metadata aggregator signing

[Ian Young]

On 8 Apr 2013, at 20:57, "John C. Pfeifer" <pfeifer at umd.edu> wrote:

> I am having an issue generating signed metadata using aggregator 0.7.  If I try to collect, assemble, and sign the metatdata in a single pipeline, the signature is incorrect.  If I do the first to step and write out the unsigned metadata and the make second run with simple reads in the unsigned metadata, signs it and writes it back out, the signature is valid.

If you compare the two signed output files (correct and incorrect), is the only difference the digest value, or are there other differences?

	-- Ian



-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/dev/attachments/20130408/71d47ee9/attachment.html 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 4813 bytes
Desc: not available
Url : http://shibboleth.net/pipermail/dev/attachments/20130408/71d47ee9/attachment.bin