签名XML检查签名失败，哈希错误

Question

我正在尝试检查DOT NET中的SAML签名的响应4.8 MVC项目，

我的代码是

_xmlDoc = new XmlDocument();
                _xmlDoc.PreserveWhitespace = true;
                _xmlDoc.XmlResolver = null;
                _xmlDoc.LoadXml(xml);

        XmlNodeList nodeList = _xmlDoc.SelectNodes("//ds:Signature", _xmlNameSpaceManager);

                SignedXml signedXml = new SignedXml(_xmlDoc);
                
                if (nodeList.Count == 0) return false;

                signedXml.LoadXml((XmlElement)nodeList[0]);

                X509Certificate2 serviceCertificate = null;
                foreach (KeyInfoClause clause in signedXml.KeyInfo)
                {
                    if (clause is KeyInfoX509Data)
                    {
                        if (((KeyInfoX509Data)clause).Certificates.Count > 0)
                        {
                            serviceCertificate = (X509Certificate2)((KeyInfoX509Data)clause).Certificates[0];
                        }
                    }
                }
return signedXml.CheckSignature(serviceCertificate, true);
 

false作为签名验证，

因此我启用了日志，以下是错误，

[SignedXml#026c9e6f, VerifyReference] Reference Reference#000df9b5 hashed with 
"http://www.w3.org/2001/04/xmlenc#sha256" (SHA256Managed) has hash value 
348aa65d5b67edfae901cd4e2596065e75839a18c9a5d3a63d3fd85e48c232d8, expected hash value 
869e1b0273833271a23349cd9bc7bddb597c2277c323abddead0cfe798ae3f63.
System.Security.Cryptography.Xml.SignedXml Information: 12 : [SignedXml#026c9e6f, 
VerificationFailure] Verification failed checking references.

请建议建议