testXAdES failing since 2021-03-03

[Michael Stahl]

On 04.03.21 07:05, Mike Kaganski wrote:
> Hi!
> 
> Since yesterday, I see testXAdES failing locally:
> 

>> warn:xmlsecurity.comp:8804:9072:xmlsecurity/source/helper/xmlsignaturehelper.cxx:655: 
>> X509Data do not form a chain: certificate in cycle: 
>> CN=E9F172FF-9203-4DB8-A589-184C7A58C071

^ maybe that's the problem? this wouldn't happen before anyway

>> Assertion failed: signatureInfo.GetSigningCertificate(), file 
>> C:/lo/src/core/xmlsecurity/source/helper/xsecctl.cxx, line 761
>> abort() has been 

^ that's a consequence of the above

> 
> It is 100% reproducible.
> 

unfortunately not for me, windows make check of today's master passed 
successfully.

set a breakpoint in ::CheckX509Data(), the interesting argument is 
rX509CertInfos:

> $1 = std::__debug::vector of length 1, capacity 1 = {{
>     X509IssuerName = "CN=Xmlsecurity Intermediate Root CA,O=Xmlsecurity RSA Test,ST=England,C=UK",
>     X509SerialNumber = "4096",
>     X509Certificate = "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"...,
>     CertDigest = "9f6idfZUdT2NRpF9/BKy/HFdAOH9QuVjunxM9Zjt3Vo=",
>     X509Subject = ""

no trace of the "CN=some-uuid" that you get.

sorry, no idea...