xmlsec 1.3.0 uses different order of X509Certificate elements.

test.sh

@@ -189,8 +189,12 @@ sed -i 's#^<?xml version='"'"'1\.0'"'"' encoding='"'"'UTF-8'"'"'?>$#<?xml versio
 sed -i -E 's#([a-zA-Z0-9=])</X509Certificate>#\1\n</X509Certificate>#' tmp/output-dir/signed-internal/*
 
 XMLSEC_LAX_KEY_SEARCH=--lax-key-search
+PKG_SIGNED=tests/pkg-signed-xmlsec-1.3
+REPODATA_SWIDTAGS=tests/repodata-swidtags-xmlsec-1.3.xml
 if xmlsec1 --version | grep '^xmlsec1 1\.2\.' ; then
 	XMLSEC_LAX_KEY_SEARCH=
+	PKG_SIGNED=tests/pkg-signed-xmlsec-1.2
+	REPODATA_SWIDTAGS=tests/repodata-swidtags-xmlsec-1.2.xml
 fi
 
 _RPM2SWIDTAG_RPMDBPATH=$(pwd)/tmp/rpmdb $BIN/rpm2swidtag $RPM2SWIDTAG_OPTS --tag-creator=example.test --output-dir=tmp/output-dir/sign-input/. -a --preserve-signing-template --authoritative
@@ -202,10 +206,10 @@ done
 for i in tmp/output-dir/signed-internal/* ; do
 	xmlsec1 --verify --trusted-pem $SIGNDIR/test-ca.crt $i
 done
-diff -ru tmp/output-dir/signed-internal tests/pkg-signed
+diff -ru tmp/output-dir/signed-internal $PKG_SIGNED
 sed -i -E 's#([a-zA-Z0-9=])</X509Certificate>#\1\n</X509Certificate>#' tmp/output-dir/signed-pkcs12/* tmp/output-dir/signed-pem/*
-diff -ru tmp/output-dir/signed-pkcs12 tests/pkg-signed
-diff -ru tmp/output-dir/signed-pem tests/pkg-signed
+diff -ru tmp/output-dir/signed-pkcs12 $PKG_SIGNED
+diff -ru tmp/output-dir/signed-pem $PKG_SIGNED
 
 rm -rf tmp/output-dir
 _RPM2SWIDTAG_RPMDBPATH=$(pwd)/tmp/rpmdb $BIN/rpm2swidtag $RPM2SWIDTAG_OPTS --tag-creator=loong-tag-creator-regid-resulting-filename-will-fit-max-filename-length-on-fuse-overlayfs-of-251-bytes --output-dir=tmp/output-dir pkg1-1.3.0
@@ -560,7 +564,7 @@ $BIN/rpm2swidtag --repo=tmp/repo $RPM2SWIDTAG_OPTS --authoritative --tag-creator
 )
 zcat tmp/repo/repodata/???*-swidtags.xml.gz > tmp/repo/swidtags.xml
 sed -i -E 's#([a-zA-Z0-9=])</X509Certificate>#\1\n</X509Certificate>#' tmp/repo/swidtags.xml
-diff -u tests/repodata-swidtags.xml tmp/repo/swidtags.xml
+diff -u $REPODATA_SWIDTAGS tmp/repo/swidtags.xml
 
 test "$REPOMD_INODE" != "$( ls -i tmp/repo/repodata/repomd.xml )"
 ls -l tmp/repo/repodata/repomd.xml | grep '^-rw-r--r--'
@@ -572,7 +576,7 @@ test -f tmp/repo/repodata/c-swidtags.xml.gz
 $BIN/rpm2swidtag --repo=tmp/repo $RPM2SWIDTAG_OPTS --authoritative --tag-creator "example/test Example Org." --software-creator "other.test Other Org." --sign-pem=$SIGNDIR/test.key,$SIGNDIR/test-ca.crt,$SIGNDIR/test.crt
 zcat tmp/repo/repodata/???*-swidtags.xml.gz > tmp/repo/swidtags.xml
 sed -i -E 's#([a-zA-Z0-9=])</X509Certificate>#\1\n</X509Certificate>#' tmp/repo/swidtags.xml
-diff -u tests/repodata-swidtags.xml tmp/repo/swidtags.xml
+diff -u $REPODATA_SWIDTAGS tmp/repo/swidtags.xml
 
 ( ! test -f tmp/repo/repodata/a-swidtags.xml.gz )
 ( ! test -f tmp/repo/repodata/c-swidtags.xml.gz )

tests/pkg-signed-xmlsec-1.3/test.example.pkg1-1.2.0-1.fc28.x86_64-rpm-fc67230522bd0a0d030568a8cfb108419cd51f173753ff2ef618a42bbfa29096.swidtag

@@ -0,0 +1,110 @@
+<?xml version="1.0" encoding="utf-8"?>
+<SoftwareIdentity xmlns="http://standards.iso.org/iso/19770/-2/2015/schema.xsd" xmlns:sha256="http://www.w3.org/2001/04/xmlenc#sha256" xmlns:n8060="http://csrc.nist.gov/ns/swid/2015-extensions/1.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://standards.iso.org/iso/19770/-2/2015/schema.xsd http://standards.iso.org/iso/19770/-2/2015-current/schema.xsd     http://csrc.nist.gov/ns/swid/2015-extensions/1.0 https://csrc.nist.gov/schema/swid/2015-extensions/swid-2015-extensions-1.0.xsd" xml:lang="en-US" name="pkg1" tagId="test.example.pkg1-1.2.0-1.fc28.x86_64" version="1.2.0-1.fc28.x86_64" versionScheme="rpm">
+  <Entity name="" regid="example.test" role="tagCreator"/>
+  <Meta product="pkg1" colloquialVersion="1.2.0" revision="1.fc28" arch="x86_64" summary="Example rpm package"/>
+  <Payload n8060:pathSeparator="/" n8060:envVarPrefix="$" n8060:envVarSuffix="">
+    <File size="9" name="testconfig.conf" location="/etc" sha256:hash="a11e9e5746f775b735b09d18d7edb13eb7774534146ed3e61d23ba11ce4ce396" n8060:mutable="true" key="true"/>
+    <Directory name="testdir" location="/usr/share">
+      <File size="0" name="emptyfile" sha256:hash="e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855" key="true"/>
+      <File size="0" name="emptyfile-missingok" sha256:hash="e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855" n8060:mutable="true"/>
+      <File size="0" name="ghostfile" n8060:mutable="true"/>
+      <File size="68" name="randomcontent" sha256:hash="8890bd9ee227cf54b0952bff303f4bbafcdade3c798d243c26b048ca613ec56d" n8060:mutable="true" key="true"/>
+      <File size="74" name="randomsize" sha256:hash="683f5b18fc594967aa5b9b4f137d484a6546134b305e3c99752069d77e3db2f6" n8060:mutable="true" key="true"/>
+      <Directory name="testdir"/>
+      <File size="5" name="testfile" sha256:hash="f2ca1bb6c7e907d06dafe4687e579fce76b37e4e93b7605022da52e6ccc26fd2" key="true"/>
+      <File size="8" name="testsymlink" key="true"/>
+      <File size="7" name="testsymlink-to-dir" key="true"/>
+      <File size="7" name="testsymlink-to-missing" key="true"/>
+      <File size="11" name="testutf8-křížala" sha256:hash="ca501866faea5acff395b2ed6c59c16b4a0a40ad642ec35e12dbaa7bd891920b" key="true"/>
+      <File size="2" name="testutf8-sqrt-√36" sha256:hash="06e9d52c1720fca412803e3b07c4b228ff113e303f4c7ab94665319d832bbfb7" key="true"/>
+    </Directory>
+    <Resource type="rpm" rpm="pkg1-1.2.0-1.fc28.x86_64" sha256header="fc67230522bd0a0d030568a8cfb108419cd51f173753ff2ef618a42bbfa29096"/>
+  </Payload>
+  <Signature xmlns="http://www.w3.org/2000/09/xmldsig#">
+    <SignedInfo>
+      <CanonicalizationMethod Algorithm="http://www.w3.org/2006/12/xml-c14n11"/>
+      <SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/>
+      <Reference>
+        <Transforms>
+          <Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/>
+          <Transform Algorithm="http://www.w3.org/2006/12/xml-c14n11"/>
+        </Transforms>
+        <DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
+        <DigestValue>IZQGc/vRkf1WNtcJp87FuaxAi4ALtRQEE/kNHEGDYc4=</DigestValue>
+      </Reference>
+    </SignedInfo>
+    <SignatureValue>C61b3rA8YOxPkN/nnNSAJYcQFO4wYEqvkjO/pRqAjtzW6dk/RkaEcGgryEry26q7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</SignatureValue>
+    <KeyInfo>
+      <X509Data>
+        <X509Certificate>MIIFTjCCAzagAwIBAgIUfuiMD7vr88Ss62D8ivnPsBvWkwUwDQYJKoZIhvcNAQEL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+</X509Certificate>
+        <X509Certificate>MIIFCzCCAvOgAwIBAgIUUciJjVn3m/FIXErnBIa1bTjRvTowDQYJKoZIhvcNAQEL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=
+</X509Certificate>
+      </X509Data>
+    </KeyInfo>
+  </Signature>
+</SoftwareIdentity>

tests/pkg-signed-xmlsec-1.3/test.example.pkg1-1.3.0-1.fc28.x86_64-component-of-test.a.Example-OS-Distro-3.x86_64-rpm-85a1c1a1f8ce5e66c4371d518dd716b2c289c5dea15bed8a3046970d02566e1a.swidtag

@@ -0,0 +1,93 @@
+<?xml version="1.0" encoding="utf-8"?>
+<SoftwareIdentity xmlns="http://standards.iso.org/iso/19770/-2/2015/schema.xsd" xmlns:sha256="http://www.w3.org/2001/04/xmlenc#sha256" xmlns:n8060="http://csrc.nist.gov/ns/swid/2015-extensions/1.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://standards.iso.org/iso/19770/-2/2015/schema.xsd http://standards.iso.org/iso/19770/-2/2015-current/schema.xsd     http://csrc.nist.gov/ns/swid/2015-extensions/1.0 https://csrc.nist.gov/schema/swid/2015-extensions/swid-2015-extensions-1.0.xsd" tagId="test.example.pkg1-1.3.0-1.fc28.x86_64-component-of-test.a.Example-OS-Distro-3.x86_64" name="Example OS Distribution" supplemental="true">
+  <Link rel="supplemental" href="swid:test.a.Example-OS-Distro-3.x86_64"/>
+  <Link rel="component" href="swid:test.example.pkg1-1.3.0-1.fc28.x86_64"/>
+  <Entity name="" regid="example.test" role="tagCreator"/>
+  <Signature xmlns="http://www.w3.org/2000/09/xmldsig#">
+    <SignedInfo>
+      <CanonicalizationMethod Algorithm="http://www.w3.org/2006/12/xml-c14n11"/>
+      <SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/>
+      <Reference>
+        <Transforms>
+          <Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/>
+          <Transform Algorithm="http://www.w3.org/2006/12/xml-c14n11"/>
+        </Transforms>
+        <DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
+        <DigestValue>mNe/6J6IjbDTvLH6zA3zjBPCN9iSUpBVBg3LgeMlibg=</DigestValue>
+      </Reference>
+    </SignedInfo>
+    <SignatureValue>jQal1+fOmGpBQ9zq6IgFr4fqnKvXQr9YUNe7WYXfuP+HB/qLfWI+zqYW+XW2j/9N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</SignatureValue>
+    <KeyInfo>
+      <X509Data>
+        <X509Certificate>MIIFTjCCAzagAwIBAgIUfuiMD7vr88Ss62D8ivnPsBvWkwUwDQYJKoZIhvcNAQEL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+</X509Certificate>
+        <X509Certificate>MIIFCzCCAvOgAwIBAgIUUciJjVn3m/FIXErnBIa1bTjRvTowDQYJKoZIhvcNAQEL
+BQAwFTETMBEGA1UEAwwKVGVzdGluZyBDQTAeFw0yMTA5MjMxNjE0MjhaFw0zMTA5
+MjExNjE0MjhaMBUxEzARBgNVBAMMClRlc3RpbmcgQ0EwggIiMA0GCSqGSIb3DQEB
+AQUAA4ICDwAwggIKAoICAQCtJqN89PhqtOuxHGAD4++0RObfjo+ca4cOq1VB8YBn
+8i59wAHVviTXwqDd+fOPSnv9/Npd58DH+e084F0BZl+tzHmom4RUkz/B/HpJNK7o
+HcCwpzn0e63kxcWpOGbwZEecWFSxVKOXtKe/pvrPpk6qNHUs7cr0t6LPttFRGE00
+jW3ftBQXO7dq99gq+lCWmsHfWBWhOCZZ7p7Xdg965ML8wE4o0OGJK3TIenvGGgsq
+7GB+mngfHbS1czG7B0Hp9h7C0x4X5KJQKcE5FmdvSKHxKf+FflXiMnC8/nPD2Txl
+QnNBjxOMiQYVrwG0LTqaHxVmrjMEF0dTUKYqBzzL3ypOB4LwfDsmQHarKLJaNeVw
+A0iY+eusvgZEcAWMTA1vzgFGu8F+Wq9V/TqNZr1eOvQhE0C0zaJu13zf39Ydhdfh
+q7Z4QrmdEgOD34E3RE1l+PQDHUZs9K86bYqmJ0K2H3Sc3dotj7PJqpU4WKXKi03r
+4F18yOrE7MXmu0BuEHzGUdyMxiSaJ5ot/stJ5LxA4NavsQH3O0IkF4XonR+T9zb+
+8tVxiPjPQippP8hiwPcvDuFlnLlxywjAPJjixA7bxvXUpO5tBGjKvzVEAJVX5ydS
+lNKEE3+LTF4UkOKzw5BXMpj+UoO54fWRtMxuZ5CNYwZo/A8J5+zx15SMM3u5FwFf
+VQIDAQABo1MwUTAdBgNVHQ4EFgQUzTlYw+r1qh80/fMTXednURsn5V8wHwYDVR0j
+BBgwFoAUzTlYw+r1qh80/fMTXednURsn5V8wDwYDVR0TAQH/BAUwAwEB/zANBgkq
+hkiG9w0BAQsFAAOCAgEAHYxbtcZJX/UbX1CPRSKReU6D98+1VWG+oiBVvGQhSfVq
+rGXyMkxHNNGkUzWvv7Bkb2Gmu8hU5mgp7mrozRNqTI/jM5MzaUpv+18WQTjWxadX
+ZVThyim5XI1e92KZ38bjMPSV8uUajTgQ6GKjgebRzKEAogTa8kkQmXGiVoj5ksvV
+R5nSzN0ZPk2O2gV/5Qa+j3uKhZAuws6zTmC+ogfmoWt3bks2BMblZyqehjjs9yDu
+KOKlEyGXog7diLQVDsvFgLtKX/AxZfrM0hkiyH373akGx5+N1cVPbOvt+8GzfIZe
+lz1tHR56Y3B3UpUGZC9YocgizyjTEGmpJVCHw9yedS/q1Js/dcoCNhQxwAKSB0GU
+Xs0LzBB6HumlUPVCqt3pznyeOn7N9f3I57V1YKLjAOcvrWMnpU+9tlLMzmLNshLG
+elUWCzG6kq1r8ybTSozZSDbpVeeBi7SePbEqJHPfIafjZI1o5Sp3u/LazTqUNwH1
+niniVBzQJ6/eNTkrgy1fpJX0lO6bRSm47EMjaZpHn4cXdVydCrGkmbI1Nbsq1wal
+CDYSrCbUnsUZQM0OQ67ONMCgTEnbsN5wRLmBWumjdeZpeEqDrq1UNaQnfhUUf3Qs
+OIVmSVlMLFXuImV0D1pWztGzy/xMgzrURBrU/UMN4KbwA7nht6BjloBUfwrNjcI=
+</X509Certificate>
+      </X509Data>
+    </KeyInfo>
+  </Signature>
+</SoftwareIdentity>