Questions tagged [xmlsec]
112 questions
4
votes
2 answers
XMLDSig: Do I have to specify Reference URI in an enveloped signature
Suppose I have such xml:
Empire Burlesque
Bob Dylan
USA
…
mdzh
- 1,030
- 2
- 17
- 34
3
votes
1 answer
How to sign XML using xmlsec and CSP?
I need to sign XML using xmlsec and certificate provided by csp. (C++, Linux only)
Here is the simplified code.
HCERTSTORE hStore = NULL;
hStore = CertOpenStore();
PCCERT_CONTEXT pContext = CertFindCertificateInStore(hStore...);
//xml preparation…
Nem
- 336
- 3
- 8
- 22
3
votes
1 answer
XML External Entity (XXE) - External Parameter entities and External General Entities vulnerabilities
To Prevent XXE attacks, I have disabled the features below as recommended for Java DocumentBuilderFactory - https://www.owasp.org/index.php/XML_External_Entity_(XXE)_Prevention_Cheat_Sheet.
…
Venkata Rami Reddy
- 33
- 1
- 4
3
votes
0 answers
AWS Lambda, Python: Unable to import module that is definitely within Zip package (xmlsec)
I am using the Python module xmlsec in my lambda function. The import looks like import dm.xmlsec.binding as xmlsec. The proper directory structure exists. at the root of the archive there is dm/xmlsec/binding/__init__.py and the rest of the module…
Marty
- 2,104
- 2
- 23
- 42
3
votes
0 answers
SAML-xmlsec1 verification
I signed my saml response xml with xmlsec command:
xmlsec1 --sign --privkey-pem keys/privkey.pem,keys/cert.pem --id-attr:ID "urn:oasis:names:tc:SAML:2.0:protocol:Assertion" --output signed_res.xml saml_response.xml
Here is my XML:
Deepak Verma
- 653
- 1
- 10
- 24
3
votes
2 answers
Disable debug output in libxml2 and xmlsec
In my software, I use libxml2 and xmlsec to manipulate (obviously) XML data structures. I mainly use XSD schema validation and so far, it works well.
When the data structure input by the client doesn't match the XSD schema, libxml2 (or xmlsec)…
ereOn
- 53,676
- 39
- 161
- 238
3
votes
2 answers
How to generate DigestValue and SignatureValue for enveloped XML Signature using PHP/linux tool
i have been trying to find some examples on how to generate DigestValue and SignatureValue for XML signature (WSDL).
Below is a sample SOAP for the application:
mohdyusuf
- 351
- 1
- 3
- 12
3
votes
1 answer
CXF2.7.2 + Weblogic 12c + Java 1.7
There is an issue with running CXF application of Weblogic 12c. Exception is as following:
org.apache.jcp.xml.dsig.internal.dom.DOMXMLSignatureFactory cannot be cast to javax.xml.crypto.dsig.XMLSignatureFactory
The interesting here is that…
Milkywayfarer
- 910
- 1
- 9
- 25
3
votes
3 answers
How to build xmlsec on Windows
I am trying to build xmlsec on Windows... I am not an experienced C/C++ developer and not really familiar with the build process if something along the lines of "make ... make install" doesn't do the trick.
xmlsec comes with a Win32 subdirectory, a…
Mike Peat
- 445
- 1
- 6
- 14
2
votes
1 answer
how to define a crypto library for xmlsec
I want to write XML signature verification code in C using any available open source libraries.I am trying to use xmlsec. I installed the dependency libraries mentioned in http://www.zlatkovic.com/libxml.en.html. but when I try to compile the…
LoyalBanana
- 183
- 6
- 17
2
votes
1 answer
XMLSEC Python on MacBook m1
Installed python lib xmlsec on macbook (M1).
When I try to run the .py program with import xmlsec - I get an error:
import xmlsec
ImportError: dlopen(/PycharmProjects/pythonProject2/venv/lib/python3.7/site-packages/xmlsec.cpython-37m-darwin.so,…
Alexey
- 21
- 3
2
votes
2 answers
ImportError: No module named dm.xmlsec.binding
I am trying to implement SAML2.0 in my Django(version 1.7) application in Python 2.7 by using oneLogin python-saml library (https://github.com/onelogin/python-saml), but I am getting this error below:
import dm.xmlsec.binding as xmlsec
ImportError:…
Niraj Rathod
- 21
- 1
- 2
2
votes
0 answers
Xmlsec library to implement Django SAML2 Authentication
I'll use this Django package to integrate SAML2 Authentication into my django APP : https://github.com/fangli/django-saml2-auth.
This package requires xmlsec libary, unfortunately i am using windows server where i will install this library.
I've…
youssef hassoun
- 340
- 1
- 4
- 18
2
votes
1 answer
How to force libxml1 to ignore cert in file and use a cert I pass it on the command line?
I am trying to verify a signed XML SAML Response. It contains a spoofed cert in the XML.
I have the known real cert in a PEM file.
When I run
xmlsec1 --verify --pubkey-cert-pem pubkey-real.pem \
--id-attr:ID…
Krystian Cybulski
- 10,789
- 12
- 67
- 98
