Signing multiple objects?

[Brad Cox]

I'm trying to meet stringent DOD security requirements that require that
several elements in the headers be signed. Actually the body too, but
presumably just the payload but am not sure, so I've left body signing aside
for now). For example, the Timestamp, MessageID, and SAML Assertion should
all be signed.

I have Assertion signing working now, but am stumped on Timestamp and
MessageID since these come from xmltooling and don't comply
with SignableSAMLObject.

How to do this? Thanks!
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/dev/attachments/20111024/59351f97/attachment.html