error validating signature on Jboss

[Mitu Singh]

Thanks Brent!

My code now looks like (removed all the error handling stuff):

BasicSAMLMessageContext messageContext = new BasicSAMLMessageContext();
            
messageContext.setInboundMessageTransport(new HttpServletRequestAdapter(request));
SAMLMessageDecoder decoder = new HTTPPostSimpleSignDecoder();            
decoder.decode(messageContext);
                        
//get the Response
Response response = (Response) messageContext.getInboundSAMLMessage();

// Verify Response signature  
if(response.getSignature() != null)
{
    SAMLSignatureProfileValidator profileValidator = new SAMLSignatureProfileValidator();                       
    profileValidator.validate(signature);
}


This gives the error with xmlsec1.5.4. Is there anything wrong with the way I am getting the Response?

Thanks for your help
-Mitu



________________________________
 From: Brent Putman <putmanb at georgetown.edu>
To: dev at shibboleth.net 
Sent: Friday, May 10, 2013 4:56 PM
Subject: Re: error validating signature on Jboss
 




On 5/10/13 7:48 PM, Mitu Singh wrote:


>I am not using XMLObject layer. But I am confused why my code
        works with xmlsec1.4.5 (older version) and not with
        xmlsec1.5.4(latest version)? Is this expected?
>
>
>
Yes.  With xmlsec 1.5.0 and greater, the calling code must register
    ID-ness on DOM attributes in order for ID-based resolution to work. 
    Our unmarshalling code does it, but if you are not using that part
    of OpenSAML, then it's your responsibility to do so.  See here:

http://santuario.apache.org/java150releasenotes.html#java_1_5_0_release_notes-MajorchangestohowElementsareresolved


Although: I have to wonder why you'd use our signature processing
    classes but not our XMLObject support in general. The latter is kind
    of the whole point of OpenSAML.  



--
To unsubscribe from this list send an email to dev-unsubscribe at shibboleth.net
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/dev/attachments/20130513/7d74e694/attachment.html