XMLSecurity exception while decrypting: Errors occurred during de-serialisation

[Scott Cantor]

> On Feb 19, 2026, at 9:34 AM, Peter Schober via users <users at shibboleth.net> wrote:
> 
> Scott Cantor via users <users at shibboleth.net> [2026-02-19 14:50 CET]:
>> That is where the exception is raised. The decrypted data is being
>> handled as UTF-16 and then turned into UTF-8 for parsing by Xerces
>> using a parser instance Santuario creates internally.
>> It's one of the places we have the least control over anything that
>> goes on and none of it was originally any code I wrote.
> 
> Of course it happens *there*. ;)

Notably it does a horrible job of capturing any error data from Xerces. It detects that "> 1 error was reported" and then just throws the exception with that message, never doing anything with the errors Xerces reported to help diagnose what was wrong.

-- Scott