SAMLResponse signature problems

[Cantor, Scott E.]

On 7/29/11 8:00 AM, "legzo" <legzomil at gmail.com> wrote:
>
>So what you're telling me is that even when I pass the XML doc
>containing a Signature node to xmlsec, it will be excluded from what
>gets digested?

Yes.

>So, xmlsec and opensaml are digesting (thus signing) the same thing,
>aren't they? So how can their output be different?

OpenSAML doesn't do any signing, it uses a library for that. Either one of
the stacks has a bug, or the XML is not the same.

-- Scott