Exception when creating the signature using OpenSAML lib

[Brent Putman]

On 11/1/12 7:36 PM, Cantor, Scott wrote:
>
> You have to let it extract the key from the signature, verify it, and then
> apply a trust engine to the key at that point to decide whether to trust
> it. Conceptually anyway.

Conceptually yes, but in OpenSAML Java, the SignatureTrustEngine impls
actually wrap up all of that inside the trust engine behavior, so all
you do is supply to the trust engine the trust material (either trusted
credential resolver or PKIX validation info resolver) and it just
handles it all as part of its validate(...) behavior.