error validating signature on Jboss

[Brent Putman]

On 5/13/13 1:40 PM, Mitu Singh wrote:
>
>
> My code now looks like (removed all the error handling stuff):
>

That looks correct.  That should result in the correct attributes being flagged with DOM ID-ness
(assuming you're using a relatively recent version of OpenSAML).



>
> This gives the error with xmlsec1.5.4. Is there anything wrong with the way I am getting the Response?


If you're still getting the same error, then the problem is one of the other things that we've
already mentioned.  Either 1) there's possibly something horked with the XML processing environment,
so check your endorsed versions of Xerces and Xalan or 2)  there really is a problem with the actual
XML, which is what the validator is checking and (correctly) failing.  Look at the Response XML and
verify that the Response's Signature Reference URI value actually contains a fragment reference to
the Response's ID attribute.

Or maybe there's another failure mode that I'm missing, but those are the 2 obvious things to check
first.

--Brent


-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/dev/attachments/20130513/b7a962a1/attachment.html