<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
Ok, thanks. I’ll try those ideas.
<div class=""><br class="">
</div>
<div class="">Regards,</div>
<div class="">Russ.</div>
<div class=""><br class="">
<div class="">
<div style="color: rgb(0, 0, 0); letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
<div class="">
<div style="orphans: 2; widows: 2; margin: 0px;" class="">=========================</div>
<div style="orphans: 2; widows: 2; margin: 0px;" class=""><b class="">Russell Beall | </b>Systems Programmer IV </div>
<div style="orphans: 2; widows: 2; margin: 0px;" class="">Enterprise Identity Management | University of Southern California </div>
<div style="orphans: 2; widows: 2; margin: 0px;" class="">(213) 740-7221 | <a href="mailto:beall@usc.edu" class="">beall@usc.edu</a></div>
<div style="orphans: 2; widows: 2;" class=""><br class="">
</div>
</div>
<div style="orphans: 2; widows: 2;" class=""><br class="">
</div>
</div>
<br class="Apple-interchange-newline">
</div>
<br class="">
<div style="">
<blockquote type="cite" class="">
<div class="">On Jun 8, 2017, at 3:51 PM, Aleksey Sanin <<a href="mailto:aleksey@aleksey.com" class="">aleksey@aleksey.com</a>> wrote:</div>
<br class="Apple-interchange-newline">
<div class=""><span style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; float: none; display: inline !important;" class="">Hm...
next idea is that some compilation flags are different. Basically</span><br style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class="">
<span style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; float: none; display: inline !important;" class="">what
you describe looks like your code is looking at the wrong places</span><br style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class="">
<span style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; float: none; display: inline !important;" class="">in
encCtx struct because it looks different. I would go into debugger</span><br style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class="">
<span style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; float: none; display: inline !important;" class="">and
examine the memory block for encCtx to see how it looks like.</span><br style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class="">
<br style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class="">
<span style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; float: none; display: inline !important;" class="">Another
approach is to recompile (the lastest) xmlsec version and see</span><br style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class="">
<span style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; float: none; display: inline !important;" class="">if
it solves the problem.</span><br style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class="">
<br style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class="">
<span style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; float: none; display: inline !important;" class="">Aleksey</span><br style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class="">
<br style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class="">
<span style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; float: none; display: inline !important;" class="">On
6/8/17 3:47 PM, Russell Beall wrote:</span><br style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class="">
<blockquote type="cite" style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px;" class="">
Yes, the includes point to /usr/include/xmlsec1 and there is only one<br class="">
installation of xmlsec on the box installed via yum.<br class="">
<br class="">
$ yum info xmlsec1<br class="">
Loaded plugins: auto-update-debuginfo, fastestmirror, langpacks, verify<br class="">
Loading mirror speeds from cached hostfile<br class="">
Installed Packages<br class="">
Name : xmlsec1<br class="">
Arch : x86_64<br class="">
Version : 1.2.20<br class="">
Release : 5.el7<br class="">
Size : 555 k<br class="">
Repo : installed<br class="">
From repo : base<br class="">
Summary : Library providing support for "XML Signature" and "XML<br class="">
Encryption" standards<br class="">
URL :<span class="Apple-converted-space"> </span><a href="https://urldefense.proofpoint.com/v2/url?u=http-3A__www.aleksey.com_xmlsec_&d=DwIDaQ&c=clK7kQUTWtAVEOVIgvi0NU5BOUHhpN0H8p7CSfnc_gI&r=GZq8AbZkmDZnHhY_emMoUA&m=wlYaqIJM27mvlCJIVYuW4l0Odsgx_qawVLtTbdu2h8I&s=sG2W-Vo4Ho-WqcECYXdPwIh9LaFoEqaKoJjAclYIOQ4&e=" class="">https://urldefense.proofpoint.com/v2/url?u=http-3A__www.aleksey.com_xmlsec_&d=DwIDaQ&c=clK7kQUTWtAVEOVIgvi0NU5BOUHhpN0H8p7CSfnc_gI&r=GZq8AbZkmDZnHhY_emMoUA&m=wlYaqIJM27mvlCJIVYuW4l0Odsgx_qawVLtTbdu2h8I&s=sG2W-Vo4Ho-WqcECYXdPwIh9LaFoEqaKoJjAclYIOQ4&e=</a><span class="Apple-converted-space"> </span><br class="">
License : MIT<br class="">
Description : XML Security Library is a C library based on LibXML2 and<br class="">
OpenSSL.<br class="">
: The library was created with a goal to support major XML<br class="">
security<br class="">
: standards "XML Digital Signature" and "XML Encryption”.<br class="">
<br class="">
<br class="">
There may be a potential conflict with gsoap where the python and soap<br class="">
libraries seem to be clashing on defines. These may be affecting the<br class="">
internals:<br class="">
/usr/include/python2.7/pyconfig-64.h:1188:0: warning: "_POSIX_C_SOURCE"<br class="">
redefined [enabled by default]<br class="">
#define _POSIX_C_SOURCE 200112L<br class="">
<br class="">
/usr/include/features.h:168:0: note: this is the location of the<br class="">
previous definition<br class="">
# define _POSIX_C_SOURCE 200809L<br class="">
<br class="">
This is a python plugin that receives encrypted XML packets via gsoap.<br class="">
<br class="">
Regards,<br class="">
Russ.<br class="">
<br class="">
<br class="">
<blockquote type="cite" class="">On Jun 8, 2017, at 2:25 PM, Aleksey Sanin <<a href="mailto:aleksey@aleksey.com" class="">aleksey@aleksey.com</a><br class="">
<<a href="mailto:aleksey@aleksey.com" class="">mailto:aleksey@aleksey.com</a>>> wrote:<br class="">
<br class="">
Hm... Can you make sure the library you are using matches<br class="">
the header files you are compiling with?<br class="">
<br class="">
Aleksey<br class="">
<br class="">
On 6/8/17 1:55 PM, Russell Beall wrote:<br class="">
<blockquote type="cite" class="">Hello,<br class="">
<br class="">
First, thank you for all the help I’ve seen flowing through this list<br class="">
over the years. I haven’t had many questions since our code has just<br class="">
been sitting there working most of the time, but it has been nice to see<br class="">
an active community on this product.<br class="">
<br class="">
I’m working on upgrading to xmlsec 1.2.20 on CentOS 7. I’m porting a<br class="">
functioning usage of xmlsec from Solaris using xmlsec 1.2.16. The<br class="">
ported code is practically identical to the online tutorial examples,<br class="">
but for some reason on this updated system, the decryption engine is not<br class="">
producing the data in the encCtx object, even though it is successfully<br class="">
decrypting the XML packet.<br class="">
<br class="">
The output of the document shows this before the decryption:<br class="">
<?xml version="1.0"?><br class="">
<EncryptedData<br class="">
xmlns="<a href="https://urldefense.proofpoint.com/v2/url?u=http-3A__www.w3.org_2001_04_xmlenc-23&d=DwIDaQ&c=clK7kQUTWtAVEOVIgvi0NU5BOUHhpN0H8p7CSfnc_gI&r=GZq8AbZkmDZnHhY_emMoUA&m=1AGkTwrp5nWha7lyn0bYHX4bM0IttToIxnlHQGKlbKE&s=-Xwog9L_-70gnLriXpRfsfcT53My74h4l9nz4LDiav4&e=" class="">https://urldefense.proofpoint.com/v2/url?u=http-3A__www.w3.org_2001_04_xmlenc-23&d=DwIDaQ&c=clK7kQUTWtAVEOVIgvi0NU5BOUHhpN0H8p7CSfnc_gI&r=GZq8AbZkmDZnHhY_emMoUA&m=1AGkTwrp5nWha7lyn0bYHX4bM0IttToIxnlHQGKlbKE&s=-Xwog9L_-70gnLriXpRfsfcT53My74h4l9nz4LDiav4&e=</a><span class="Apple-converted-space"> </span>"<br class="">
Type="<a href="https://urldefense.proofpoint.com/v2/url?u=http-3A__www.w3.org_2001_04_xmlenc-23Element&d=DwIDaQ&c=clK7kQUTWtAVEOVIgvi0NU5BOUHhpN0H8p7CSfnc_gI&r=GZq8AbZkmDZnHhY_emMoUA&m=1AGkTwrp5nWha7lyn0bYHX4bM0IttToIxnlHQGKlbKE&s=n7wOqJl6BkmU1WHOR5aNtn18_k1ceTxMSUW1AicxD00&e=" class="">https://urldefense.proofpoint.com/v2/url?u=http-3A__www.w3.org_2001_04_xmlenc-23Element&d=DwIDaQ&c=clK7kQUTWtAVEOVIgvi0NU5BOUHhpN0H8p7CSfnc_gI&r=GZq8AbZkmDZnHhY_emMoUA&m=1AGkTwrp5nWha7lyn0bYHX4bM0IttToIxnlHQGKlbKE&s=n7wOqJl6BkmU1WHOR5aNtn18_k1ceTxMSUW1AicxD00&e=</a><span class="Apple-converted-space"> </span>"><br class="">
<EncryptionMethod<br class="">
Algorithm="<a href="https://urldefense.proofpoint.com/v2/url?u=http-3A__www.w3.org_2001_04_xmlenc-23aes128-2Dcbc&d=DwIDaQ&c=clK7kQUTWtAVEOVIgvi0NU5BOUHhpN0H8p7CSfnc_gI&r=GZq8AbZkmDZnHhY_emMoUA&m=1AGkTwrp5nWha7lyn0bYHX4bM0IttToIxnlHQGKlbKE&s=dd-dzD0_VFSpcwn_SGNp3aAR9UweqZXV2m2nUcdGaFA&e=" class="">https://urldefense.proofpoint.com/v2/url?u=http-3A__www.w3.org_2001_04_xmlenc-23aes128-2Dcbc&d=DwIDaQ&c=clK7kQUTWtAVEOVIgvi0NU5BOUHhpN0H8p7CSfnc_gI&r=GZq8AbZkmDZnHhY_emMoUA&m=1AGkTwrp5nWha7lyn0bYHX4bM0IttToIxnlHQGKlbKE&s=dd-dzD0_VFSpcwn_SGNp3aAR9UweqZXV2m2nUcdGaFA&e=</a><span class="Apple-converted-space"> </span>"/><br class="">
<KeyInfo<br class="">
xmlns="<a href="https://urldefense.proofpoint.com/v2/url?u=http-3A__www.w3.org_2000_09_xmldsig-23&d=DwIDaQ&c=clK7kQUTWtAVEOVIgvi0NU5BOUHhpN0H8p7CSfnc_gI&r=GZq8AbZkmDZnHhY_emMoUA&m=1AGkTwrp5nWha7lyn0bYHX4bM0IttToIxnlHQGKlbKE&s=nT1UEj-K2M3303ZeBQ8PwTKCzd1dFIQyikCF39ybEqs&e=" class="">https://urldefense.proofpoint.com/v2/url?u=http-3A__www.w3.org_2000_09_xmldsig-23&d=DwIDaQ&c=clK7kQUTWtAVEOVIgvi0NU5BOUHhpN0H8p7CSfnc_gI&r=GZq8AbZkmDZnHhY_emMoUA&m=1AGkTwrp5nWha7lyn0bYHX4bM0IttToIxnlHQGKlbKE&s=nT1UEj-K2M3303ZeBQ8PwTKCzd1dFIQyikCF39ybEqs&e=</a><span class="Apple-converted-space"> </span>"><br class="">
<KeyName>symkey_GDS</KeyName><br class="">
</KeyInfo><br class="">
<CipherData><br class="">
<CipherValue>N6BDPUv1BIz88n1IL64aTkiShimUMWnZ+c5bVHDMxEs=</CipherValue><br class="">
</CipherData><br class="">
</EncryptedData><br class="">
<br class="">
And shows this after the decryption:<br class="">
<?xml version="1.0"?><br class="">
<Ping/><br class="">
<br class="">
But leaves this data in the encCtx object suggesting that the decryption<br class="">
process did not work:<br class="">
encCtx->result: 0<br class="">
encCtx->encKey: 0<br class="">
encCtx->resultReplaced: 0<br class="">
<br class="">
Besides needing to see the a non-null result status, I also need a<br class="">
non-null encKey object so I can pull the name of the key for use later<br class="">
in encrypting the response packet.<br class="">
<br class="">
Is there something I’m missing about this? Or maybe something peculiar<br class="">
to CentOS 7? Doesn’t seem like much would have changed between xmlsec<br class="">
1.2.16 and 1.2.20.<br class="">
<br class="">
Thanks for any help!<br class="">
Regards,<br class="">
Russ.<br class="">
<br class="">
=========================<br class="">
*Russell Beall | *Systems Programmer IV<span class="Apple-converted-space"> </span><br class="">
Enterprise Identity Management | University of Southern California<span class="Apple-converted-space"> </span><br class="">
(213) 740-7221 | <a href="mailto:beall@usc.edu" class="">beall@usc.edu</a><br class="">
<<a href="mailto:beall@usc.edu" class="">mailto:beall@usc.edu</a>> <<a href="mailto:beall@usc.edu" class="">mailto:beall@usc.edu</a>><br class="">
<br class="">
<br class="">
<br class="">
<br class="">
<br class="">
<br class="">
_______________________________________________<br class="">
xmlsec mailing list<br class="">
<a href="mailto:xmlsec@aleksey.com" class="">xmlsec@aleksey.com</a><span class="Apple-converted-space"> </span><<a href="mailto:xmlsec@aleksey.com" class="">mailto:xmlsec@aleksey.com</a>><br class="">
<a href="https://urldefense.proofpoint.com/v2/url?u=http-3A__www.aleksey.com_mailman_listinfo_xmlsec&d=DwIDaQ&c=clK7kQUTWtAVEOVIgvi0NU5BOUHhpN0H8p7CSfnc_gI&r=GZq8AbZkmDZnHhY_emMoUA&m=1AGkTwrp5nWha7lyn0bYHX4bM0IttToIxnlHQGKlbKE&s=5ignWrNrPf6_n_D9cghpaTcszAnGOqzkesdtRUVGv1E&e=" class="">https://urldefense.proofpoint.com/v2/url?u=http-3A__www.aleksey.com_mailman_listinfo_xmlsec&d=DwIDaQ&c=clK7kQUTWtAVEOVIgvi0NU5BOUHhpN0H8p7CSfnc_gI&r=GZq8AbZkmDZnHhY_emMoUA&m=1AGkTwrp5nWha7lyn0bYHX4bM0IttToIxnlHQGKlbKE&s=5ignWrNrPf6_n_D9cghpaTcszAnGOqzkesdtRUVGv1E&e=</a></blockquote>
</blockquote>
</blockquote>
</div>
</blockquote>
</div>
<br class="">
</div>
</body>
</html>