[xmlsec] Re: Comment (and namespace)

Aleksey Sanin aleksey at aleksey.com
Fri Apr 26 09:53:35 PDT 2002

Hi, Joseph!

I know about the namespace problem and it is laready fixed (recently I 
did a big
cleanup and this was one of the items). BTW, you example also have to be 
to something like this:

<HMACKeyValue xmlns="http://www.aleksey.com/xmlsec/2002">

 Since <HMACKeyValue> tag is not defined by XMLDSig as well :)

Regading the problem you have: you forgot to specify "template" file. 
This is not very clear
from the current help (thanks for noting it!) but the actual command 
format is
    xmlsec encrypt [<options>] [<tmpl> [<tmpl> [ ... ]]]
The template specifies how to encrypt the binary file you've specified 
with '--binary' option.
For examples, please take a look at the tests/testEnc.sh folder and 
templates in
Please let me know if you'll have any other problems.

I have plans to support PGP but first I would like to finish XML Enc (I 
still have few itesm "to-do")


Joseph Reagle wrote:

>Hi Aleksey,
>The Debian unstable debs now permit the compilation of your code! Like the 
>rpm's, OpenSSL 0.9.7 debs aren't available yet. But I can compile it, and 
>to test it I create a hmackey (any plans to support gpg keys?!)  and run 
>the following, but nothing is output on standard out:
> xmlsec encrypt --keys keys --binary test
>What would I be doing incorrectly?
>Also, I note an error in your key format. You should use your own namespace 
>for your "Keys" element, not the dsig one. Something like:
><?xml version="1.0"?>
><Keys xmlns="http://www.aleksey.com/xmlsec/2002">
><KeyInfo xmlns="http://www.w3.org/2000/09/xmldsig#">>

More information about the xmlsec mailing list