Exception when creating the signature using OpenSAML lib

Brent Putman putmanb at georgetown.edu
Wed Oct 31 19:30:55 EDT 2012


On 10/31/12 7:23 PM, Yaowen Tu wrote:
> 1. I am not sure how to check if I am passing EntityDescriptor or
> SPSSODescriptor. In the code sample of the wiki:
>            
> |       Credential verificationCredential =
> getVerificationCredential(response);|
> |       SignatureValidator sigValidator = ||new|
> |SignatureValidator(verificationCredential);
>  The SignatureValidator only need a credential. I think as long as I
> get the credential under ||SPSSODescriptor, that should be fine.Is
> that correct?
> |


I meant what you are passing to the validate(...) method.  Although I
forgot that your error is actually on the SAMLSignatureProfileValidator,
so it's whatever you are passing to the validate(...) method of that.

You error is odd though, b/c you have a non-null Signature which is
saying it doesn't contain the Apache XMLSignature object.  So something
that you are doing is off.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/dev/attachments/20121031/776557d6/attachment.html 


More information about the dev mailing list