lasso

Author	SHA1	Message	Date
Benjamin Dauvergne	e8eab67bbf	xmlsec: re-enable KeyValue nodes when reading KeyInfo descriptors (#85339 ) gitea/lasso/pipeline/head This commit looks good Details KeyValue has been disabled in libxmlsec >= 1.3.3, as it can be a security liability in other settings than SAML: (xmlsec-core) Disabled KeyValue and DEREncodedKeyValue XML nodes by default. Use the '--enabled-key-data' option for the xmlsec command line utility or update the 'keyInfoCtx->enabledKeyData' parameter if you need to re-enable these nodes (also see question 3.5 in the FAQ).	2024-01-29 17:50:16 +01:00
Benjamin Dauvergne	68c227ea4e	xmlsec: use XMLSEC_KEYINFO_FLAGS_LAX_KEY_SEARCH when writing encrypted keys (#85339 ) For compatibility with libxmlsec1>=1.3.0, as we do not use KeyName to reference the wrapping key: (API breaking change) Changed the key search to strict mode: only keys referenced by KeyInfo are used. To restore the old "lax" mode, set XMLSEC_KEYINFO_FLAGS_LAX_KEY_SEARCH flag on xmlSecKeyInfoCtx or use '--lax-key-search' option for XMLSec command line utility.	2024-01-29 17:50:16 +01:00
Benjamin Dauvergne	1acce02b68	xmlsec: replace xmlSecCryptoAppKeyLoad by xmlSecCryptoAppKeyLoadEx (#85339 ) xmlSecCryptoAppKeyLoad was removed from libxmlsec1 in version >= 1.3.3: (xmlsec-core) Removed previously deprecated functions, defines, etc. xmlSecCryptoAppKeyLoadEx was introduced in libxmlsec in version 1.2.37.	2024-01-29 17:50:16 +01:00
Benjamin Dauvergne	df4fea852a	misc: mute warning about implicit declaration of lasso_get_default_signature_method (#85339 )	2024-01-29 17:50:16 +01:00

1 changed files with 1 additions and 1 deletions

									
										2

lasso/xml/tools.c

										View File
									
				@ -64,7 +64,7 @@

				#include <glib.h>

				#include "xml.h"

				#include "xml_enc.h"

				#include "id-ff/server.h"

				#include "../id-ff/server.h"

				#include "saml-2.0/saml2_assertion.h"

				#include <unistd.h>

				#include "../debug.h"

Compare commits

4 Commits

16c9c97629 ... e8eab67bbf

2

lasso/xml/tools.c

View File

Compare commits

4 Commits 16c9c97629 ... e8eab67bbf

2 lasso/xml/tools.c Unescape Escape View File

4 Commits

16c9c97629 ... e8eab67bbf

2

lasso/xml/tools.c

View File