messaging and payload references do not get verified [1]

[michielbdejong]

https://github.com/pondersource/peppol-php/blob/54b8850/nextcloud-app/peppolnext/lib/PonderSource/WSSec/Signature.php#L122-L124

[michielbdejong]

@yasharpm any idea how to debug this? How can it be that the signature for $envelope->getBody() is OK but the ones for $envelope->getHeader()->getMessaging() and for $payload are not?

[yasharpm]

Envelope body is empty so canonicalization can hardly affect it. Whilst messaging has a big body. Payload should be straight forward though. Is it phase4 to peppolnext? Or peppolnext to peppolnext?

[michielbdejong]

phase4 to peppolnext. You can reproduce it with https://github.com/pondersource/peppol-php#running-in-docker-testnet or I can show you in a screenshare session if you want