<html><head><meta http-equiv="Content-Type" content="text/html charset=windows-1252"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;">Hi all, <br><div><blockquote type="cite"></blockquote><font color="#0f61c8"><br></font><blockquote type="cite"></blockquote>I’ve been wrestling getting xmlsec1 to work properly on my MacBook Pro 13.3” Retina with 10.9 (Maverick). I installed Openssl 1.0.1e through Brew, and then changed the /usr/lib/libscrypto.dylib and /usr/lib/libssl.dylib and /usr/bin/openssl to point to the Brew openssl version:<br><blockquote type="cite">openssl version<br></blockquote><blockquote type="cite"></blockquote>OpenSSL 1.0.1e 11 Feb 2013<br><blockquote type="cite"></blockquote><font color="#0f61c8"><br></font><blockquote type="cite"></blockquote>Then I changed the Brew formula for xmlsec1, adding the configure parameter to use openssl: "--with-openssl=/usr”<br><blockquote type="cite"></blockquote><font color="#0f61c8"><br></font><blockquote type="cite"></blockquote>At the point the installation failed, looking for the static libcrypto.a. I manually linked the libscrypto.a library:<br><blockquote type="cite"></blockquote>sudo ln -s /usr/local/Cellar/openssl/1.0.1e/lib/libcrypto.a /usr/lib/libcrypto.a<br><blockquote type="cite"></blockquote><font color="#0f61c8"><br></font><blockquote type="cite"></blockquote>At this point, all seems fine, I can execute xmlsec1 —help, and the program executes. However, when I try to actually do anything useful with xmlsec1, it throws an Segmentation Fault (Error -11). From the debugger, this is the actual error:<br><blockquote type="cite"></blockquote><font color="#0f61c8"><br></font><blockquote type="cite"><blockquote type="cite"></blockquote>r --verify --pubkey-cert-pem ~/tmp/pubkey.pem --id-attr:ID 'urn:oasis:names:tc:SAML:2.0:assertion:Assertion' ~/tmp/verify.xml<br><blockquote type="cite"></blockquote>There is a running process, kill it and restart?: [Y/n] y<br><blockquote type="cite"></blockquote>Process 54301 launched: '/usr/bin/xmlsec1' (x86_64)<br><blockquote type="cite"></blockquote>Process 54301 stopped<br><blockquote type="cite"></blockquote>* thread #1: tid = 0x9df18c, 0x00000001000ae1f1 libxmlsec1-openssl.1.dylib`EVP_PKEY_CTX_free + 14, queue = 'com.apple.main-thread, stop reason = EXC_BAD_ACCESS (code=EXC_I386_GPFLT)<br><blockquote type="cite"></blockquote> frame #0: 0x00000001000ae1f1 libxmlsec1-openssl.1.dylib`EVP_PKEY_CTX_free + 14<br><blockquote type="cite"></blockquote>libxmlsec1-openssl.1.dylib`EVP_PKEY_CTX_free + 14:<br><blockquote type="cite"></blockquote>-> 0x1000ae1f1: movq (%rbx), %rax<br><blockquote type="cite"></blockquote> 0x1000ae1f4: testq %rax, %rax<br><blockquote type="cite"></blockquote> 0x1000ae1f7: je 0x1000ae207 ; EVP_PKEY_CTX_free + 36<br> 0x1000ae1f9: movq 24(%rax), %rax<br></blockquote><blockquote type="cite"></blockquote><font color="#0f61c8"><br></font><blockquote type="cite"></blockquote><font color="#0f61c8"><br></font><blockquote type="cite"></blockquote>(BTW, if I don’t specify with-openssl, it will use libgcrypt, and I still get the same error, here’s that stack)<br><blockquote type="cite"></blockquote><font color="#0f61c8"><br></font><blockquote type="cite"><blockquote type="cite"></blockquote>r --verify --pubkey-cert-pem ~/tmp/pubkey.pem --id-attr:ID 'urn:oasis:names:tc:SAML:2.0:assertion:Assertion' ~/tmp/verify.xml<br><blockquote type="cite"></blockquote>There is a running process, kill it and restart?: [Y/n] y<br><blockquote type="cite"></blockquote>Process 2982 launched: '/usr/bin/xmlsec1' (x86_64)<br><blockquote type="cite"></blockquote>Process 2982 stopped<br><blockquote type="cite"></blockquote>* thread #1: tid = 0x9c72b2, 0x000000010012777d libcrypto.1.0.0.dylib`EVP_PKEY_CTX_free + 14, queue = 'com.apple.main-thread, stop reason = EXC_BAD_ACCESS (code=EXC_I386_GPFLT)<br><blockquote type="cite"></blockquote> frame #0: 0x000000010012777d libcrypto.1.0.0.dylib`EVP_PKEY_CTX_free + 14<br><blockquote type="cite"></blockquote>libcrypto.1.0.0.dylib`EVP_PKEY_CTX_free + 14:<br><blockquote type="cite"></blockquote>-> 0x10012777d: movq (%rbx), %rax<br><blockquote type="cite"></blockquote> 0x100127780: testq %rax, %rax<br><blockquote type="cite"></blockquote> 0x100127783: je 0x100127793 ; EVP_PKEY_CTX_free + 36<br> 0x100127785: movq 24(%rax), %rax<br></blockquote><blockquote type="cite"></blockquote><font color="#0f61c8"><br></font><blockquote type="cite"></blockquote>On my production system, Ubuntu 12.04.3, I installed via apt, and everything works fine:<br><blockquote type="cite">sudo apt-get install xmlsec1<br></blockquote><blockquote type="cite"></blockquote><font color="#0f61c8"><br></font><blockquote type="cite"></blockquote><font color="#0f61c8"><br></font><blockquote type="cite"></blockquote>Any help is appreciated.<br><blockquote type="cite"></blockquote><font color="#0f61c8"><br></font><blockquote type="cite"></blockquote>I’ve attached the verbose brew log.<br><blockquote type="cite"></blockquote></div></body></html>