Write/Read opensaml Assertion to/from XML file

[Luis Rodríguez Fernández]

Hi Brent,

Thank you for your advice. My aim was just to illustrate how you can sign
and verify SAML assertions, without any library dependency. Sorry, I should
have specified, that this is the solution (it works, by the way...) that I
am using for implementing the SLO protocol with the HTTP-Redirect binding.

Cheers,

Luis

2012/2/1 Brent Putman <putmanb at georgetown.edu>

>
>
> On 2/1/12 3:20 AM, Luis Rodríguez Fernández wrote:
>
> Hi Jose,
>
>
>    1. Writing: you can do it "manually". See
>    http://stackoverflow.com/questions/6681083/consume-samlresponse-token/9080912#9080912
>
>
>
> The OP's question(s) were about reading/writing SAML from/to a file, and
> about signature generation and validation.  I don't see anything in that
> page that relates to either of those things.
>
>
>
>
>    1. Signature:
>       -   Sign:
>
>
>
>
> Just for the benefit of the archives and other people:  I don't want to be
> harsh, but these examples are not correct.  These code snippets illustrate
> how to use the Java Signature class to implement the primitive operations
> of signing and validation over a byte sequence.  SAML signatures are XML
> Signatures, and encompass considerably more than that. That's one of main
> purposes of the OpenSAML library (in addition to general support for
> XML-Java language binding).  The exceptions are the "simple sign"
> mechanisms, which are raw signatures over some "blob" of data, such as
> defined for the HTTP Redirect DEFLATE and HTTP Post-SimpleSign bindings.
> However, these examples are not even correct for those cases.  Generally,
> the complexity is in how you construct the actual byte[] that you are going
> to sign.
>
> So just FYI.
>
> --Brent
>
> --
> To unsubscribe from this list send an email to
> dev-unsubscribe at shibboleth.net
>



-- 
"Los caminos del usuario son inescrutables…"

-- Rick Cook
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/dev/attachments/20120201/bdc8effb/attachment.html