OpenSAML: Verify Signature after decryption

Nicolas Peifer nicolaspeifer at gmx.de
Thu Sep 8 16:50:41 BST 2011


Hello,

I decrypted the Extension of an AuthnRequest successfully and now I'm trying 
to verify the signature (of the whole request). The method 
decrypter.setRootInNewDocument(true) is called before the decryption begins.

My understanding of the explainations on the wiki is that the encrypted 
Extension is now replaced with the decrypted element after the decryption. But 
somehow this is not happening. There is still an object of EncryptedDataImpl 
in the extension instead of the decrypted element.

I'm a bit confused, too, as subject to the wiki it is not recommended to 
modify the SAMLObjects directly. That is why I really don't know how to solve 
this problem.

How can I perform the signature check? Can someone help me, please?

Regards
Nicolas


More information about the dev mailing list