Hi,
with xmlsec1 1.3.13 (which I didn't upload yet to experimental...):
libtool: compile: x86_64-linux-gnu-g++ -DHAVE_CONFIG_H -I. -I../../../.. -Wdate-time -D_FORTIFY_SOURCE=2 -I../../../../include -I/usr/include/libxml2 -I/usr/include/giomm-2.68 -I/usr/lib/x86_64-linux-gnu/giomm-2.68/include -I/usr/include/gio-unix-2.0 -I/usr/include/libmount -I/usr/include/blkid -I/usr/include/glibmm-2.68 -I/usr/lib/x86_64-linux-gnu/glibmm-2.68/include -I/usr/include/sigc++-3.0 -I/usr/lib/x86_64-linux-gnu/sigc++-3.0/include -I/usr/include/glib-2.0 -I/usr/lib/x86_64-linux-gnu/glib-2.0/include -I/usr/include/sysprof-6 -pthread -DOPENSSL_API_COMPAT=0x10101000L -DXMLSEC_FUNCTION=__func__ -DXMLSEC_OPENSSL3_ENGINES=1 -DXMLSEC_NO_FTP=1 -DXMLSEC_NO_HTTP=1 -DXMLSEC_NO_MD5=1 -DXMLSEC_NO_MLDSA=1 -DXMLSEC_NO_MLKEM=1 -DXMLSEC_NO_SLHDSA=1 -DXMLSEC_NO_GOST=1 -DXMLSEC_NO_GOST2012=1 -DXMLSEC_NO_CRYPTO_DYNAMIC_LOADING=1 -I/usr/include/xmlsec1 -DXMLSEC_CRYPTO_OPENSSL=1 -I/usr/include/libxml2 -DXMLSEC_FUNCTION=__func__ -DXMLSEC_OPENSSL3_ENGINES=1 -DXMLSEC_NO_FTP=1 -DXMLSEC_NO_HTTP=1 -DXMLSEC_NO_MD5=1 -DXMLSEC_NO_MLDSA=1 -DXMLSEC_NO_MLKEM=1 -DXMLSEC_NO_SLHDSA=1 -DXMLSEC_NO_GOST=1 -DXMLSEC_NO_GOST2012=1 -DXMLSEC_NO_CRYPTO_DYNAMIC_LOADING=1 -I/usr/include/xmlsec1 -DXMLSEC_CRYPTO_OPENSSL=1 -I/usr/include/libxml2 -g -O2 -ffile-prefix-map=/home/rene/nordugrid-arc-7.2.0=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -c saml_util.cpp -fPIC -DPIC -o .libs/libarcxmlsec_la-saml_util.o
saml_util.cpp: In function 'std::string Arc::SignQuery(std::string, SignatureMethod, std::string&)':
saml_util.cpp:92:13: error: 'PEM_read_bio_RSAPrivateKey' was not declared in this scope
92 | rsa = PEM_read_bio_RSAPrivateKey(key_bio, NULL, NULL, NULL);
| ^~~~~~~~~~~~~~~~~~~~~~~~~~
saml_util.cpp:102:13: error: 'PEM_read_bio_DSAPrivateKey' was not declared in this scope
102 | dsa = PEM_read_bio_DSAPrivateKey(key_bio, NULL, NULL, NULL);
| ^~~~~~~~~~~~~~~~~~~~~~~~~~
make[6]: *** [Makefile:702: libarcxmlsec_la-saml_util.lo] Error 1
and the same later for another file
(src/hed/libs/ws-security/X509Token.cpp)
I believe this is due to the following in the release notes of xmlsec
1.3.13 (see https://github.com/lsh123/xmlsec/releases):
--- snip ---
(xmlsec-core, not backward compatible) Include files have been cleaned up to remove unnecessary includes,
fix circular dependencies, etc.
--- snip --
Patch is easy:
diff -Nru nordugrid-arc-7.2.0/debian/changelog nordugrid-arc-7.2.0/debian/changelog
--- nordugrid-arc-7.2.0/debian/changelog 2026-09-07 10:52:01.000000000 +0200
+++ nordugrid-arc-7.2.0/debian/changelog 2026-10-30 22:06:54.000000000 +0100
@@ -1,3 +1,10 @@
+nordugrid-arc (7.2.0-1.1) UNRELEASED; urgency=medium
+
+ * Non-maintainer upload.
+ *
+
+ -- Rene Engelhard <rene@debian.org> Fri, 30 Oct 2026 22:06:54 +0100
+
nordugrid-arc (7.2.0-1) unstable; urgency=medium
* 7.2.0 Release
diff -Nru nordugrid-arc-7.2.0/debian/patches/missing_openssl_include.diff nordugrid-arc-7.2.0/debian/patches/missing_openssl_include.diff
--- nordugrid-arc-7.2.0/debian/patches/missing_openssl_include.diff 1970-01-01 01:00:00.000000000 +0100
+++ nordugrid-arc-7.2.0/debian/patches/missing_openssl_include.diff 2026-10-30 22:06:31.000000000 +0100
@@ -0,0 +1,27 @@
+Subject: add missing <openssl/pem.h> for
+
+for PEM_read_bio_RSAPrivateKey
+
+xmlsec 1.3.13 cleans up their headers so this apparently is not included itself
+anymore by it
+
+--- nordugrid-arc-7.2.0.orig/src/hed/libs/ws-security/X509Token.cpp
++++ nordugrid-arc-7.2.0/src/hed/libs/ws-security/X509Token.cpp
+@@ -30,6 +30,7 @@
+ #ifdef CHARSET_EBCDIC
+ #include <openssl/ebcdic.h>
+ #endif
++#include <openssl/pem.h>
+
+ #include <arc/DateTime.h>
+ #include <arc/StringConv.h>
+--- nordugrid-arc-7.2.0.orig/src/hed/libs/xmlsec/saml_util.cpp
++++ nordugrid-arc-7.2.0/src/hed/libs/xmlsec/saml_util.cpp
+@@ -31,6 +31,7 @@
+ #ifdef CHARSET_EBCDIC
+ #include <openssl/ebcdic.h>
+ #endif
++#include <openssl/pem.h>
+
+ #include "XmlSecUtils.h"
+ #include "saml_util.h"
diff -Nru nordugrid-arc-7.2.0/debian/patches/series nordugrid-arc-7.2.0/debian/patches/series
--- nordugrid-arc-7.2.0/debian/patches/series 2026-09-07 10:52:01.000000000 +0200
+++ nordugrid-arc-7.2.0/debian/patches/series 2026-10-30 22:05:30.000000000 +0100
@@ -1,2 +1,3 @@
# Disable failing test on GNU/Hurd
0001-Disable-test-with-random-failures-on-GNU-Hurd.patch
+missing_openssl_include.diff
After that it continues to
make check-TESTS
make[7]: Entering directory '/home/rene/nordugrid-arc-7.2.0/src/hed/libs/ws-security/test'
...
OK (3)
PASS: UsernameTokenTest
.There is not wsu:Id attribute in soap body, add a new one
Envelope: <soap-env:Envelope xmlns:wsa="http://www.w3.org/2005/08/addressing" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd" xmlns:soap-enc="http://www.w3.org/2003/05/soap-encoding" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:soap-env="http://www.w3.org/2003/05/soap-envelope"> <soap-env:Header xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsse11="http://docs.oasis-open.org/wss/oasis-wss-wssecurity-secext-1.1.xsd"> <wsse:Security><wsse:BinarySecurityToken wsu:Id="binarytoken" ValueType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-x509-token-profile-1.0#X509v3" EncodingType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-soapmessage-security-1.0#Base64Binary">MIIDZTCCAk2gAwIBAgIBATANBgkqhkiG9w0BAQsFADAuMQ0wCwYDVQQKDARHcmlk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</wsse:BinarySecurityToken><Signature xmlns="http://www.w3.org/2000/09/xmldsig#">
<SignedInfo>
<CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
<SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/>
<Reference URI="#body">
<Transforms>
<Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/>
<Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
</Transforms>
<DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
<DigestValue>RblKQ4HDqgiPLA/SsSJVAeeDXO+Kh+pRxYb0as79CZY=</DigestValue>
</Reference>
<Reference URI="#binarytoken">
<Transforms>
<Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/>
<Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
</Transforms>
<DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
<DigestValue>sx4Wn9xceaHmamSPQ8imz/EiElZuxHUUdFL5zqHth8E=</DigestValue>
</Reference>
</SignedInfo>
<SignatureValue>Oo/69LLTxuy5gMuIygiVVYMdJDuYOzhQkhfgUOIiCqLX+RTHKhVjVZU1kzjLJ+YA
BO/Rzftc8vFT8Mrmt4jLu+XNsgCzEOMTIV31OrafSs852liOeiMcPxGlJRUYmhPQ
PkP5lJpzCgG0ssB3APHckCgNZdZyJ3TeL5Hbi38rGuuJXc54N2t+aCkRgdxYjb8q
AlJVH8706S814kFvKNlzb/R5bweQF0zO34FN1oOpR+OKfc8Ant06nw3A5E8Fzhc6
2jCbU39E5JfD8PePVqY7M1AGSSw/CgZvC+pEx0vxNZAPLhy+UY03scO+bSJeFzoe
p2czCEJ0tQ1whVXNs1blfQ==</SignatureValue>
<KeyInfo><wsse:SecurityTokenReference><wsse:Reference URI="#binarytoken"/></wsse:SecurityTokenReference></KeyInfo>
</Signature></wsse:Security></soap-env:Header> <soap-env:Body wsu:Id="body"> <f:Delete xmlns:f="http://example.com/fabrikam"> <maxCount>42</maxCount> </f:Delete> </soap-env:Body></soap-env:Envelope>
Succeed to verify the signature in SOAP message
func=xmlSecKeyInfoNodeRead:file=keyinfo.c:line=147:obj=unknown:subj=unknown:error=27:unexpected node:node=SecurityTokenReference
Succeed to verify the signature in SOAP message (with trusted certificate checking)
./bin/bash: line 6: 2537644 Segmentation fault srcdir=. ${dir}$tst
FAIL: X509TokenTest
.Assertion: <saml2:Assertion xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion" ID="a3562826-bcc5-491e-9a8f-22f25447d5ed" IssueInstant="2026-10-30T21:03:08Z" Issuer="CN=localhost,OU=ARC,O=Grid" Version="2.0"><saml2:Conditions NotBefore="2026-10-30T21:03:08Z" NotOnOrAfter="2026-10-31T09:03:08Z"/><saml2:Subject><saml2:NameID NameQualifier="knowarc.eu" Format="urn:oasis:names:tc:SAML:1.1:nameid-format:X509SubjectName">CN=localhost,OU=ARC,O=Grid</saml2:NameID><saml2:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:holder-of-key"><saml2:SubjectConfirmationData><ds:KeyInfo><ds:KeyValue>MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXt9PEa6C20rs+qSv1+N
RjnqJOIY5lzIWxy5GmqjuA9jwvbLE40uOIEzooC6vZXy11gM8q2YBge+W+nttRWh
bolmh+o1dDIokX7dY6zDXz/riaEeNY34XQaKmd7rPtKo9/kW9m1jfO/mUW4ANiGD
/HYPXRuI3ynolE7KYLzdfBxZKU1fOox6qSfJ/wPM0nJ1dLDKGiiBB1S3PhWtCkil
1bFJhfSc0X602ykD8JopbEBllbKTENbSoux5wnJ2grwMa6STJJL9bPFcHj9ty34D
cEJmJUiVvcFyX+FZRpr9b3/ezZ9YKQT3VQgCtmYASRra81pOa5z/F2do/jd7jRl8
8wIDAQAB</ds:KeyValue></ds:KeyInfo></saml2:SubjectConfirmationData></saml2:SubjectConfirmation></saml2:Subject><saml2:AttributeStatement><saml2:Attribute Name="email" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:unspecified"/></saml2:AttributeStatement><Signature xmlns="http://www.w3.org/2000/09/xmldsig#">
<SignedInfo>
<CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
<SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/>
<Reference URI="#a3562826-bcc5-491e-9a8f-22f25447d5ed">
<Transforms>
<Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/>
<Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
</Transforms>
<DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
<DigestValue>t9CF0Py5SjdLk4/58qtWLeDMBqgECHdcI+VLcryZnB4=</DigestValue>
</Reference>
</SignedInfo>
<SignatureValue>PRUXH5JBiVKqVQ/RhjdoS0dM5MKod3RENWWxBL+Gk34e3ar3v+0CDWG6Dr1Zwmr7
NLKUmYtn3R1n2GLoX894nsilHUgmNAayNc+SNQFqu9gMoZRghimi/uL+wbiy1JAi
KXsRByo+I+wNdgEonBeAfy0pGBz1Y3thTu/VOPDShkYE4VEQxGkWOFpEUWuKsFQU
UXxhYO8TCxAHHxX18xA4SMbxwTq58M6Xqj4UBnSBpFpeFCXmFRapxBMYBtpz/y6H
cqNqAFqWzouYSr+b45Lh4xBSE3z13s1RK/rQUj3zJpIll2Us0L7IpULYqCwotfE9
5Yss/lAqbnIHibrgtIf3BA==</SignatureValue>
<KeyInfo>
<X509Data>
<X509Certificate>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</X509Certificate>
</X509Data>
</KeyInfo>
</Signature></saml2:Assertion>
There is not wsu:Id attribute in soap body, add a new one
WSSE: <wsse:Security xmlns:wsse11="http://docs.oasis-open.org/wss/oasis-wss-wssecurity-secext-1.1.xsd" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd"><saml2:Assertion xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion" ID="a3562826-bcc5-491e-9a8f-22f25447d5ed" IssueInstant="2026-10-30T21:03:08Z" Issuer="CN=localhost,OU=ARC,O=Grid" Version="2.0"><saml2:Conditions NotBefore="2026-10-30T21:03:08Z" NotOnOrAfter="2026-10-31T09:03:08Z"/><saml2:Subject><saml2:NameID NameQualifier="knowarc.eu" Format="urn:oasis:names:tc:SAML:1.1:nameid-format:X509SubjectName">CN=localhost,OU=ARC,O=Grid</saml2:NameID><saml2:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:holder-of-key"><saml2:SubjectConfirmationData><ds:KeyInfo><ds:KeyValue>MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXt9PEa6C20rs+qSv1+N
RjnqJOIY5lzIWxy5GmqjuA9jwvbLE40uOIEzooC6vZXy11gM8q2YBge+W+nttRWh
bolmh+o1dDIokX7dY6zDXz/riaEeNY34XQaKmd7rPtKo9/kW9m1jfO/mUW4ANiGD
/HYPXRuI3ynolE7KYLzdfBxZKU1fOox6qSfJ/wPM0nJ1dLDKGiiBB1S3PhWtCkil
1bFJhfSc0X602ykD8JopbEBllbKTENbSoux5wnJ2grwMa6STJJL9bPFcHj9ty34D
cEJmJUiVvcFyX+FZRpr9b3/ezZ9YKQT3VQgCtmYASRra81pOa5z/F2do/jd7jRl8
8wIDAQAB</ds:KeyValue></ds:KeyInfo></saml2:SubjectConfirmationData></saml2:SubjectConfirmation></saml2:Subject><saml2:AttributeStatement><saml2:Attribute Name="email" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:unspecified"/></saml2:AttributeStatement><Signature xmlns="http://www.w3.org/2000/09/xmldsig#">
<SignedInfo>
<CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
<SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/>
<Reference URI="#a3562826-bcc5-491e-9a8f-22f25447d5ed">
<Transforms>
<Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/>
<Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
</Transforms>
<DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
<DigestValue>t9CF0Py5SjdLk4/58qtWLeDMBqgECHdcI+VLcryZnB4=</DigestValue>
</Reference>
</SignedInfo>
<SignatureValue>PRUXH5JBiVKqVQ/RhjdoS0dM5MKod3RENWWxBL+Gk34e3ar3v+0CDWG6Dr1Zwmr7
NLKUmYtn3R1n2GLoX894nsilHUgmNAayNc+SNQFqu9gMoZRghimi/uL+wbiy1JAi
KXsRByo+I+wNdgEonBeAfy0pGBz1Y3thTu/VOPDShkYE4VEQxGkWOFpEUWuKsFQU
UXxhYO8TCxAHHxX18xA4SMbxwTq58M6Xqj4UBnSBpFpeFCXmFRapxBMYBtpz/y6H
cqNqAFqWzouYSr+b45Lh4xBSE3z13s1RK/rQUj3zJpIll2Us0L7IpULYqCwotfE9
5Yss/lAqbnIHibrgtIf3BA==</SignatureValue>
<KeyInfo>
<X509Data>
<X509Certificate>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</X509Certificate>
</X509Data>
</KeyInfo>
</Signature></saml2:Assertion><Signature xmlns="http://www.w3.org/2000/09/xmldsig#">
<SignedInfo>
<CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
<SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/>
<Reference URI="#MsgBody">
<Transforms>
<Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/>
<Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
</Transforms>
<DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
<DigestValue>k8otDjSRsodAReh+D9LR1EA7dka/fmSBZLDzO+uMBvM=</DigestValue>
</Reference>
</SignedInfo>
<SignatureValue>io7KrYGYrtYzUqRoGcXMyMarzWhzjwEwPm9G7U/Tra2bz4d8JLjMN6aF7nxHeEbg
4hRESPF+nna5iu5+cAAkQnHICNGA3Azai4Q25t6LCyMDqsReHv3yx5SGGP2aWaDN
dQ8/zd5iqlIR+Yiw9XYDPTM6Ff2wcENgLeJZaLtJlHjZS3aT3qGMdnXZOh4GtKdX
1nyJiXZ01EhbScMnCBvFlMBWnzf0TTpqVh/L8z7tBWEUVWj4NNIlnbW7+K4maNPR
iHhEFZWmh+3IEQSZMkRsP91/xr0r92uFvijwlCIOhmHkey/q19J7WMunVYmibXaC
KKFuCRe8KPfM0QbsKaLw3A==</SignatureValue>
<KeyInfo><wsse:SecurityTokenReference wsu:Id="STR1" wsse11:TokenType="http://docs.oasis-open.org/wss/oasis-wss-saml-token-profile-1.1#SAMLV2.0"><wsse:KeyIdentifier wsu:Id="abcde" ValueType="http://docs.oasis-open.org/wss/oasis-wss-saml-token-profile-1.0#SAMLID">a3562826-bcc5-491e-9a8f-22f25447d5ed</wsse:KeyIdentifier></wsse:SecurityTokenReference></KeyInfo>
</Signature></wsse:Security>
Succeed to verify the signature in saml:assertion
Succeed to verify the signature in wsse:security
OK (1)
PASS: SAMLTokenTest
===============================================
1 of 3 tests failed
Please report to http://bugzilla.nordugrid.org/
===============================================
make[7]: *** [Makefile:832: check-TESTS] Error 1
make[7]: Leaving directory '/home/rene/nordugrid-arc-7.2.0/src/hed/libs/ws-security/test'
make[6]: *** [Makefile:960: check-am] Error 2
make[6]: Leaving directory '/home/rene/nordugrid-arc-7.2.0/src/hed/libs/ws-security/test'
make[5]: *** [Makefile:950: check-recursive] Error 1
make[5]: Leaving directory '/home/rene/nordugrid-arc-7.2.0/src/hed/libs/ws-security'
make[4]: *** [Makefile:556: check-recursive] Error 1
make[4]: Leaving directory '/home/rene/nordugrid-arc-7.2.0/src/hed/libs'
make[3]: *** [Makefile:597: check-recursive] Error 1
make[3]: Leaving directory '/home/rene/nordugrid-arc-7.2.0/src/hed'
make[2]: *** [Makefile:543: check-recursive] Error 1
make[2]: Leaving directory '/home/rene/nordugrid-arc-7.2.0/src'
make[1]: *** [Makefile:620: check-recursive] Error 1
make[1]: Leaving directory '/home/rene/nordugrid-arc-7.2.0'
dh_auto_test: error: make -j16 check TESTSUITEFLAGS="-j16 --verbose" VERBOSE=1 returned exit code 2
make: *** [debian/rules:16: binary] Error 25
dpkg-buildpackage: error: debian/rules binary subprocess failed with exit status 2
debuild: fatal error at line 1185:
dpkg-buildpackage -us -uc -ui -b failed
which looks like the same as in #1140625..
Regards,
Rene