Small question regarding signature validation in OpenSAML

[Gerald Preissler]

Reposting this after sending it to the wrong list first:

Hi,

I'm currently implementing some code to validate a SAMLResponse that we
receive from an IdP. Thanks for providing a lib that makes that task so
much easier.

One little question regarding the validation of signatures. I'm
currently using org.opensaml.xml.signature.SignatureValidator with a
BasicX509Credential initialized with the correct public key to validate
the signature I got from Response.getSignature. Does this validation
already verify that the dsig:Signature/dsig:Reference contained in the
XML representation of the OpenSAML Signature object correctly references
the Response element contained in the OpenSAML Response object to which
the Signature is attached?

Best regards
	Jerry Preissler

-- 
Gerald Preissler, gerald.preissler at innoq.com, http://www.innoq.com
innoQ Deutschland GmbH, Krischerstr. 100, D-40789 Monheim am Rhein, Germany
Mobile: +49 175 2625667
Fax: +49 2173 3366222