[xmlsec] command-line question

Rich Salz rsalz at datapower.com
Tue May 27 09:20:52 PDT 2003


What would be the right command-line to decrypt the attached file?
The following doesn't work -- xmlsec
xmlsec1 decrypt \
      --privkey:Alice alice.pem \
      --privkey:name:Alice alice.pem \
      /tmp/sample-128.out
We get the following traceback:

func=xmlSecEncCtxEncDataNodeRead:file=xmlenc.c:line=768:obj=unknown:subj=EncryptionMethod:error=21:invalid 
node:node=CipherData
func=xmlSecEncCtxDecryptToBuffer:file=xmlenc.c:line=643:obj=unknown:subj=xmlSecEncCtxEncDataNodeRead:error=1:xmlsec 
library function failed:
func=xmlSecKeysMngrGetKey:file=keys.c:line=912:obj=unknown:subj=xmlSecKeysMngrFindKey:error=1:xmlsec 
library function failed:
func=xmlSecEncCtxEncDataNodeRead:file=xmlenc.c:line=884:obj=unknown:subj=unknown:error=45:key 
is not found:
func=xmlSecEncCtxDecryptToBuffer:file=xmlenc.c:line=643:obj=unknown:subj=xmlSecEncCtxEncDataNodeRead:error=1:xmlsec 
library function failed:
func=xmlSecEncCtxDecrypt:file=xmlenc.c:line=582:obj=unknown:subj=xmlSecEncCtxDecryptToBuffer:error=1:xmlsec 
library function failed:
Error: failed to decrypt file
Error: failed to decrypt file "sample-128.out"
         exit 1
;

-- 
Rich Salz, Chief Security Architect
DataPower Technology         http://www.datapower.com
XS40 XML Security Gateway    http://www.datapower.com/products/xs40.html
-------------- next part --------------
Private-Key: (1024 bit)
modulus:
    00:94:23:3d:c5:f4:ac:20:bb:9e:d0:7c:04:d9:7c:
    22:66:26:ad:24:36:85:c5:37:67:1a:81:13:ff:62:
    d1:fe:4f:70:34:7f:20:3a:83:43:00:48:09:23:45:
    7e:30:68:e0:99:2f:f0:e9:97:e9:08:c9:48:85:8d:
    b0:e4:bb:6b:cd:21:94:b8:f4:e0:ba:ea:0d:36:d5:
    b2:09:a4:31:eb:57:6f:a7:30:bf:97:0d:ce:6d:4c:
    e8:32:34:25:f6:76:b4:f7:00:bf:51:8e:3d:a0:b8:
    02:2f:51:02:ef:8b:c3:63:ee:c7:76:3c:bf:7c:87:
    8c:02:29:00:97:6c:ca:4e:77
publicExponent: 65537 (0x10001)
privateExponent:
    76:69:f1:40:22:c3:d0:ea:89:19:b8:79:1b:ec:49:
    87:04:55:94:c3:ec:8c:68:2c:07:98:b4:86:89:d4:
    b8:87:81:76:c5:43:da:e2:00:15:e2:7f:43:6d:92:
    60:5a:05:67:0e:56:72:33:57:39:09:c4:e9:d5:08:
    58:de:a4:5d:3b:89:bd:57:90:dc:40:94:3f:54:7a:
    d3:1a:ff:0d:ea:89:a8:4c:55:70:b0:3f:f9:c9:3d:
    08:04:2b:42:d0:b9:9b:66:20:72:76:02:4f:a2:15:
    7e:3b:e9:54:6f:27:02:31:d5:d4:66:1d:0d:d3:72:
    09:1c:b6:6b:04:af:b8:c9
prime1:
    00:e0:67:3b:eb:f6:34:75:07:99:40:b4:48:64:5b:
    68:7e:55:0b:3a:b1:21:4f:58:ff:af:3e:ac:8d:1e:
    c5:fd:f5:65:4a:b9:cf:00:f9:f2:ce:92:5b:1c:2f:
    ba:2b:d7:f4:7f:c1:14:07:e1:4b:d2:64:83:12:bc:
    33:80:36:a8:b3
prime2:
    00:a8:fe:f6:70:50:20:2b:d8:8e:3f:b3:e7:71:db:
    85:3a:d9:97:a5:6f:d5:17:0e:6e:4c:88:b1:22:26:
    f8:fa:70:82:eb:95:e2:88:c8:cc:c7:7e:3e:40:36:
    93:f9:5f:f3:c7:fb:82:71:c4:cd:da:1a:75:fa:b9:
    1b:15:14:3d:2d
exponent1:
    00:aa:c4:c4:eb:f7:4b:ca:37:83:1f:a3:52:67:d4:
    cb:fb:3f:9a:b1:0a:74:cf:de:69:8d:22:03:cb:cc:
    bc:5d:5b:ee:be:64:12:2c:ab:09:64:bc:29:cb:94:
    62:77:d4:fa:c2:71:db:5d:77:cc:ec:8a:02:d9:32:
    11:7b:23:9d:53
exponent2:
    00:93:38:d2:6d:d3:8f:c3:42:bb:e1:89:13:96:9f:
    db:b8:01:f9:57:19:4e:b4:f0:50:6c:82:24:76:11:
    27:93:dd:52:60:73:c9:ce:c9:c7:83:ff:59:b1:cd:
    1a:2a:04:4a:36:ac:c7:dd:de:ca:4a:38:05:11:b0:
    12:84:d1:85:dd
coefficient:
    00:a6:9a:06:bc:7d:47:25:2b:b4:52:c7:f7:d8:79:
    68:81:49:a4:da:e4:fe:13:15:28:a0:e7:da:91:90:
    07:f8:3a:3f:62:37:ab:90:bb:dd:10:8a:dc:af:59:
    13:9b:4e:8c:4a:3a:8b:bf:31:5f:91:d2:a9:df:6b:
    7c:f8:4c:07:9e
-----BEGIN RSA PRIVATE KEY-----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-----END RSA PRIVATE KEY-----


Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 0 (0x0)
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, ST=MA, L=Cambridge, O=DataPower, CN=Alice
        Validity
            Not Before: Nov 23 01:15:33 2002 GMT
            Not After : Nov 23 01:15:33 2012 GMT
        Subject: C=US, ST=MA, L=Cambridge, O=DataPower, CN=Alice
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
            RSA Public Key: (1024 bit)
                Modulus (1024 bit):
                    00:94:23:3d:c5:f4:ac:20:bb:9e:d0:7c:04:d9:7c:
                    22:66:26:ad:24:36:85:c5:37:67:1a:81:13:ff:62:
                    d1:fe:4f:70:34:7f:20:3a:83:43:00:48:09:23:45:
                    7e:30:68:e0:99:2f:f0:e9:97:e9:08:c9:48:85:8d:
                    b0:e4:bb:6b:cd:21:94:b8:f4:e0:ba:ea:0d:36:d5:
                    b2:09:a4:31:eb:57:6f:a7:30:bf:97:0d:ce:6d:4c:
                    e8:32:34:25:f6:76:b4:f7:00:bf:51:8e:3d:a0:b8:
                    02:2f:51:02:ef:8b:c3:63:ee:c7:76:3c:bf:7c:87:
                    8c:02:29:00:97:6c:ca:4e:77
                Exponent: 65537 (0x10001)
    Signature Algorithm: sha1WithRSAEncryption
        90:4a:7d:03:7b:84:96:76:b4:d8:cb:89:95:a9:5d:a4:72:89:
        37:3c:d1:30:d9:84:f6:58:b1:20:04:31:82:75:dd:1e:20:71:
        38:6e:66:e4:a4:a6:bd:ea:c6:97:47:a2:d4:bc:2a:13:67:ec:
        5c:d5:9f:f2:ad:3a:78:75:7e:a0:86:41:0e:94:7d:18:91:02:
        d1:2b:ba:16:81:0c:8f:63:72:e9:70:41:1c:b3:9b:b0:2b:77:
        ba:b9:30:b2:08:c7:70:8a:8d:a7:f5:da:43:75:9a:61:1d:1c:
        e8:ad:a5:f6:fe:d8:b3:3f:92:c0:48:11:a2:76:30:2e:45:d0:
        9b:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
-------------- next part --------------
A non-text attachment was scrubbed...
Name: sample-128.out
Type: text/xml
Size: 1554 bytes
Desc: not available
Url : http://www.aleksey.com/pipermail/xmlsec/attachments/20030527/5278552f/sample-128.xml


More information about the xmlsec mailing list