Signing multiple objects?

[Brad Cox]

Thanks, just what I need. Just one more question (I hope ;).

In
xmltooling/src/test/java/org/opensaml/xml/signature/EnvelopedSignatureTest.java
everything starts from SimpleXMLObject sxo = getXMLObjectWithSignature(),
which
is the unsigned message envelope in my case. I have that parsed as a
Document,
but am stuck on how to marshal that, and to what. Test isn't very easy to
follow due
to deep nesting.

I found a SAML1.1 EnvelopeBuilder but this needs to be SAML 2.0. Or is
XMLObjectBuilder
what I need in this case?

Please pardon the newbie questions; still finding my way around OpenSAML and
REALLY appreciate the help!! Thanks!

On Sat, Oct 29, 2011 at 9:36 PM, Cantor, Scott <cantor.2 at osu.edu> wrote:

> On 10/29/11 7:40 PM, "Brad Cox" <bradjcox at gmail.com> wrote:
>
> >Scott, when you spoke of "signing the whole document", do you mean giving
> >the soap envelope an id and signing the envelope?
>
> No, I mean URI="".
>
> Using an ID implies that you have code in place to prevent wrapping
> attacks. We do for SAML. You wouldn't for SOAP, and none of the code
> you're working with will either.
>
> -- Scott
>
> --
> To unsubscribe from this list send an email to
> dev-unsubscribe at shibboleth.net
>



-- 
Cell: 703-594-1883
Blog: http://bradjcox.blogspot.com
Web: http://virtualschool.edu
Manassas VA 20111
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/dev/attachments/20111030/7d230de3/attachment.html