SignedXML

[Karol]

Hello,
I'm trying to create signed XML document with SignedXml class. As a
SigningKey I'd like to use key pair obtained from user certificate
stored in current user certificate store. I'm using WSE 2 SP 2 to get
certificate, but when I'm invoking ComputeSignatur e() method of
SignedXML instance I recive the following exception:

"An unhandled exception of type 'System.NotSupp ortedException'
occurred in microsoft.web.s ervices2.dll

Additional information: DecryptValue"

I'd also like to mention, that when I try to export key's parameters I
recive the following exception:
"An unhandled exception of type 'System.NotSupp ortedException'
occurred in microsoft.web.s ervices2.dll

Additional information: Export of private parameters is not supported"

User certificate was created with Windows 2003 Enterprice Edition's
CertSrv.
I've tryed to create certificate with and without checked "Mark keys
as exportable" and the result is the same.

What can be wrong?

Here is code listing:

// Create example data to sign.
XmlDocument document = new XmlDocument();
XmlNode node = document.Create NodeXmlNodeType .Element, "",
"MyElement" , "samples");

node.InnerText = "This is some text";
document.Append Child(node);

// Get user certificate
X509Certificate Store store = new
X509Certificate Store(X509Certi ficateStore.Sto reProvider.Syst em,
X509Certificate Store.StoreLoca tion.CurrentUse r,
X509Certificate Store.MyStore);

store.Open();
X509Certificate xCert = store.Certifica tes[0];
store.Close();

// Create the SignedXml message.
SignedXml signedXml = new SignedXml();
RSA key = xCert.Key;
//RSA key = RSA.Create();
//key.ImportParam eters(xCert.Key .ExportParamete rs(true));
signedXml.Signi ngKey = key;

// Create a data object to hold the data to sign.
DataObject dataObject = new DataObject();
dataObject.Data = document.ChildN odes;
dataObject.Id = "MyObjectId ";

// Add the data object to the signature.
signedXml.AddOb ject(dataObject );

// Create a reference to be able to package everything into the
// message.
Reference reference = new Reference();
reference.Uri = "#MyObjectI d";

// Add it to the message.
signedXml.AddRe ference(referen ce);

// Add a KeyInfo.
KeyInfo keyInfo = new KeyInfo();
keyInfo.AddClau se(new RSAKeyValue(key ));
signedXml.KeyIn fo = keyInfo;

// Compute the signature.
signedXml.Compu teSignature();
Thanks for your replay - Karol.

[Raj]

Karol,
I can see either one of the two issues

1. Your private Key is not part of the certificate

2. If you still believe that, the private key is present as part of the
certificate, try using Microsoft.Web.S ervices.Securit y.X509.X509Cert ificate
object for retrieving the Certificate from the store by using
(X509Certificat eStore available in the same package).I was able to implement
it without any problem using this class and was having some issues with the
WSE2 classes

X509Certificate .Key will give u the private key

Hope it helps
Thanks
Raj

"Karol" wrote:

Hello,
I'm trying to create signed XML document with SignedXml class. As a
SigningKey I'd like to use key pair obtained from user certificate
stored in current user certificate store. I'm using WSE 2 SP 2 to get
certificate, but when I'm invoking ComputeSignatur e() method of
SignedXML instance I recive the following exception:

"An unhandled exception of type 'System.NotSupp ortedException'
occurred in microsoft.web.s ervices2.dll

Additional information: DecryptValue"

I'd also like to mention, that when I try to export key's parameters I
recive the following exception:
"An unhandled exception of type 'System.NotSupp ortedException'
occurred in microsoft.web.s ervices2.dll

Additional information: Export of private parameters is not supported"

User certificate was created with Windows 2003 Enterprice Edition's
CertSrv.
I've tryed to create certificate with and without checked "Mark keys
as exportable" and the result is the same.

What can be wrong?

Here is code listing:

// Create example data to sign.
XmlDocument document = new XmlDocument();
XmlNode node = document.Create NodeXmlNodeType .Element, "",
"MyElement" , "samples");

node.InnerText = "This is some text";
document.Append Child(node);

// Get user certificate
X509Certificate Store store = new
X509Certificate Store(X509Certi ficateStore.Sto reProvider.Syst em,
X509Certificate Store.StoreLoca tion.CurrentUse r,
X509Certificate Store.MyStore);

store.Open();
X509Certificate xCert = store.Certifica tes[0];
store.Close();

// Create the SignedXml message.
SignedXml signedXml = new SignedXml();
RSA key = xCert.Key;
//RSA key = RSA.Create();
//key.ImportParam eters(xCert.Key .ExportParamete rs(true));
signedXml.Signi ngKey = key;

// Create a data object to hold the data to sign.
DataObject dataObject = new DataObject();
dataObject.Data = document.ChildN odes;
dataObject.Id = "MyObjectId ";

// Add the data object to the signature.
signedXml.AddOb ject(dataObject );

// Create a reference to be able to package everything into the
// message.
Reference reference = new Reference();
reference.Uri = "#MyObjectI d";

// Add it to the message.
signedXml.AddRe ference(referen ce);

// Add a KeyInfo.
KeyInfo keyInfo = new KeyInfo();
keyInfo.AddClau se(new RSAKeyValue(key ));
signedXml.KeyIn fo = keyInfo;

// Compute the signature.
signedXml.Compu teSignature();
Thanks for your replay - Karol.

[William Stacey [MVP]]

If your using WSE, why are you also using SignedXML? You could instead just
sign the soap body with your token and WSE handles all that. Unless I miss
something (which is likely.)

--
William Stacey, MVP
http://mvp.support.microsoft.com

"Karol" <re***@tlen.p l> wrote in message
news:c8******** *************** **@posting.goog le.com...

Hello,
I'm trying to create signed XML document with SignedXml class. As a
SigningKey I'd like to use key pair obtained from user certificate
stored in current user certificate store. I'm using WSE 2 SP 2 to get
certificate, but when I'm invoking ComputeSignatur e() method of
SignedXML instance I recive the following exception:

"An unhandled exception of type 'System.NotSupp ortedException'
occurred in microsoft.web.s ervices2.dll

Additional information: DecryptValue"

I'd also like to mention, that when I try to export key's parameters I
recive the following exception:
"An unhandled exception of type 'System.NotSupp ortedException'
occurred in microsoft.web.s ervices2.dll

Additional information: Export of private parameters is not supported"

User certificate was created with Windows 2003 Enterprice Edition's
CertSrv.
I've tryed to create certificate with and without checked "Mark keys
as exportable" and the result is the same.

What can be wrong?

Here is code listing:

// Create example data to sign.
XmlDocument document = new XmlDocument();
XmlNode node = document.Create NodeXmlNodeType .Element, "",
"MyElement" , "samples");

node.InnerText = "This is some text";
document.Append Child(node);

// Get user certificate
X509Certificate Store store = new
X509Certificate Store(X509Certi ficateStore.Sto reProvider.Syst em,
X509Certificate Store.StoreLoca tion.CurrentUse r,
X509Certificate Store.MyStore);

store.Open();
X509Certificate xCert = store.Certifica tes[0];
store.Close();

// Create the SignedXml message.
SignedXml signedXml = new SignedXml();
RSA key = xCert.Key;
//RSA key = RSA.Create();
//key.ImportParam eters(xCert.Key .ExportParamete rs(true));
signedXml.Signi ngKey = key;

// Create a data object to hold the data to sign.
DataObject dataObject = new DataObject();
dataObject.Data = document.ChildN odes;
dataObject.Id = "MyObjectId ";

// Add the data object to the signature.
signedXml.AddOb ject(dataObject );

// Create a reference to be able to package everything into the
// message.
Reference reference = new Reference();
reference.Uri = "#MyObjectI d";

// Add it to the message.
signedXml.AddRe ference(referen ce);

// Add a KeyInfo.
KeyInfo keyInfo = new KeyInfo();
keyInfo.AddClau se(new RSAKeyValue(key ));
signedXml.KeyIn fo = keyInfo;

// Compute the signature.
signedXml.Compu teSignature();
Thanks for your replay - Karol.

[Karol]

Raj <Ra*@discussion s.microsoft.com > wrote in message news:<BA******* *************** ************@mi crosoft.com>...

Karol,
I can see either one of the two issues

1. Your private Key is not part of the certificate

2. If you still believe that, the private key is present as part of the
certificate, try using Microsoft.Web.S ervices.Securit y.X509.X509Cert ificate
object for retrieving the Certificate from the store by using
(X509Certificat eStore available in the same package).I was able to implement
it without any problem using this class and was having some issues with the
WSE2 classes

X509Certificate .Key will give u the private key

Thanks Raj,
Retriving Certificate and it's Key with WSE 1.0 solved the problem :)

--
Best regards,
Karol

[ElBruno]

Thanks Raj,
Retriving Certificate and it's Key with WSE 1.0 solved the problem
:)

--
Best regards,
Karol [/b]

Karol Hi !!

Could you post some sample code of the corrected and working solution
??

I'm dealing wit the same problem at this moment.

Thank you very much.

El Bruno

--
ElBruno
------------------------------------------------------------------------
Posted via http://www.mcse.ms
------------------------------------------------------------------------
View this thread: http://www.mcse.ms/message1415408.html