Questions tagged [xmlsec]

112 questions
0
votes
1 answer

Why can't I decrypt this xmlsec encrypted WSSE enhanced soap message?

I have used py-wsse from PIP but it seems broken. I've refactored/fixed it up to Add X509 standards : Signature block with signing, and public/private key usage via a certificate I was able to encrypt/decrypt this using plain old XMLSEC, after…
Kent Wong
  • 566
  • 1
  • 6
  • 20
0
votes
1 answer

XMLSEC error: "failed to load certificate"

I'm trying to use the python-saml toolkit (or part of the code in it) in my project but I'm having some problems I will try to address in this question. In my local machine (ubuntu 18.04) I got everything up and running but when it comes to install…
0
votes
1 answer

How to validate signature successfully when there are two id attributes in an assertion node?

I have below SAML v2 XML. The signature validation fails as there are two ID attributes in the assertion node. The ID is having wrong value and the value pointed by referenceURI is in Id attribute. Sample below.
user235273
0
votes
2 answers

XMLSEC installation error, Windows-7

Im trying to install xmlsec (with pip) but it is throwing: error: pkg-config is not installed. Im using Python3.6 on windows 7. Thanks in advance for any suggestion.
Jcc.Sanabria
  • 629
  • 1
  • 12
  • 22
0
votes
1 answer

Signer Gem and XMLSEC format - Adding Modulus and Exponent in xml

I'm trying to get a xmlsec format with signer but I can´t create this. I'm trying to create this format: https://gist.github.com/patojimenez/84d22500611620b8b3bebea30243108a Has anyone worked with this format? I tried with the single…
0
votes
1 answer

Convert SSL private key to a string

From pkcs12 file, I extracted the private key and cert using the following - PKCS12_parse(p12, argv[2], &privatekey, &cert, &ca); Now, I need to use the privatekey and cert to sign an XML using xmlsec libraries. However, xmlSecCryptoAppKeyLoad()…
user162916
  • 61
  • 2
  • 9
0
votes
2 answers

Set Program to use LIBXML_PARSEHUGE

I am using the commandline app xmlsec to encrypt and decrypt files. I got an XML File with a node at 40 MB of size. I already found out i need to set LIBXML_PARSEHUGE to parse nodes bigger than 10 MB Does anyone know how to enable this? I searched…
chenino
  • 454
  • 2
  • 7
  • 19
0
votes
1 answer

To keep X509Data inside SecurityTokenReference

I have a requirement in java to digital sign the SOAP Body XML content and have decided to implement it using Apache Santuario library. The following libraries are in use. wss4j-2.1.jar xalan-2.7.2.jar xmlsec-1.5.8.jar The resultant SOAP Header…
VenkatRam
  • 51
  • 3
  • 11
0
votes
1 answer

Verify XML Signature with libxmlsec1

I can verify a XML Signature with Apache Santuario XML security for Java. The code is like: ByteArrayInputStream bais = new ByteArrayInputStream(readData("signature.xml")); DocumentBuilderFactory f =…
Wayne Huang
  • 495
  • 6
  • 17
0
votes
1 answer

org.opensaml.xml.validation.ValidationException: Apache xmlsec IdResolver could not resolve the Element for id reference

I am trying to validate a SAML Assertion signature but getting the following error: org.opensaml.xml.validation.ValidationException: Apache xmlsec IdResolver could not resolve the Element for id reference: P_ZoIp8bCaGCKuf8Tqy1EckkF4_ at…
Narendra
  • 5,635
  • 10
  • 42
  • 54
0
votes
1 answer

Signing with xmlsec

I can't seem to get any xmlsec1 sign call to be working; I tried several scenarios now, and the best I can come up with is the following error message: root@sbe:/srv/jarsigner-keystore# xmlsec1 sign --privkey-pem MEDELEXIS_SWD_SRV.p12.key.pem…
col.panic
  • 2,944
  • 4
  • 25
  • 31
0
votes
1 answer

Can the XML signature be last child element under root node?

As per w3c xmlsec specification which can be found at http://www.w3.org/TR/2002/REC-xmldsig-core-20020212/#sec-Overview , I would like to know are we allowed to add the xml signature element as the last child element under the root node ? I tried to…
Vinod Jayachandran
  • 3,726
  • 8
  • 51
  • 88
0
votes
1 answer

Does xmlsec returns a 0 on exit?

I need to know, if xmlsec returns 0 if file is well authenticated?
Sławosz
  • 11,187
  • 15
  • 73
  • 106
0
votes
1 answer

JBoss AS 7.1 dependency conflicts due the xfire-1.2.6 dependencies wss4j-1.5.1 and xmlsec 1.3.0

I'm trying to deploy legacy code on JBoss AS 7.1 but I'm struggling with conflicting dependencies due wss4j and xmlsec I've created a jboss-deployment-structure.xml
Stijn Vanpoucke
  • 1,425
  • 3
  • 17
  • 30
0
votes
2 answers

Things to do for add a reference to keyInfo

I need to put a reference on Keyinfo in my cades signature (in every case), i see that in SignerBES.java class xades4j process reference in the statement: Map referenceMappings = this.dataObjectDescsProcessor.process( …
Michele Bortolato
  • 707
  • 2
  • 11
  • 27