openssl dgst -sign    Насколько я понимаю создает hash  от контента  

Я так понимаю от одного и того же контента и сертификата должен быть один и тот же hash

echo 12345|openssl dgst  -sign cert.pem -binary -md_gost12_256|base64

У меня каждый раз разный...
Это глюк  или я что-то не понимаю  как это работает ... где почитать?...

В итоге мне нужно сделать тег Signature для XML документа по технологии Xadec-Bas
во многих реализациях  Hash получают с помощью openssl dgst -sign
У одного документа  всегда разная подпись?!.

Есть вообще способ проверить и найти ошибки в ней?...

что в моей подписи не так ? подскажите плз...

<?xml version="1.0" encoding="UTF-8"?>
<SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/"
    xmlns:ns1="http://dom.gosuslugi.ru/schema/integration/organizations-bas...
    xmlns:ns2="http://dom.gosuslugi.ru/schema/integration/organizations-reg...
    xmlns:ns3="http://dom.gosuslugi.ru/schema/integration/base/">
    <SOAP-ENV:Header>
        <ns3:ISRequestHeader>
            <ns3:Date>2021-05-31T00:08:38+03:00</ns3:Date>
            <ns3:MessageGUID>5DE5F9C3-F4BB-43B3-B201-F5C24A6F02E0
            </ns3:MessageGUID>
        </ns3:ISRequestHeader>
    </SOAP-ENV:Header>
    <SOAP-ENV:Body>
        <ns2:exportOrgRegistryRequest ns3:version="10.0.2.1"
            Id="C6EAB757-CA32-4052-80C5-13167607C791">
            <ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#"
                Id="xmldsig-6E938488-6FF7-4F4B-A111-9D1735844EDA">
                <ds:SignedInfo>
                    <ds:CanonicalizationMethod
                        Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" />
                    <ds:SignatureMethod
                        Algorithm="urn:ietf:params:xml:ns:cpxmlsec:algorithms:gostr34102012-gostr34112012-256" />
                    <ds:Reference URI="#signed-data-container">
                        <ds:Transforms>
                            <ds:Transform
                                Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature" />
                            <ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" />
                        </ds:Transforms>
                        <ds:DigestMethod
                            Algorithm="urn:ietf:params:xml:ns:cpxmlsec:algorithms:gostr34112012-256" />
                        <ds:DigestValue>5B+dx+iSx3tfJrVJrmbdjdmzsk7+OiNG/LQPDGQBmX0=
                        </ds:DigestValue>
                    </ds:Reference>
                    <ds:Reference
                        URI="#xmldsig-6E938488-6FF7-4F4B-A111-9D1735844EDA-signedprops"
                        Type="http://uri.etsi.org/01903#SignedProperties">
                        <ds:Transforms>
                            <ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" />
                        </ds:Transforms>
                        <ds:DigestMethod
                            Algorithm="urn:ietf:params:xml:ns:cpxmlsec:algorithms:gostr34112012-256" />
                        <ds:DigestValue>1nttl3BaBX+jFYAK4C6flUyO9aqIl1HVyALo0OhllpA=
                        </ds:DigestValue>
                    </ds:Reference>
                </ds:SignedInfo>
                <ds:SignatureValue>reN4uFcBFs050P8W+G1z2p848kyry7W3vgfVpXmdtqqI9WotEBQEHXvw8SNVwVr/dX/nx/+RWZoie7sG9M3w3A==
                </ds:SignatureValue>
                <ds:KeyInfo Id="xmldsig-f83d2c1f-d039-4892-a76b-f583daa14edc">
                    <ds:X509Data xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
                        <ds:X509Certificate>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
                        </ds:X509Certificate>
                    </ds:X509Data>
                </ds:KeyInfo>
                <ds:Object>
                    <xades:QualifyingProperties    xmlns:xades="http://uri.etsi.org/01903/v1.3.2#"
                        Target="#xmldsig-6E938488-6FF7-4F4B-A111-9D1735844EDA">
                        <xades:SignedProperties
                            Id="xmldsig-6E938488-6FF7-4F4B-A111-9D1735844EDA-signedprops">
                            <xades:SignedSignatureProperties>
                                <xades:SigningTime>2021-05-31T00:08:38+03:00</xades:SigningTime>
                                <xades:SigningCertificate>
                                    <xades:Cert>
                                        <xades:CertDigest>
                                            <ds:DigestMethod
                                                Algorithm="urn:ietf:params:xml:ns:cpxmlsec:algorithms:gostr34112012-256"></ds:DigestMethod>
                                            <ds:DigestValue>9kHlBOpJ9pWFi8QnsGaT1lJ5riqyw0UX9P2FvG3aWfE=
                                            </ds:DigestValue>
                                        </xades:CertDigest>
                                        <xades:IssuerSerial>
                                            <ds:X509IssuerName>emailaddress=info@cryptopro.ru,ogrn=1037700085444,inn=007717107991,c=RU,st=77
                                                Москва,l=Москва,street=ул. Сущёвский вал д. 18,o=ООО
                                                \"КРИПТО-ПРО\",cn=Тестовый подчиненный УЦ ООО \"КРИПТО-ПРО\"
                                                ГОСТ 2012 (УЦ 2.0)</ds:X509IssuerName>
                                            <ds:X509SerialNumber>751682934315225238773334302835337483698
                                            </ds:X509SerialNumber>
                                        </xades:IssuerSerial>
                                    </xades:Cert>
                                </xades:SigningCertificate>
                            </xades:SignedSignatureProperties>
                        </xades:SignedProperties>
                    </xades:QualifyingProperties>
                </ds:Object>
            </ds:Signature>
            <ns2:SearchCriteria>
                <ns1:OGRNIP>318527500030903</ns1:OGRNIP>
                <ns2:isRegistered>true</ns2:isRegistered>
            </ns2:SearchCriteria>
        </ns2:exportOrgRegistryRequest>
    </SOAP-ENV:Body>
</SOAP-ENV:Envelope>