[JIRA] Resolved: (CPPXT-91) KeyInfoResolver code returns empty credential object.

[Scott Cantor (JIRA)]

     [ https://issues.shibboleth.net/jira/browse/CPPXT-91?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Scott Cantor resolved CPPXT-91.
-------------------------------

       Resolution: Fixed
    Fix Version/s: 1.5.2

Avoid returning an empty Credential object when nothing is populated inside it. Also fix to OpenSAML to metadata base class to stop assuming resolver has to return non-null, per API doc.

http://svn.shibboleth.net/view/cpp-xmltooling?rev=998&view=rev
http://svn.shibboleth.net/view/cpp-opensaml?rev=744&view=rev

> KeyInfoResolver code returns empty credential object.
> -----------------------------------------------------
>
>                 Key: CPPXT-91
>                 URL: https://issues.shibboleth.net/jira/browse/CPPXT-91
>             Project: XMLTooling - C++
>          Issue Type: Improvement
>          Components: Security
>    Affects Versions: 1.5.0, 1.5.1
>            Reporter: rhoerbe at idp.protectnetwork.org
>            Assignee: Scott Cantor
>            Priority: Minor
>              Labels: TrustEngine
>             Fix For: 1.5.2
>
>         Attachments: shibspKeyExtr.zip
>
>          Time Spent: 1 hour
>  Remaining Estimate: 0 minutes
>
> as described in the mail thread on shib-users from today:
> These are the log messages after the Response was decoded:
> OpenSAML.MessageDecoder.SAML2 [2]: extracting issuer from SAML 2.0 protocol message
> OpenSAML.MessageDecoder.SAML2 [2]: message from (https://apps.egiz.gv.at/moa-id-stork-test/)
> OpenSAML.MessageDecoder.SAML2 [2]: searching metadata for message issuer...
> OpenSAML.SecurityPolicyRule.MessageFlow [2]: evaluating message flow policy (replay checking on, expiration 60)
> XMLTooling.StorageService [2]: inserted record (_eb6...) in context (MessageFlow) with expiration ..
> OpenSAML.SecurityPolicyRule.XMLSigning [2]: validating signature profile
> XMLTooling.KeyInfoResolver.Inline [2]: resolved 0 certificate(s)
> XMLTooling.KeyInfoResolver.Inline [2]: resolved 0 CRL(s)
> XMLTooling.TrustEngine.ExplicitKey [2]: attempting to validate signature with the peer's credentials
> XMLTooling.TrustEngine.ExplicitKey [2]: public key did not validate signature: Credential did not contain a verification key.
> The zip-archive contains the IDP's certificate files, metadata, response message and logfiles.

--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira