Signature validation fails

Cantor, Scott cantor.2 at osu.edu
Thu Sep 29 15:32:06 BST 2011


On 9/29/11 10:24 AM, "Nicolas Peifer" <nicolaspeifer at gmx.de> wrote:
>
>This unmarshalled AuthnRequest contains everything in a single in
>contrast to 
>the freshly signed one. This is the only difference - and i guess that
>this 
>causes the trouble because line breaks do matter with regard to the xml
>signature. It turned out that these line breaks are added after you set a
>new 
>request signature AND then you marshall the request.

The linefeeds come from xmlsec. If they're missing on the receiving end,
you have code somewhere on one end or the other that's removing them.

-- Scott



More information about the dev mailing list