error validating signature on Jboss

Brent Putman putmanb at georgetown.edu
Mon May 13 14:08:57 EDT 2013


On 5/13/13 2:02 PM, Cantor, Scott wrote:

If you're using SimpleSign, which I doubt, it's not an XML Signature at
all. If it's not, you want the standard POST decoder.


Ah, good point, I missed that.  However, that wouldn't actually affect anything relevant in this
particular case.  If the request doesn't carry the simple signature (and does carry a Response XML
signature), then it functionally just behaves like the HTTPPostDecoder, of which it is a (pretty
trivial) subclass. 


-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/dev/attachments/20130513/6cb1d59e/attachment.html 


More information about the dev mailing list