Generating KeyInfo for sigature

Cantor, Scott cantor.2 at osu.edu
Thu Jul 16 14:13:06 EDT 2015


On 7/16/15, 7:57 AM, "dev on behalf of Stefan Rasmusson" <dev-bounces at shibboleth.net on behalf of rasmusson.stefan at gmail.com> wrote:

>Im trying to add KeyInfo to my signature. I have tried using SecurityHelper.prepareSignatureParams(signature,
> signingCredential, secConfig, keyInfoGeneratorProfile);but this does not add the x509 properties like issuer name etc.
>
>How can I generate a keyinfo with these properties?

Brent question, I only know what the IdP does and it basically does what we wanted it to, which I think is just based on OpenSAML defaults:

	// Generator for X509Credentials
	X509KeyInfoGeneratorFactory x509Factory = new X509KeyInfoGeneratorFactory();
	x509Factory.setEmitEntityCertificate(true);
	x509Factory.setEmitEntityCertificateChain(true);

You'll have to walk and read the OpenSAML code if you want to do more than that.
        

-- Scott




More information about the dev mailing list