metadata aggregator signing

[John C. Pfeifer]

I am having an issue generating signed metadata using aggregator 0.7.  If I try to collect, assemble, and sign the metatdata in a single pipeline, the signature is incorrect.  If I do the first to step and write out the unsigned metadata and the make second run with simple reads in the unsigned metadata, signs it and writes it back out, the signature is valid.  More specifically:

./mda.sh sample.xml generate
-- produces both signed and unsigned met data; digest does not match value produced by xmlsectool

./mda.sh sample.xml verify
-- fails with mismatched digest error

./mda.sh sample.xml signed
-- signs the unsigned metadata produced in the first step; correct digest

./mda.sh sample.xml verify
-- success!





//
John Pfeifer
System Architecture & Integration Solutions
Division of Information Technology
University of Maryland, College Park

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/dev/attachments/20130408/5809dfcc/attachment-0001.html 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: sample.xml
Type: application/xml
Size: 7603 bytes
Desc: sample.xml
Url : http://shibboleth.net/pipermail/dev/attachments/20130408/5809dfcc/attachment-0001.rdf