How to validate signature that uses older XML canonicalization

[Yang, Gang CTR (US)]

Hi,



I'm using OpenSAML library in our project. While I can use OpenSAML to do the SAML message/assertion signing and signature validation if both ends are using OpenSAML library, I'm having problems validating SAML assertions signed by other party's SAML implementation. After some debugging, I found OpenSAML library is complaining about the Transform Algorithm used by the other party's implementation. The Transform Algorithm used by the other party's implementation is "http://www.w3.org/TR/2001/REC-xml-c14n-20010315#" in stead of that used by OpenSAML library, which is "http://www.w3.org/2001/10/xml-exc-c14n#".



Now my question is that is there a way to configure OpenSAML library to also accept the "http://www.w3.org/TR/2001/REC-xml-c14n-20010315#" version of C14N?



Thanks,

Gang
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/dev/attachments/20120119/4a06f9f7/attachment.html