Validating Metadata signature

[Stefan Rasmusson]

What is the recommended way to verify the signature of signed metadata with
OpenSAML?
If you read the EntityDescriptor with a metadata provider and then try to
verify the signature on EntityDescriptor you get

org.opensaml.xml.validation.ValidationException: Apache XMLSignature does
not exist on SignatureImpl
ator
g.opensaml.security.SAMLSignatureProfileValidator.validateSignatureImpl(SAMLSignatureProfileValidator.java:70)

>From the source i can se that the release method used by initilize on the
metadataprovider sets the XMLSignature property to null.

--
Stefan
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/dev/attachments/20140410/28895ee4/attachment.html