alpine xmlsec-dev 1.2.25 produces "unable to load xmlsec-openssl library."

Code Version

tested in pysaml v 4.5.0 and 4.0.3. xmlsec-dev 1.2.22 works fine, 1.2.25 seems to break things.

Expected Behavior

okta/saml login should work.

Current Behavior

on processing saml response from idp:

Python traceback:

  File "/usr/lib/python3.6/site-packages/saml2/client_base.py", line 599, in parse_authn_request_response
    binding, **kwargs)
  File "/usr/lib/python3.6/site-packages/saml2/entity.py", line 1137, in _parse_response
    response = response.loads(xmlstr, False, origxml=origxml)
  File "/usr/lib/python3.6/site-packages/saml2/response.py", line 510, in loads
    self._loads(xmldata, decode, origxml)
  File "/usr/lib/python3.6/site-packages/saml2/response.py", line 335, in _loads
    **args)
  File "/usr/lib/python3.6/site-packages/saml2/sigver.py", line 1743, in correctly_signed_response
    class_name(response), origdoc)
  File "/usr/lib/python3.6/site-packages/saml2/sigver.py", line 1558, in _check_signature
    raise SignatureError("Failed to verify signature")
saml2.sigver.SignatureError: Failed to verify signature

logs see the following otuput:

"Usage: xmlsec <command> [<options>] [<files>]

xmlsec is a command line tool for signing, verifying, encrypting and
decrypting XML documents. The allowed <command> values are:
  --help      	display this help information and exit
  --help-all  	display help information for all commands/options and exit
  --help-<cmd>	display help information for command <cmd> and exit
  --version   	print version information and exit
  --keys      	keys XML file manipulation
  --sign      	sign data and output XML document
  --verify    	verify signed document
  --sign-tmpl 	create and sign dynamicaly generated signature template
  --encrypt   	encrypt data and output XML document
  --decrypt   	decrypt data from XML document


Report bugs to http://www.aleksey.com/xmlsec/bugs.html

Written by Aleksey Sanin <[e-mail]>.

Copyright (C) 2002-2016 Aleksey Sanin <[e-mail]>. All Rights Reserved..
This is free software: see the source for copying information.

func=xmlSecCryptoDLLibraryCreate:file=dl.c:line=130:obj=unknown:subj=lt_dlopenext:error=7:io function failed:name="libxmlsec1-openssl"; errno=2
func=xmlSecCryptoDLGetLibraryFunctions:file=dl.c:line=436:obj=unknown:subj=xmlSecCryptoDLLibraryCreate:error=1:xmlsec library function failed:crypto=openssl
func=xmlSecCryptoDLLoadLibrary:file=dl.c:line=393:obj=unknown:subj=xmlSecCryptoDLGetLibraryFunctions:error=1:xmlsec library function failed: 
Error: unable to load xmlsec-openssl library. Make sure that you have
this it installed, check shared libraries path (LD_LIBRARY_PATH)
envornment variable or use "--crypto" option to specify different
crypto engine.
Error: initialization failed
func=xmlSecCryptoShutdown:file=app.c:line=65:obj=unknown:subj=unknown:error=9:feature is not implemented:details=cryptoShutdown
Error: xmlSecCryptoShutdown failed
Error: xmlsec crypto shutdown failed.
", "func=xmlSecCryptoDLLibraryCreate:file=dl.c:line=130:obj=unknown:subj=lt_dlopenext:error=7:io function failed:name="libxmlsec1-openssl"; errno=2
func=xmlSecCryptoDLGetLibraryFunctions:file=dl.c:line=436:obj=unknown:subj=xmlSecCryptoDLLibraryCreate:error=1:xmlsec library function failed:crypto=openssl
func=xmlSecCryptoDLLoadLibrary:file=dl.c:line=393:obj=unknown:subj=xmlSecCryptoDLGetLibraryFunctions:error=1:xmlsec library function failed: 
Error: unable to load xmlsec-openssl library. Make sure that you have
this it installed, check shared libraries path (LD_LIBRARY_PATH)
envornment variable or use "--crypto" option to specify different
crypto engine.
Error: initialization failed
func=xmlSecCryptoShutdown:file=app.c:line=65:obj=unknown:subj=unknown:error=9:feature is not implemented:details=cryptoShutdown
Error: xmlSecCryptoShutdown failed
Error: xmlsec crypto shutdown failed.

Possible Solution

recent xmlsec seems to have introduced a bug… maybe a commmand-line change?

Steps to Reproduce

1. build alpine-linux 3.8, apk install xmlsec-dev
2. attempt to validate a saml authentication post

[VojtechVitek]

@hjwp care to share your solution? We hit this very same problem today with Alpine 3.8.

https://bugs.alpinelinux.org/issues/9110 is still in NEW status.

[hjwp]

we’re having a go against a hand-compiled xmlsec 1.2.26 and it all seems to work fine, thanks again!