FW: Validate that a string is in X509SubjectName format.

Weaver, Matthew (CGI Federal) Matthew.Weaver at cgifederal.com
Fri Jul 26 13:04:29 EDT 2013



From: users-bounces at shibboleth.net [mailto:users-bounces at shibboleth.net] On Behalf Of Weaver, Matthew (CGI Federal)
Sent: Friday, July 26, 2013 12:52 PM
To: users at shibboleth.net
Subject: Validate that a string is in X509SubjectName format.

Hello,

I have been very happily using opensaml for the security processing of message level security for the CONNECT (www.connectopensource.org<http://www.connectopensource.org>) gateway for almost 2 years.

Now I am trying to add some validation of various message parts when I receive messages from various web service clients. One of the validations that I am looking to do is to check if the NameID/@value contains valid X509SubjectNames when the NameID/@Format is "urn:oasis:names:tc:SAML:1.1:nameid-format:X509SubjectName". In the future I would like to validate any given NameID/@value against the NameID/@Format, but I am focused on X509SubjectName for now.

Does opensaml provide this type of validation functionality? Or is anyone aware of any open source libraries that might? Thank you.

Matthew Weaver
Senior Consultant
CGI
12601 Fairlakes Circle
Fairfax, VA  22033
matthew.weaver at cgifederal.com<mailto:matthew.weaver at cgifederal.com>
(703) 227 - 5678
Confidentiality Notice:
Proprietary/Confidential Information belonging to CGI and its affiliates may be contained in this message. If you are not a recipient indicated or intended in this message (or responsible for delivery of this message to such person), or you think for any reason that this message may have been addressed to you in error, you may not use or copy or deliver this message to anyone else. In such case, you should destroy this message and are asked to notify the sender by reply email.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/dev/attachments/20130726/9cf46ccb/attachment.html 
-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: ATT00001.txt
Url: http://shibboleth.net/pipermail/dev/attachments/20130726/9cf46ccb/attachment.txt 


More information about the dev mailing list