Release 1.3.15 missing wheels for linux

[mfogel]

Hi, thanks for getting v1.3.15 out to PYPI earlier today.

It looks like it's missing wheels for linux. For example, for the v1.3.14 the following wheels are available for py3.11:

• xmlsec-1.3.14-cp311-cp311-win_amd64.whl
• xmlsec-1.3.14-cp311-cp311-win32.whl
• xmlsec-1.3.14-cp311-cp311-musllinux_1_1_x86_64.whl
• xmlsec-1.3.14-cp311-cp311-musllinux_1_1_aarch64.whl
• xmlsec-1.3.14-cp311-cp311-manylinux_2_17_x86_64.manylinux2014_x86_64.whl
• xmlsec-1.3.14-cp311-cp311-manylinux_2_17_i686.manylinux2014_i686.whl
• xmlsec-1.3.14-cp311-cp311-manylinux_2_17_aarch64.manylinux2014_aarch64.whl
• xmlsec-1.3.14-cp311-cp311-macosx_11_0_arm64.whl
• xmlsec-1.3.14-cp311-cp311-macosx_10_9_x86_64.whl

But for v1.3.15, here's all I see:

• xmlsec-1.3.15-cp311-cp311-win_amd64.whl
• xmlsec-1.3.15-cp311-cp311-win32.whl
• xmlsec-1.3.15-cp311-cp311-macosx_11_0_arm64.whl

Was removing the linux wheels intentional?

[potiuk]

Yeah we have big problems with Airflow for this reason and we had to pin libxml to < 1.3.15

[potiuk]

Yeah, we have basically same issue as the one described #316 that was supposed to be solved by wheels with statically linkec libxml2 library.

[mxamin]

We're planning to release the linux wheels too, but we have an issue with linux pipelines that creates the wheels. I'll add the missing ones as soon as I managed to fix them.

[potiuk]

Thanks @mxamin

[jaspervf]

Unfortunately, this breaks our build pipeline and we had to fix the dependency to 1.3.14 as well. Hope this will be resolved soon, so we can use the latest version again.

[mariocandela]

+1

[AbdealiLoKo]

Broken pipelines on my side too :(
Pinning the versions as a temporary fix - Hoping for a fix soon !

[potiuk]

Yeah. It would be great to get it out any time soon. It's 2 weeks already when it has been promised by @mxamin and while it's understandable that people are possibly volunteering to work on xmlsec, quite a bit of time passed since.

@mxamin -> anything we can do to help with fixing it ?

[KanorUbu]

Hi
I tested the cibuildwheel command to create the wheel

cibuildwheel --only cp313-manylinux_x86_64

I have a bug downloading the xmlsec1-1.3.7.tar.gz file and I get a 403 error.
I tested in a console

import urllib.request
local_filename, headers = urllib.request.urlretrieve('https://www.aleksey.com/xmlsec/download/xmlsec1-1.3.7.tar.gz')

I get the error but with the requests module no problem

I tested the hypothesis of a test on the user agent

url = 'https://www.aleksey.com/xmlsec/download/xmlsec1-1.3.7.tar.gz'
import urllib.request
req = urllib.request.Request(
url, 
 data=None, 
headers={
     'User-Agent': 'Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.47 Safari/537.36'
   }
 )

f = urllib.request.urlopen(req)

it works
I don't know if this will help

But there is still one mistake

ImportError: /tmp/tmp.pHOVLGQzCO/venv/lib/python3.13/site-packages/xmlsec.cpython-313-x86_64-linux-gnu.so: undefined symbol: xmlSecOpenSSLTransformHmacRipemd160GetKlass

KanorUbu@0c456f1

[wojiushixiaobai]

• https://github.com/xmlsec/python-xmlsec/blob/master/setup.py#L391
  Temporary fix.

diff --git a/setup.py b/setup.py
index 92588eb..6dc269c 100644
--- a/setup.py
+++ b/setup.py
@@ -388,7 +388,11 @@ class build_ext(build_ext_orig):
                     )
                 )
             xmlsec1_tar = self.libs_dir / 'xmlsec1.tar.gz'
-            urlretrieve(url, str(xmlsec1_tar))
+            headers = {'User-Agent': 'https://github.com/xmlsec/python-xmlsec'}
+            request = Request(url, headers=headers)
+            with urlopen(request) as response, open(str(xmlsec1_tar), 'wb') as out_file:
+                out_file.write(response.read())
+            # urlretrieve(url, str(xmlsec1_tar))
 
         for file in (openssl_tar, zlib_tar, libiconv_tar, libxml2_tar, libxslt_tar, xmlsec1_tar):
             self.info('Unpacking {}'.format(file.name))

[mermoldy]

But there is still one issue:
ImportError: /tmp/tmp.pHOVLGQzCO/venv/lib/python3.13/site-packages/xmlsec.cpython-313-x86_64-linux-gnu.so: undefined symbol: xmlSecOpenSSLTransformHmacRipemd160GetKlass

This is related to a change in the latest xmlsec1:

(xmlsec-core) Disabled old crypto algorithms (MD5, RIPEMD160) and the old crypto engines (MSCrypto, GCrypt) by default (use the --with-legacy-features option to re-enable everything).

Currently, xmlsec is already being built with --enable-md5, so adding --enable-ripemd160 will fix this issue.