Bug 2217937

When using mod_auth_mellon on rawhide, I now see failures like

www_1                  | lasso:ERROR:tools.c:586:lasso_query_sign: assertion failed: (rsa)
Error GETing http://www:8079/saml-redirect-uri/login?ReturnTo=http%3A%2F%2Fwww%3A8079%2Fadmin%2Flogin%2F%3Fnext%3D%2Fadmin%2F&IdP=http%3A%2F%2Fkeycloak%3A8082%2Frealms%2Frealm%2Db: Server closed connection without sending any data back at /test.pl line 21.
www_1                  | [Tue Jun 27 12:46:17.790230 2023] [core:notice] [pid 15:tid 15] AH00051: child pid 19 exit signal Abort (6), possible coredump in /etc/httpd

similar to bug 2142849 comment 3.

Reproducible: Always

Steps to Reproduce:
1. Have mod_auth_mellon configured with something like

    <LocationMatch ^/saml-redirect-uri/|^/admin/login>
        MellonEnable info
        MellonEndpointPath /saml-redirect-uri/
        MellonSPMetadataFile /etc/httpd/saml2/mellon_metadata.xml
        MellonSPPrivateKeyFile /etc/httpd/saml2/mellon.key
        MellonSPCertFile /etc/httpd/saml2/mellon.pem
        MellonIdPMetadataFile /etc/httpd/saml2/idp_metadata.xml
    </LocationMatch>

    <Location /admin/login/>
        <If "%{QUERY_STRING} !~ /^direct$/">
            AuthType Mellon
            MellonEnable auth
            Require valid-user
        </If>

        RewriteEngine on
        RewriteCond %{REMOTE_USER} (.+)
        RewriteRule ^.+$ - [E=REMOTE_USER:%1]
        RequestHeader unset X-REMOTE-USER
        RequestHeader set X-REMOTE-USER %{REMOTE_USER}e env=REMOTE_USER

        MellonSetEnvNoPrefix "REMOTE_USER_FIRSTNAME" "first_name"
        RequestHeader unset X-REMOTE-USER-FIRSTNAME
        RequestHeader set X-REMOTE-USER-FIRSTNAME expr=%{base64:%{env:REMOTE_USER_FIRSTNAME}} env=REMOTE_USER_FIRSTNAME
        MellonSetEnvNoPrefix "REMOTE_USER_LASTNAME" "last_name"
        RequestHeader unset X-REMOTE-USER-LASTNAME
        RequestHeader set X-REMOTE-USER-LASTNAME expr=%{base64:%{env:REMOTE_USER_LASTNAME}} env=REMOTE_USER_LASTNAME
        MellonSetEnvNoPrefix "REMOTE_USER_EMAIL" "email"
        RequestHeader unset X-REMOTE-USER-EMAIL
        RequestHeader set X-REMOTE-USER-EMAIL expr=%{base64:%{env:REMOTE_USER_EMAIL}} env=REMOTE_USER_EMAIL
        MellonSetEnvNoPrefix "REMOTE_USER_GROUPS" "groups"
        RequestHeader unset X-REMOTE-USER-GROUPS
        RequestHeader set X-REMOTE-USER-GROUPS expr=%{base64:%{env:REMOTE_USER_GROUPS}} env=REMOTE_USER_GROUPS
        MellonMergeEnvVars On ":"
    </Location>

    <Location /admin/logout/>
        <If "%{QUERY_STRING} == 'keycloak-logged-out'">
            RewriteEngine on
            RewriteRule "^.*" "/"
        </If>
        <Else>
            AddOutputFilterByType SUBSTITUTE text/html
            Substitute 's#</html>#<iframe style="display: none" width="0" height="0" frameborder="0" src="/saml-redirect-uri/logout?ReturnTo=http://www:8079/admin/logout/?keycloak-logged-out"/></html>#ni'
        </Else>
    </Location>

    ProxyPass /saml-redirect-uri/ !
    ProxyPass / http://app:8081/
    ProxyPassReverse / http://app:8081/

with Keycloak as the IdP.
2. Try to log in.
Actual Results:  
www_1                  | 172.19.0.3 - - [27/Jun/2023:12:46:16 +0000] "GET /admin/ HTTP/1.1" 302 - "-" "WWW-Mechanize/2.06"
www_1                  | 172.19.0.3 - - [27/Jun/2023:12:46:16 +0000] "GET /admin/login/?next=/admin/ HTTP/1.1" 303 377 "-" "WWW-Mechanize/2.06"
www_1                  | Bail out! lasso:ERROR:tools.c:586:lasso_query_sign: assertion failed: (rsa)
www_1                  | 
www_1                  | ==> /var/log/httpd/error_log <==
www_1                  | **
www_1                  | lasso:ERROR:tools.c:586:lasso_query_sign: assertion failed: (rsa)
Error GETing http://www:8079/saml-redirect-uri/login?ReturnTo=http%3A%2F%2Fwww%3A8079%2Fadmin%2Flogin%2F%3Fnext%3D%2Fadmin%2F&IdP=http%3A%2F%2Fkeycloak%3A8082%2Frealms%2Frealm%2Db: Server closed connection without sending any data back at /test.pl line 21.
www_1                  | [Tue Jun 27 12:46:17.790230 2023] [core:notice] [pid 15:tid 15] AH00051: child pid 19 exit signal Abort (6), possible coredump in /etc/httpd


Expected Results:  
No failure and no aborted httpd child.

I believe this is caused by the fact that xmlsec1 in rawhide is now back at the 1:1.2.37-4.fc39 version, so the fix and build in bug 2142849 which assumes xmlsec 1.3 no longer works.

The revert of the xmlsec1 version was done via bug 2187631.