brew

Install libxmlsec1 with Homebrew, apt, dnf, zypper

XML security library. Version 1.3.12 via Homebrew; verified 2026-06-23.

Install command Security notes

install

Additional install commands

macOS

Homebrewverified · 100%

brew install libxmlsec1

local Homebrew formula metadata

Linux

Debian aptverified · 92%

sudo apt install libxmlsec1-dev

Debian stable package indexes · libxmlsec1-dev · source: deb.debian.org

Fedora dnfverified · 92%

sudo dnf install xmlsec1

Fedora Rawhide package metadata · xmlsec1 · source: dl.fedoraproject.org

openSUSE zypperverified · 92%

sudo zypper install libxmlsec1-1

openSUSE Tumbleweed package metadata · libxmlsec1-1 · source: download.opensuse.org

overview

Package summary

XML security library

Project links

Commands and aliases

xmlsec1
xmlsec1-config

history

Project history and usage

XML Security Library, packaged by Homebrew as libxmlsec1, is the C implementation of XML Signature and XML Encryption workflows built on libxml2. Its command-line tool, xmlsec1, made XML digital-signature verification and signing scriptable on Unix-like systems.

Project history

Aleksey Sanin released XML Security Library 0.0.1 on 2002-03-17. Within weeks the project added online XML signature verification, test-suite work, a mailing list, RPM packages, and XML Encryption support.

The 1.0.0 release on 2003-04-17 was a major upgrade from the 0.0.x series, adding multiple crypto engines with support for OpenSSL, GnuTLS, and NSS, plus cleaned-up internals, documentation, tutorials, and examples. The project later maintained crypto-backend support for platform engines such as Microsoft CryptoAPI and MSCNG.

Adoption history

xmlsec entered packaging systems because XML signatures are part of standards-heavy environments: SAML, document signing, SOAP-era security stacks, identity federation, and government or enterprise XML workflows. The project also published interoperability reports for XML Digital Signature and XML Encryption, which helped it function as a reference-quality implementation rather than a private library.

How it is used

The package provides both a C library and the xmlsec1 CLI. Users sign, verify, encrypt, and decrypt XML documents, usually while selecting a crypto backend and supplying keys, certificates, or trust material through command-line options or application code.

Why package nerds care

libxmlsec1 is significant because it connects the XML parser stack to the cryptographic stack. Its ABI, crypto backend defaults, and security hardening choices can affect language bindings and applications that validate signed XML, so distributions treat it as security-sensitive plumbing rather than a casual XML helper.

Timeline

2002: XML Security Library 0.0.1 was released on 2002-03-17.
2002: XML Encryption support appeared in the 0.0.3 release on 2002-04-16.
2003: XML Security Library 1.0.0 was released on 2003-04-17 with multiple crypto-engine support.
2023: XML Security Library 1.3.0 introduced ABI and API breaking changes for newer XML Signature and Encryption behavior.
2026: XML Security Library 1.3.12 was announced on 2026-06-23 with additional crypto-algorithm support and transform-depth controls.

Related projects

xmlsec is built around libxml2 and related XML standards such as XML Signature, XML Encryption, Canonical XML, and Exclusive Canonical XML. Its crypto backends include OpenSSL, GnuTLS, NSS, and Windows crypto providers.

Sources

security posture

Risk level: green

library-like package without higher-risk signals.

Risk classifier

green risk · low confidence · appliance

Why

library-like package without higher-risk signals

Signals

metadata:library-like

Install behavior

No Homebrew post-install hook is recorded in formula metadata.
Homebrew bottle metadata is available for 6 platform targets.
Installs with 3 runtime dependencies.
Build metadata lists 1 build dependencies.

Recommended review

Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.

executables

Installed executables

Command	Kind	Exposure	Note
`xmlsec1`	cli	global executable
`xmlsec1-config`	cli	global executable

freshness

Version and freshness

These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.

page generated2026-07-08

manager version1.3.12

manager updated2026-06-23

local dataok

upstreamnot checked

latest detectednot detected

https://github.com/lsh123/xmlsec

infoNo cached GitHub release or tag data was available.https://github.com/lsh123/xmlsecnone confidence

install metadata

Package metadata

Package key	brew:libxmlsec1
Version	1.3.12
Package manager	Homebrew
Package manager page	https://formulae.brew.sh/formula/libxmlsec1
Homepage	https://www.aleksey.com/xmlsec/
Repository	https://github.com/lsh123/xmlsec
Upstream docs	https://www.aleksey.com/xmlsec/documentation.html
License	MIT
Source archive	https://github.com/lsh123/xmlsec/releases/download/1.3.12/xmlsec1-1.3.12.tar.gz
Last updated	2026-06-23T00:59:53Z
Pulse	updated
Dependencies	gnutls, libxml2, openssl@3
Build dependencies	pkgconf
Uses from macOS	libxslt
Bottle	available (on arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux)
Homebrew post-install	not defined
Service	none declared

registry facts

Source database details

Source Database	Homebrew formula API
Tap	homebrew/core
Full Name	libxmlsec1
Aliases	xmlsec1
Version Scheme	0
Revision	0
Bottle Stable Root URL	https://ghcr.io/v2/homebrew/core
Deprecated	no
Disabled	no
Keg Only	no
URL Keys	stable

source database matches

Other package-manager records

Matches are pulled from external package-manager indexes and kept separate from local Automic Vault package links.

Debian apt92%

libxmlsec1-dev 1.2.41-1+b1

Development files for the XML security library