It seems that when you run ./configure script it found openssl 0.9.7 however 0.9.6 headers were actualy used (for openssl 0.9.6 there is an additional define set by ./configure script and it is missing in the compiler flags). In theory, xmlsec should compile against 0.9.6. However, the last time I tested it was more than a year ago. Aleksey