(flXML);
SignXmlFile(flXML, flSignedXML, Key);
bool result = VerifyXmlFile(flSignedXML, Key);
if (result)
{
Console.WriteLine("The XML signature is valid.");
}
else
{
Console.WriteLine("The XML signature is not valid.");
}
}
catch (CryptographicException ee)
{
Console.WriteLine(ee.Message);
}
}
public static void CreateSomeXml(string FileName)
{
File.WriteAllText(FileName, "<?xml version=\"1.0\" encoding=\"utf-8\"?><MyElement xmlns=\"samples\"></MyElement>");
}
private static readonly FieldInfo RefTargetTypeField = typeof(Reference).GetField("m_refTargetType", BindingFlags.Instance | BindingFlags.NonPublic);
private static readonly FieldInfo RefTargetField = typeof(Reference).GetField("m_refTarget", BindingFlags.Instance | BindingFlags.NonPublic);
public static void SignXmlFile(string FileName, string SignedFileName, RSA Key)
{
XmlDocument doc = new XmlDocument();
doc.Load(new XmlTextReader(FileName));
SignedXml signedXml = new SignedXml(doc);
signedXml.SigningKey = Key;
byte[] Content = System.Text.Encoding.UTF8.GetBytes("1234567890asdfghjkl");
Stream stream = new MemoryStream(Content);
var attachmentReference = new Reference(uri: "cid:xml-sample") { DigestMethod = "http://www.w3.org/2001/04/xmlenc#sha256" };
const int streamReferenceTargetType = 0;
RefTargetTypeField.SetValue(attachmentReference, streamReferenceTargetType);
RefTargetField.SetValue(attachmentReference, stream);
signedXml.AddReference(attachmentReference);
// Compute the signature.
signedXml.ComputeSignature();
XmlElement xmlDigitalSignature = signedXml.GetXml();
doc.DocumentElement.AppendChild(doc.ImportNode(xmlDigitalSignature, true));
if (doc.FirstChild is XmlDeclaration)
{
doc.RemoveChild(doc.FirstChild);
}
XmlTextWriter xmltw = new XmlTextWriter(SignedFileName, new UTF8Encoding(false));
doc.WriteTo(xmltw);
xmltw.Close();
}
public static Boolean VerifyXmlFile(String Name, RSA Key)
{
XmlDocument xmlDocument = new XmlDocument();
xmlDocument.Load(Name);
SignedXml signedXml = new SignedXml(xmlDocument);
XmlNodeList nodeList = xmlDocument.GetElementsByTagName("Signature");
signedXml.LoadXml((XmlElement)nodeList[0]);
{
byte[] Content = System.Text.Encoding.UTF8.GetBytes("1234567890asdfghjkl");
Stream stream = new MemoryStream(Content);
var attachmentReference = new Reference(uri: "cid:xml-sample") { DigestMethod = "http://www.w3.org/2001/04/xmlenc#sha256" };
const int streamReferenceTargetType = 0;
RefTargetTypeField.SetValue(attachmentReference, streamReferenceTargetType);
RefTargetField.SetValue(attachmentReference, stream);
signedXml.AddReference(attachmentReference);
}
// Check the signature and return the result.
signedXml.SigningKey = Key;
return signedXml.CheckSignature();
}
有谁知道我做错了什么？在旁注中，我知道我可以为其他参考指定转换。问题是，我如何获得 SignedXml 处理的引用结果，以便我也可以存储它？例如，如果我为参考转换指定压缩，我现在如何获得该压缩的结果？