http://www.google.com/search?hl=en&q=example+XPath+%22local-name()%22+&btnG=Search
Cook, Sean D (Genworth) wrote:
Not familiar with that can you point me toward some light reading? Or
give me an example?
Sent from my blackberry.
----- Original Message -----
From: Aleksey Sanin <[email protected]>
To: Cook, Sean D (Genworth)
Cc: [email protected] <[email protected]>
Sent: Fri May 22 16:28:27 2009
Subject: Re: [xmlsec] xmlsec encrypt xpath
Yeah, unfortunately, command line tool is not very friendly to
namespaces in xpath. I think the only option to get what you want
is to use local-name() in the XPath expression.
Aleksey
Cook, Sean D (Genworth) wrote:
Greetings!
I am trying to encrypt an element of a saml artifact (the assertion)тАж
I
have tried using the following xpath:
--node-xpath /samlp:Response/saml:Assertion
This works in perls XML::XPath to identify the appropriate node, but I
get an undefined namespace prefix when trying to encrypt. I have
pared
down the xml to make sure there was nothing interfering and still no
luck:
/apps/xmlsec/bin/xmlsec1 encrypt --privkey-pem keys/private.key
--pubkey-pem keys/pub.key --session-key des-192 --xml-data
saml-artifact.xml --output doc-encrypted-xpath.xml --node-xpath
/samlp:Response/saml:Assertion session-key-template.xml
XPath error : Undefined namespace prefix
xmlXPathEval: evaluation failed
Error: failed to evaluate xpath expression
Error: failed to load file "saml-artifact.xml"
Error: failed to encrypt file with template "session-key-template.xml"
# content of saml-artifact.xml
<?xml version="1.0" encoding="UTF-8"?>
<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol"
ID="djlmjbkjflgnbankboaepihbcckcgcpkmlgfmbpc" Version="2.0"
IssueInstant="2009-05-22T18:23:51Z"
Destination="https://somedestination/post";>
<saml:Assertion xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion"
Version="2.0" xml:id="ngaognjiljmkbelegfgnighebokoakanaalhnepj"
ID="ngaognjiljmkbelegfgnighebokoakanaalhnepj"
IssueInstant="2009-05-22T18:23:51Z">
</saml:Assertion>
</samlp:Response>
Can you point me in the right direction?
------------------------------------------------------------------------
_______________________________________________
xmlsec mailing list
[email protected]
http://www.aleksey.com/mailman/listinfo/xmlsec
_______________________________________________
xmlsec mailing list
[email protected]
http://www.aleksey.com/mailman/listinfo/xmlsec
