Can't sign file on new platform

[Ted010101]

Hi,

We're moving to a new platform and our xmlsec1 usage of signing a file is failing.

/usr/bin/xmlsec1 --sign --privkey-pem private_key.pem --pubkey-pem public_key.pem example_file.txt
func=xmlSecTransformNodeRead:file=transforms.c:line=1314:obj=unknown:subj=xmlSecTransformIdListFindByHref:error=1:xmlsec library function failed:href=http://www.w3.org/2000/09/xmldsig#rsa-sha1
func=xmlSecTransformCtxNodeRead:file=transforms.c:line=595:obj=SignatureMethod:subj=xmlSecTransformNodeRead:error=1:xmlsec library function failed:
func=xmlSecDSigCtxProcessSignedInfoNode:file=xmldsig.c:line=661:obj=SignatureMethod:subj=xmlSecTransformCtxNodeRead:error=1:xmlsec library function failed:
func=xmlSecDSigCtxProcessSignatureNode:file=xmldsig.c:line=497:obj=unknown:subj=xmlSecDSigCtxProcessSignedInfoNode:error=1:xmlsec library function failed:
func=xmlSecDSigCtxSign:file=xmldsig.c:line=291:obj=unknown:subj=xmlSecDSigCtxProcessSignatureNode:error=1:xmlsec library function failed:
Error: signature failed
Error: failed to sign file "example_file.txt"

New Platform

xmlsec1 1.2.29 (openssl)
OpenSSL 3.2.2 4 Jun 2024 (Library: OpenSSL 3.2.2 4 Jun 2024)

Old Platform

xmlsec1 1.2.20 (openssl)
OpenSSL 1.0.2k-fips 26 Jan 2017

Any help would be appreciated. Thanks.

[lsh123]

Can you get a list of supported transforms and share output:

/usr/bin/xmlsec1 --list-transforms

SHA1 is pretty old and might have been disabled. You should see "rsa-sha1" in the list if it is supported.

[Ted010101]

It was not in the list, I'll look into using sha256. Thanks for your help!!!

[lsh123]

Sure, alternatively you can compile xmlsec yourself and configure / use any ciphers you want.