error validating signature on Jboss

Mitu Singh mitusingh27 at yahoo.com
Fri May 10 17:38:11 EDT 2013


Scott,

This my code:
        Signature signature = response.getSignature();
        SAMLSignatureProfileValidator profileValidator = new SAMLSignatureProfileValidator();        
        try {
            profileValidator.validate(signature);
        }


Is there something wrong with this code?



________________________________
 From: "Cantor, Scott" <cantor.2 at osu.edu>
To: Shib Dev <dev at shibboleth.net> 
Sent: Friday, May 10, 2013 2:27 PM
Subject: RE: error validating signature on Jboss
 

> I found the source of the issue. Jboss7.1.1 has modules for xmlsec version
> 1.5.4. The xmlsec that works with opensaml is 1.4.5. If I replace the xmlsec
> module in the jboss with 1.4.5, everything works fine.

Then I think your code is at fault, because the only difference is in xmlsec's improper identification of ID attributes in 1.4. You must not be using OpenSAML to process the objects, or it would automatically tag the attributes properly.

-- Scott



--
To unsubscribe from this list send an email to dev-unsubscribe at shibboleth.net
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/dev/attachments/20130510/8781dcb1/attachment.html 


More information about the dev mailing list