Metadata signature accepted by xmlsectool, not by SP

[Cantor, Scott]

> Even if my script is wrong, shouldn't I be able to validate the output from
> xmlsectool with the SP?

Normally.

> Is there something better I should be using for managing this?

I'm just answering your question about the SP. You can file a bug, and wait for me to investigate, likely a few weeks. Or not. There's really nothing else I can do about it not verifying. It may be totally obvious or totally non-obvious in hindsight, I don't know.

The only debugging tool I have is the signature logging category, which you can turn up to get a log of the octet streams it's digesting and comparing, but you have to know the specs in depth to do much with it. It's much easier to check on a smaller sample than a large file.

-- Scott