xmlsectool bug

[Ian Young]

On 11 Dec 2013, at 16:04, Tom Scavo <trscavo at gmail.com> wrote:

> This is a second-hand report:
> 
> The issue was also easily verified with xmllint on a RHEL 6 system.
> # xmllint --valid --noout InCommon-metadata.xml

If I wget the file from the origin, then do "xmllint --valid --noout" on it, it complains that the file has no DTD (which is correct). If I retry with just "xmllint --noout", it accepts it.

This is on CentOS 6.4.

I'd be interested in the output of "xmllint --version" and a description of how the input file was acquired and whether any changes were made to it after it was downloaded. For example, was some change made to include a DTD to allow --valid to work, and if so how.

> InCommon-metadata.xml:15577: parser error : Input is not proper UTF-8,
> indicate encoding !
> Bytes: 0xB9 0x73 0x20 0x70
> amespace" xml:lang="en">The University of Maryland, Baltimore (UMB) is the State

In the original file, the sequence is 0xC2, 0xB9 which is properly encoded. If the 0xC2 was dropped for some reason, it would become invalid as above, as 0xBx octets can't appear as the first octet in an encoding, only subsequent ones.

	-- Ian



-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 5943 bytes
Desc: not available
Url : http://shibboleth.net/pipermail/dev/attachments/20131211/96ff6033/attachment.bin