xml.Signature.verify

Syntax

verify(
   doc xml.DomDocument )
  RETURNING flag INTEGER

1. doc is the XML document.

Usage

Returns TRUE if valid, FALSE otherwise.

If the signature type is:

• Enveloping: then doc must be NULL because all document fragment references are inside the Signature itself,
• Enveloped: then doc must be the XML document where the signature was enveloped,
• Detached: then doc can be null if all references are absolute, otherwise it can be the XML document the fragment references are referencing.

See XML Signature concepts for more details.

By default, the validation process uses the CryptoKey set with setKey() to verify the signature. However, if the signature contains a X509 certificate or a X509 retrieval method, it uses the list of trusted certificate, or if the signature contains a RSA or DSA retrieval method, it uses the RSA or DSA public key automatically loaded.

In case of error, the method throws an exception and sets the STATUS variable with the appropriate error number.