Decrypter doesn't seem to work? Probably my fault, but not sure where I messed up. "[error] Invalid XML schema"

[CeliaTatu]

• O.S: Cent OS 7 Minimal (no GUI)
• No security policies set
• Commands used and O.S Mirror: https://pastebin.com/eakfXVut
• What I've tried: Making syspass-decrypter.phar executable; transferring syspass.xml into same folder as decrypter, making the .xml file password simple; installing PHP7.2;
• Command used (the masterpassword will be changed, so no fear about me giving it out now): php syspass-decrypter.phar spd:search-account "admin" --xmlpath ./syspass.xml --withCategories=yes --wide=yes --password password --masterPassword dfbY8IEbEOI41IxGPD8p3B2OJ0CNoHyX
• The error: https://pastebin.com/NNGRvmXW
• History: Originally had SysPass 3.0 (beta), upgraded to 3.1, and exported the .xml from 3.1, therefore, I don't think I'm experiencing what the other user did, however, the error does appear to be the same
• Other: Simply running "syspass-decrypter.phar" does not work; I must run "php syspass-decrypter.phar" for the command to work. I have about 400 passwords in my database. I exported the file from the admin account.

Thanks Rubén :)

[CeliaTatu]

Also: When I vim syspass.xml; https://pastebin.com/aNXHEG1A .

It shows other information within the syspass.xml, but I obviously won't link it (it includes Hash Sign and Encrypted Hash lines).

[nuxsmin]

Hello, it's an error message related to the XML schema itself, so it's not about an application error. The key point here is that the schema is being validated using XSD (https://github.com/sysPass/syspass-decrypter/blob/master/schemas/syspass.xsd), so there should be some missing fields in your XML (or the XSD).

The tool is tested against XML file generated by sysPass (demo site) and on-the-fly generated XML with random data to test structure and performance (https://github.com/sysPass/syspass-decrypter/blob/master/tests/XmlBuilder.php).

Could you validate the schema on your own using xmllint and tell me the errors found? (https://stackoverflow.com/questions/42809088/how-to-validate-a-xml-file-with-xsd-through-xmllint)

Regards

[CeliaTatu]

The command I used is:

xmllint --schema syspass.xsd syspass.xml --noout

The output:

syspass.xml validates

Without "--noout," it appears to just read out the encrypted data of the xml file.

After using "syspass-decrypter.phar spd:search-account --xmlpath ./syspass.xml" again, here is the error output again: https://pastebin.com/E78hKRzy

---

What else should I try?

[nuxsmin]

It seems to fail after decrypting the data. Could you check the XML schema again with an unencrypted XML?

[nuxsmin]

Passwords will remain encrypted

[CeliaTatu]

XML password:

password

Master password:

dfbY8IEbEOI41IxGPD8p3B2OJ0CNoHyX

[info] initialize
[info] Reading XML file "./syspass.xml"
[info] checkFile
[info] readXMLFile
[info] Encrypted XML detected
[info] Processing encrypted data

I think you're right about it "failing after decrypting the data." Also, sorry, I guess I should have included those lines earlier on in our discussion.

How would I create the unencrypted XML, with encrypted passwords? I assume it wouldn't be through SysPass, but instead via an alternate program?

[nuxsmin]

it's very easy, do not set the password when exporting on sysPass.

[CeliaTatu]

Alright, so I outputted without a password on the .xml, and here is the output:

https://pastebin.com/JkEvyDDE

Now it ends at "[info] readXMLFile" while before, it ended at "[info] Processing encrypted data"

When I vim the syspass.xml, here is a snippet of what is seen: https://pastebin.com/gmGkn035 (I'm the one who changed the hash value; mine appears as letters and numbers). It appears to be correct; all of the categories are what I set, as well as their respective descriptions.

---

Would the issue be that I messed up something in the syspass export, or am missing some file/program in my syspass install? Maybe I'm missing something to correctly run the .phar file?

[nuxsmin]

Please validate the unencrypted file again (xmllint --schema syspass.xsd syspass.xml --noout) and let me know the results

[CeliaTatu]

Now I got some errors; https://pastebin.com/0FWuD0Bq

FYI, just double checking; I got the syspass.xsd from syspass-decrypter-masster/schemas/syspass.xsd , and the syspass.xml is the one I obtained from my own export of my syspass install. I simply moved the syspass.xsd into the same folder as the syspass.xml , and then run the xmllint command.

[nuxsmin]

It seems you don't use tags and some accounts have a blank login. I'll modify the schema to avoid these side cases.

[CeliaTatu]

That is correct; many (or all?) of my Syspass entries do not have any tags associated with them. The blank logins are probably from an import from keepass.

Thank you for the help Rubén :) Is there anything that you need me to do?

[nuxsmin]

Thank you for helping to debug the issue, no worries, it's in my side now 😉