How to validate signature that uses older XML canonicalization

[Cantor, Scott]

On 1/20/12 9:41 AM, "Yang, Gang CTR (US)" <gang.yang.ctr at mail.mil> wrote:

>Thanks for the reply, Scott. I understand the concept better now. But the
>reality requires us to support the inclusive c14n unfortunately.

Reality includes choices. This is a bad one. Accomodating bugs is never a
sound strategy, and this is not an area you want to be playing games with.

>Has anyone implemented a profile validator with OpenSAML library? Can you
>shed some lignts on this topic as to what a profile validator is supposed
>to do and how to implement one in OpenSAML library? You help is greatly
>appreciated.

The existing signature profile validator is right there in the code and
you have to be using it already or you wouldn't be getting an error about
the transform.

-- Scott