error validating signature on Jboss

[Brent Putman]

On 5/10/13 7:48 PM, Mitu Singh wrote:
>
> I am not using XMLObject layer. But I am confused why my code works with xmlsec1.4.5 (older
> version) and not with xmlsec1.5.4(latest version)? Is this expected?
>

Yes.  With xmlsec 1.5.0 and greater, the calling code must register ID-ness on DOM attributes in
order for ID-based resolution to work.  Our unmarshalling code does it, but if you are not using
that part of OpenSAML, then it's your responsibility to do so.  See here:

http://santuario.apache.org/java150releasenotes.html#java_1_5_0_release_notes-MajorchangestohowElementsareresolved


Although: I have to wonder why you'd use our signature processing classes but not our XMLObject
support in general. The latter is kind of the whole point of OpenSAML. 


-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/dev/attachments/20130510/53b6992e/attachment.html