# Invalid signed properties hashing, SignedProperties with id='xadesSignedProperties'

**URL:** <https://zatca1.discourse.group/t/invalid-signed-properties-hashing-signedproperties-with-id-xadessignedproperties/2525>\
**Category:** Signing process\
**Created:** [August 21, 2024, 11:09am UTC](https://zatca1.discourse.group/t/invalid-signed-properties-hashing-signedproperties-with-id-xadessignedproperties/2525 "2024-08-21T11:09:24Z")\
**Posts on this page:** 14\
**Page:** 1

<div class="post-metadata">

**Author:** ![Sulaman](https://avatars.discourse-cdn.com/v4/letter/s/8e8cbc/32.png) [@Sulaman](https://zatca1.discourse.group/u/Sulaman)\
**Post date:** [August 21, 2024, 11:09am UTC](https://zatca1.discourse.group/t/invalid-signed-properties-hashing-signedproperties-with-id-xadessignedproperties/2525/1 "2024-08-21T11:09:24Z")

</div>

Hi there, I’m getting an error

```auto
"errorMessages": [
            {
                "type": "ERROR",
                "code": "signed-properties-hashing",
                "category": "CERTIFICATE_ERRORS",
                "message": "Invalid signed properties hashing, SignedProperties with id='xadesSignedProperties'",
                "status": "ERROR"
            }
        ]

```

My code work for Sandbox account, In sandbox account I used to call Compliance API and it returning PASSED result

```auto
/compliance

```

but when i call Production API for invoice verification

```auto
https://gw-fatoora.zatca.gov.sa/e-invoicing/core/compliance/invoices

```

It returning **Invalid signed properties hashing, SignedProperties with id='xadesSignedProperties** error.

My xml invoice is in

```auto
<ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#" Id="signature">
                            <ds:SignedInfo>
                                <ds:CanonicalizationMethod Algorithm="http://www.w3.org/2006/12/xml-c14n11"/>
                                <ds:SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha256"/>
                                <ds:Reference Id="invoiceSignedData" URI="">
                                    <ds:Transforms>
                                        <ds:Transform Algorithm="http://www.w3.org/TR/1999/REC-xpath-19991116">
                                            <ds:XPath>not(//ancestor-or-self::ext:UBLExtensions)</ds:XPath>
                                        </ds:Transform>
                                        <ds:Transform Algorithm="http://www.w3.org/TR/1999/REC-xpath-19991116">
                                            <ds:XPath>not(//ancestor-or-self::cac:Signature)</ds:XPath>
                                        </ds:Transform>
                                        <ds:Transform Algorithm="http://www.w3.org/TR/1999/REC-xpath-19991116">
                                            <ds:XPath>not(//ancestor-or-self::cac:AdditionalDocumentReference[cbc:ID='QR'])</ds:XPath>
                                        </ds:Transform>
                                        <ds:Transform Algorithm="http://www.w3.org/2006/12/xml-c14n11"/>
                                    </ds:Transforms>
                                    <ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
                                    <ds:DigestValue>hIKaXvk7fIhwsA3O/tBm8xHSA7Qf/pEKrA7qNNQZAbk=</ds:DigestValue>
                                </ds:Reference>
                                <ds:Reference Type="http://www.w3.org/2000/09/xmldsig#SignatureProperties" URI="#xadesSignedProperties">
                                    <ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
                                    <ds:DigestValue>MzVmNzAxZmFjZWVkYzk4M2YwZGQ3YmU0OWMyNDYyNjEyNWI4MmZiMjllZmJjOTkzNmI0NTZiOTAzOTU2ZDVmZA==</ds:DigestValue>
                                </ds:Reference>
                            </ds:SignedInfo>
                            <ds:SignatureValue>MEQCICg+zJ50Q5FqODPnoY+Wxw58z5E7VIO3IthvEK9qwiQHAiA8IEdEoE4VudjVTDGIaKK5y4LP0GE2/1Sz/nozKvi1fw==</ds:SignatureValue>
                            <ds:KeyInfo>
                                <ds:X509Data>
                                    <ds:X509Certificate>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</ds:X509Certificate>
                                </ds:X509Data>
                            </ds:KeyInfo>
                            <ds:Object>
                                <xades:QualifyingProperties xmlns:xades="http://uri.etsi.org/01903/v1.3.2#" Target="signature">
                                    <xades:SignedProperties xmlns:xades="http://uri.etsi.org/01903/v1.3.2#" Id="xadesSignedProperties">
                                    <xades:SignedSignatureProperties>
                                        <xades:SigningTime>2022-08-17T17:41:08</xades:SigningTime>
                                        <xades:SigningCertificate>
                                            <xades:Cert>
                                                <xades:CertDigest>
                                                    <ds:DigestMethod xmlns:ds="http://www.w3.org/2000/09/xmldsig#" Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
                                                    <ds:DigestValue xmlns:ds="http://www.w3.org/2000/09/xmldsig#">NzQzMWFlNmY1YmQwMmRmNDYwYmZiODI0ODI2ODVmNTE0NjdhMWJjNjc3ZWYyMWZlMzMyMmE2ZDZhYjI0YzAwNA==</ds:DigestValue>
                                                </xades:CertDigest>
                                                <xades:IssuerSerial>
                                                    <ds:X509IssuerName xmlns:ds="http://www.w3.org/2000/09/xmldsig#">CN=eInvoicing</ds:X509IssuerName>
                                                    <ds:X509SerialNumber xmlns:ds="http://www.w3.org/2000/09/xmldsig#">1724147149755</ds:X509SerialNumber>
                                                </xades:IssuerSerial>
                                            </xades:Cert>
                                        </xades:SigningCertificate>
                                    </xades:SignedSignatureProperties>
                                </xades:SignedProperties>
                                </xades:QualifyingProperties>
                            </ds:Object>
                        </ds:Signature>

```

I am using this github library, your help is appreciated!  
Thanks

---

<div class="post-metadata">

**Author:** ![idaoud](https://avatars.discourse-cdn.com/v4/letter/i/f9ae1b/32.png) [@idaoud](https://zatca1.discourse.group/u/idaoud)\
**Post date:** [August 21, 2024, 12:04pm UTC](https://zatca1.discourse.group/t/invalid-signed-properties-hashing-signedproperties-with-id-xadessignedproperties/2525/2 "2024-08-21T12:04:18Z")

</div>

Dear @Sulaman

Thanks for reaching out,

Please find the signing document attached, you can find the Signed Properties tag in slide 7.

Kindly review it carefully, and if you faced any challenges, please do not hesitate to reach out with our support team via email.

SP email: [sp\_support@zatca.gov.sa](mailto:sp_support@zatca.gov.sa)

Thanks,  
Ibrahem Daoud.

[SigningProcessUpdated.pdf](https://zatca1.discourse.group/uploads/short-url/vlHNRGtXbkw5sv40gchVevwarmQ.pdf) (927.7 KB)

---

<div class="post-metadata">

**Author:** ![Sulaman](https://avatars.discourse-cdn.com/v4/letter/s/8e8cbc/32.png) [@Sulaman](https://zatca1.discourse.group/u/Sulaman)\
**Post date:** [August 22, 2024, 2:16pm UTC](https://zatca1.discourse.group/t/invalid-signed-properties-hashing-signedproperties-with-id-xadessignedproperties/2525/3 "2024-08-22T14:16:02Z")

</div>

Hi Ibrahem,

Thanks, I am reviewing it.  
Downlaod User Manuall button is not working from [fatoora.zatca.gov.sa](https://fatoora.zatca.gov.sa/) It’s returning 500 error may be you can help or share that document here as well.

Thanks,  
Sulaman Khan  
Good Day.

---

<div class="post-metadata">

**Author:** ![Sulaman](https://avatars.discourse-cdn.com/v4/letter/s/8e8cbc/32.png) [@Sulaman](https://zatca1.discourse.group/u/Sulaman)\
**Post date:** [August 28, 2024, 10:57am UTC](https://zatca1.discourse.group/t/invalid-signed-properties-hashing-signedproperties-with-id-xadessignedproperties/2525/4 "2024-08-28T10:57:19Z")

</div>

Dear @idaoud,

I followed all points that is mentioned in pdf, but still error exits.  
The private-key & csr do i need to request from Zacta? I am generating it by my own on dev enviorment with openssl command that are mentioned in given SigningProcessUpdate.pdf file.

---

<div class="post-metadata">

**Author:** ![Sulaman](https://avatars.discourse-cdn.com/v4/letter/s/8e8cbc/32.png) [@Sulaman](https://zatca1.discourse.group/u/Sulaman)\
**Post date:** [September 2, 2024, 8:16am UTC](https://zatca1.discourse.group/t/invalid-signed-properties-hashing-signedproperties-with-id-xadessignedproperties/2525/5 "2024-09-02T08:16:41Z")

</div>

Hi @idaoud  
Your assistance would be greatly appreciated; we’re currently stuck, and even though I sent an email, I haven’t received a response.

---

<div class="post-metadata">

**Author:** ![Sulaman](https://avatars.discourse-cdn.com/v4/letter/s/8e8cbc/32.png) [@Sulaman](https://zatca1.discourse.group/u/Sulaman)\
**Post date:** [September 2, 2024, 9:39am UTC](https://zatca1.discourse.group/t/invalid-signed-properties-hashing-signedproperties-with-id-xadessignedproperties/2525/6 "2024-09-02T09:39:41Z")

</div>

Dear @idaoud

We need your assistance, please. Additionally, the user manual button isn’t functioning, so I’m unable to access the details about the keys.

---

<div class="post-metadata">

**Author:** ![Anil\_K](https://avatars.discourse-cdn.com/v4/letter/a/a183cd/32.png) [@Anil\_K](https://zatca1.discourse.group/u/Anil_K)\
**Post date:** [September 22, 2024, 8:12am UTC](https://zatca1.discourse.group/t/invalid-signed-properties-hashing-signedproperties-with-id-xadessignedproperties/2525/7 "2024-09-22T08:12:10Z")

</div>

HI @Sulaman

you mentioned issue is resolved ? because we also facing same issue

hi @idaoud

i am using .NET dll Zatca.EInvoice.SDK for sign B2B or B2C document for B2B document signed and cleared from zatca in production enviroment. only issue is coming for B2C invoice while call compliance api error is coming \* Invalid signed properties hashing, SignedProperties with id=‘xadesSignedProperties’

Thank’s

---

<div class="post-metadata">

**Author:** ![Anil\_K](https://avatars.discourse-cdn.com/v4/letter/a/a183cd/32.png) [@Anil\_K](https://zatca1.discourse.group/u/Anil_K)\
**Post date:** [September 22, 2024, 8:23am UTC](https://zatca1.discourse.group/t/invalid-signed-properties-hashing-signedproperties-with-id-xadessignedproperties/2525/8 "2024-09-22T08:23:18Z")

</div>

Hi @Sulaman

getting error for standard invoice or simplified invoice ?

Thanks

---

<div class="post-metadata">

**Author:** ![idaoud](https://avatars.discourse-cdn.com/v4/letter/i/f9ae1b/32.png) [@idaoud](https://zatca1.discourse.group/u/idaoud)\
**Post date:** [September 22, 2024, 9:45am UTC](https://zatca1.discourse.group/t/invalid-signed-properties-hashing-signedproperties-with-id-xadessignedproperties/2525/9 "2024-09-22T09:45:14Z")

</div>

Dear @Anil_K

Thanks for reaching out,

Can I kindly ask you to send your full concerns with config file and the steps you did with the CSID, and the full request and response from the API,  
to the below SP support email. To take a look and get back to you ASAP, and schedule meeting if needed.

SP email: [sp\_support@zatca.gov.sa](mailto:sp_support@zatca.gov.sa).

Thanks,  
Ibrahem Daoud.

---

<div class="post-metadata">

**Author:** ![Anil\_K](https://avatars.discourse-cdn.com/v4/letter/a/a183cd/32.png) [@Anil\_K](https://zatca1.discourse.group/u/Anil_K)\
**Post date:** [September 24, 2024, 7:45am UTC](https://zatca1.discourse.group/t/invalid-signed-properties-hashing-signedproperties-with-id-xadessignedproperties/2525/10 "2024-09-24T07:45:41Z")

</div>

Dear @idaoud

Thank’s for reply

i have sent you detail to email address sp\_support@zatca.gov.sa

Thanks,  
Anil K

---

<div class="post-metadata">

**Author:** ![anusv](https://avatars.discourse-cdn.com/v4/letter/a/dc4da7/32.png) [@anusv](https://zatca1.discourse.group/u/anusv)\
**Post date:** [September 30, 2024, 8:24am UTC](https://zatca1.discourse.group/t/invalid-signed-properties-hashing-signedproperties-with-id-xadessignedproperties/2525/11 "2024-09-30T08:24:43Z")

</div>

@Anil_K did you got the solution ?

---

<div class="post-metadata">

**Author:** ![saalotaibi](https://avatars.discourse-cdn.com/v4/letter/s/f9ae1b/32.png) [@saalotaibi](https://zatca1.discourse.group/u/saalotaibi)\
**Post date:** [September 30, 2024, 10:44am UTC](https://zatca1.discourse.group/t/invalid-signed-properties-hashing-signedproperties-with-id-xadessignedproperties/2525/12 "2024-09-30T10:44:09Z")

</div>

Dear @anusv

Kindly if you are still facing an issue provide all of the details to ensure a comprehensive support.

Please Share via  
sp\_support@zatca.gov.sa  
E-invoicing@zatca.gov.sa

Thanks.

---

<div class="post-metadata">

**Author:** ![ahmednfwela](https://dub1.discourse-cdn.com/flex013/user_avatar/zatca1.discourse.group/ahmednfwela/32/646_2.png) [@ahmednfwela](https://zatca1.discourse.group/u/ahmednfwela)\
**Post date:** [December 19, 2024, 9:37am UTC](https://zatca1.discourse.group/t/invalid-signed-properties-hashing-signedproperties-with-id-xadessignedproperties/2525/13 "2024-12-19T09:37:34Z")

</div>

We are also facing this issue, even with the latest .net sdk

it only occurs when issuing invoices in the core and simulation environments, but not in development environment.

this occurs when there is an empty tag in the invoice (e.g. simplified invoices with no customer information), and when calling compliance, reporting or clearance APIs

someone on GitHub has posted a workaround , but I haven’t personally tested it yet.

> <https://github.com/wes4m/zatca-xml-js/issues/44#issuecomment-2058592129>
>
> Error Invalid signed properties hashing, Signed Properties with id=\\'xadesSigne…dProperties\\' during onboarding

---

<div class="post-metadata">

**Author:** ![mohammed-danish](https://avatars.discourse-cdn.com/v4/letter/m/5daacb/32.png) [@mohammed-danish](https://zatca1.discourse.group/u/mohammed-danish)\
**Post date:** [March 24, 2025, 12:17pm UTC](https://zatca1.discourse.group/t/invalid-signed-properties-hashing-signedproperties-with-id-xadessignedproperties/2525/14 "2025-03-24T12:17:42Z")

</div>

Perform the following two operations before creating the hash:

1. Replace “\r\n” with “\n”
2. Trim the input

This worked for me.