From X509IssuerSerial to XML digital signature leads to "invalid" XML document

EDN Admin

Well-known member
Joined
Aug 7, 2010
Messages
12,794
Location
In the Machine
Unfortunately the XmlDocument.Validate is only minimally conforming and thus unable to validate real integer numbers. See my community content
http://msdn.microsoft.com/en-us/library/ms162371.aspx http://msdn.microsoft.com/en-us/library/ms162371.aspx
A major problem arises when I want to sign a XML document using System.Security.Crypthography.Xml.SignedXml and a KeyInfoX509Data with added X509IssuerSerial conforming to
http://www.w3.org/TR/xmldsig-core/#sec-X509Data http://www.w3.org/TR/xmldsig-core/#sec-X509Data . That means, in my case, the serial number is a integer larger than 2^96.<br/>
If I attach the signature to the document and try to validate it with a XmlSchemaSet containing
http://www.w3.org/TR/xmldsig-core/xmldsig-core-schema.xsd http://www.w3.org/TR/xmldsig-core/xmldsig-core-schema.xsd it will fail!
I am unable to shorten the serial number nor do I have any control about its form as it comes from a third party provider.
Question: What is a possible workaround for this very poorly documented .NET XML validation limitation? When can we, the community, expect a fully W3C conformal XMLDocument.Validate function?

View the full article
 
Back
Top