<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
Yes, the includes point to /usr/include/xmlsec1 and there is only one installation of xmlsec on the box installed via yum.
<div class=""><br class="">
</div>
<div class=""><span style="orphans: 2; widows: 2;" class="">$ yum info xmlsec1</span></div>
<div class="">
<div class="">
<div class="">Loaded plugins: auto-update-debuginfo, fastestmirror, langpacks, verify</div>
<div class="">Loading mirror speeds from cached hostfile</div>
<div class="">Installed Packages</div>
<div class="">Name : xmlsec1</div>
<div class="">Arch : x86_64</div>
<div class="">Version : 1.2.20</div>
<div class="">Release : 5.el7</div>
<div class="">Size : 555 k</div>
<div class="">Repo : installed</div>
<div class="">From repo : base</div>
<div class="">Summary : Library providing support for "XML Signature" and "XML Encryption" standards</div>
<div class="">URL : <a href="http://www.aleksey.com/xmlsec/" class="">http://www.aleksey.com/xmlsec/</a></div>
<div class="">License : MIT</div>
<div class="">Description : XML Security Library is a C library based on LibXML2 and OpenSSL.</div>
<div class=""> : The library was created with a goal to support major XML security</div>
<div class=""> : standards "XML Digital Signature" and "XML Encryption”.</div>
</div>
<div class=""><br class="">
</div>
<div class=""><br class="">
</div>
<div class="">
<div class="">There may be a potential conflict with gsoap where the python and soap libraries seem to be clashing on defines. These may be affecting the internals:</div>
<div class="">
<div class="">/usr/include/python2.7/pyconfig-64.h:1188:0: warning: "_POSIX_C_SOURCE" redefined [enabled by default]</div>
<div class=""> #define _POSIX_C_SOURCE 200112L</div>
</div>
<div class=""><br class="">
</div>
<div class="">
<div class="">/usr/include/features.h:168:0: note: this is the location of the previous definition</div>
<div class=""> # define _POSIX_C_SOURCE 200809L</div>
</div>
<div class=""><br class="">
<div class="">
<div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
<div class=""></div>
</div>
</div>
</div>
</div>
<div class="">This is a python plugin that receives encrypted XML packets via gsoap.</div>
<div class=""><br class="">
</div>
<div class="">Regards,</div>
<div class="">Russ.</div>
<div class=""><br class="">
</div>
<br class="">
<div>
<blockquote type="cite" class="">
<div class="">On Jun 8, 2017, at 2:25 PM, Aleksey Sanin <<a href="mailto:aleksey@aleksey.com" class="">aleksey@aleksey.com</a>> wrote:</div>
<br class="Apple-interchange-newline">
<div class=""><span style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; float: none; display: inline !important;" class="">Hm...
Can you make sure the library you are using matches</span><br style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class="">
<span style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; float: none; display: inline !important;" class="">the
header files you are compiling with?</span><br style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class="">
<br style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class="">
<span style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; float: none; display: inline !important;" class="">Aleksey</span><br style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class="">
<br style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class="">
<span style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; float: none; display: inline !important;" class="">On
6/8/17 1:55 PM, Russell Beall wrote:</span><br style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class="">
<blockquote type="cite" style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px;" class="">
Hello,<br class="">
<br class="">
First, thank you for all the help I’ve seen flowing through this list<br class="">
over the years. I haven’t had many questions since our code has just<br class="">
been sitting there working most of the time, but it has been nice to see<br class="">
an active community on this product.<br class="">
<br class="">
I’m working on upgrading to xmlsec 1.2.20 on CentOS 7. I’m porting a<br class="">
functioning usage of xmlsec from Solaris using xmlsec 1.2.16. The<br class="">
ported code is practically identical to the online tutorial examples,<br class="">
but for some reason on this updated system, the decryption engine is not<br class="">
producing the data in the encCtx object, even though it is successfully<br class="">
decrypting the XML packet.<br class="">
<br class="">
The output of the document shows this before the decryption:<br class="">
<?xml version="1.0"?><br class="">
<EncryptedData xmlns="<a href="https://urldefense.proofpoint.com/v2/url?u=http-3A__www.w3.org_2001_04_xmlenc-23&d=DwIDaQ&c=clK7kQUTWtAVEOVIgvi0NU5BOUHhpN0H8p7CSfnc_gI&r=GZq8AbZkmDZnHhY_emMoUA&m=1AGkTwrp5nWha7lyn0bYHX4bM0IttToIxnlHQGKlbKE&s=-Xwog9L_-70gnLriXpRfsfcT53My74h4l9nz4LDiav4&e=" class="">https://urldefense.proofpoint.com/v2/url?u=http-3A__www.w3.org_2001_04_xmlenc-23&d=DwIDaQ&c=clK7kQUTWtAVEOVIgvi0NU5BOUHhpN0H8p7CSfnc_gI&r=GZq8AbZkmDZnHhY_emMoUA&m=1AGkTwrp5nWha7lyn0bYHX4bM0IttToIxnlHQGKlbKE&s=-Xwog9L_-70gnLriXpRfsfcT53My74h4l9nz4LDiav4&e=</a><span class="Apple-converted-space"> </span>"<br class="">
Type="<a href="https://urldefense.proofpoint.com/v2/url?u=http-3A__www.w3.org_2001_04_xmlenc-23Element&d=DwIDaQ&c=clK7kQUTWtAVEOVIgvi0NU5BOUHhpN0H8p7CSfnc_gI&r=GZq8AbZkmDZnHhY_emMoUA&m=1AGkTwrp5nWha7lyn0bYHX4bM0IttToIxnlHQGKlbKE&s=n7wOqJl6BkmU1WHOR5aNtn18_k1ceTxMSUW1AicxD00&e=" class="">https://urldefense.proofpoint.com/v2/url?u=http-3A__www.w3.org_2001_04_xmlenc-23Element&d=DwIDaQ&c=clK7kQUTWtAVEOVIgvi0NU5BOUHhpN0H8p7CSfnc_gI&r=GZq8AbZkmDZnHhY_emMoUA&m=1AGkTwrp5nWha7lyn0bYHX4bM0IttToIxnlHQGKlbKE&s=n7wOqJl6BkmU1WHOR5aNtn18_k1ceTxMSUW1AicxD00&e=</a><span class="Apple-converted-space"> </span>"><br class="">
<EncryptionMethod Algorithm="<a href="https://urldefense.proofpoint.com/v2/url?u=http-3A__www.w3.org_2001_04_xmlenc-23aes128-2Dcbc&d=DwIDaQ&c=clK7kQUTWtAVEOVIgvi0NU5BOUHhpN0H8p7CSfnc_gI&r=GZq8AbZkmDZnHhY_emMoUA&m=1AGkTwrp5nWha7lyn0bYHX4bM0IttToIxnlHQGKlbKE&s=dd-dzD0_VFSpcwn_SGNp3aAR9UweqZXV2m2nUcdGaFA&e=" class="">https://urldefense.proofpoint.com/v2/url?u=http-3A__www.w3.org_2001_04_xmlenc-23aes128-2Dcbc&d=DwIDaQ&c=clK7kQUTWtAVEOVIgvi0NU5BOUHhpN0H8p7CSfnc_gI&r=GZq8AbZkmDZnHhY_emMoUA&m=1AGkTwrp5nWha7lyn0bYHX4bM0IttToIxnlHQGKlbKE&s=dd-dzD0_VFSpcwn_SGNp3aAR9UweqZXV2m2nUcdGaFA&e=</a><span class="Apple-converted-space"> </span>"/><br class="">
<KeyInfo xmlns="<a href="https://urldefense.proofpoint.com/v2/url?u=http-3A__www.w3.org_2000_09_xmldsig-23&d=DwIDaQ&c=clK7kQUTWtAVEOVIgvi0NU5BOUHhpN0H8p7CSfnc_gI&r=GZq8AbZkmDZnHhY_emMoUA&m=1AGkTwrp5nWha7lyn0bYHX4bM0IttToIxnlHQGKlbKE&s=nT1UEj-K2M3303ZeBQ8PwTKCzd1dFIQyikCF39ybEqs&e=" class="">https://urldefense.proofpoint.com/v2/url?u=http-3A__www.w3.org_2000_09_xmldsig-23&d=DwIDaQ&c=clK7kQUTWtAVEOVIgvi0NU5BOUHhpN0H8p7CSfnc_gI&r=GZq8AbZkmDZnHhY_emMoUA&m=1AGkTwrp5nWha7lyn0bYHX4bM0IttToIxnlHQGKlbKE&s=nT1UEj-K2M3303ZeBQ8PwTKCzd1dFIQyikCF39ybEqs&e=</a><span class="Apple-converted-space"> </span>"><br class="">
<KeyName>symkey_GDS</KeyName><br class="">
</KeyInfo><br class="">
<CipherData><br class="">
<CipherValue>N6BDPUv1BIz88n1IL64aTkiShimUMWnZ+c5bVHDMxEs=</CipherValue><br class="">
</CipherData><br class="">
</EncryptedData><br class="">
<br class="">
And shows this after the decryption:<br class="">
<?xml version="1.0"?><br class="">
<Ping/><br class="">
<br class="">
But leaves this data in the encCtx object suggesting that the decryption<br class="">
process did not work:<br class="">
encCtx->result: 0<br class="">
encCtx->encKey: 0<br class="">
encCtx->resultReplaced: 0<br class="">
<br class="">
Besides needing to see the a non-null result status, I also need a<br class="">
non-null encKey object so I can pull the name of the key for use later<br class="">
in encrypting the response packet.<br class="">
<br class="">
Is there something I’m missing about this? Or maybe something peculiar<br class="">
to CentOS 7? Doesn’t seem like much would have changed between xmlsec<br class="">
1.2.16 and 1.2.20.<br class="">
<br class="">
Thanks for any help!<br class="">
Regards,<br class="">
Russ.<br class="">
<br class="">
=========================<br class="">
*Russell Beall | *Systems Programmer IV<span class="Apple-converted-space"> </span><br class="">
Enterprise Identity Management | University of Southern California<span class="Apple-converted-space"> </span><br class="">
(213) 740-7221 | <a href="mailto:beall@usc.edu" class="">beall@usc.edu</a><span class="Apple-converted-space"> </span><<a href="mailto:beall@usc.edu" class="">mailto:beall@usc.edu</a>><br class="">
<br class="">
<br class="">
<br class="">
<br class="">
<br class="">
<br class="">
_______________________________________________<br class="">
xmlsec mailing list<br class="">
<a href="mailto:xmlsec@aleksey.com" class="">xmlsec@aleksey.com</a><br class="">
<a href="https://urldefense.proofpoint.com/v2/url?u=http-3A__www.aleksey.com_mailman_listinfo_xmlsec&d=DwIDaQ&c=clK7kQUTWtAVEOVIgvi0NU5BOUHhpN0H8p7CSfnc_gI&r=GZq8AbZkmDZnHhY_emMoUA&m=1AGkTwrp5nWha7lyn0bYHX4bM0IttToIxnlHQGKlbKE&s=5ignWrNrPf6_n_D9cghpaTcszAnGOqzkesdtRUVGv1E&e=" class="">https://urldefense.proofpoint.com/v2/url?u=http-3A__www.aleksey.com_mailman_listinfo_xmlsec&d=DwIDaQ&c=clK7kQUTWtAVEOVIgvi0NU5BOUHhpN0H8p7CSfnc_gI&r=GZq8AbZkmDZnHhY_emMoUA&m=1AGkTwrp5nWha7lyn0bYHX4bM0IttToIxnlHQGKlbKE&s=5ignWrNrPf6_n_D9cghpaTcszAnGOqzkesdtRUVGv1E&e=</a></blockquote>
</div>
</blockquote>
</div>
<br class="">
</div>
</body>
</html>