Problems with validating signatures in OpenSAML 3.0

[Lasse Højgaard]

Hi Rod, Brent

> What Rod says is indeed nominally the root cause of the error: it apparently
> sees/finds no META-INF/services entry on your classpath for that services API
> interface.

> But: do you already have opensaml-xmlsec-impl as a dependency within your
> project, and on your runtime classpath?  If not: you should add it.  If so
> (and I think you must have, otherwise you would not have gotten this far):
> then for some reason the Services API call is not working, and you have to
> figure out why.  This would be a new problem.  That should always work, I
> don't know of any reason why it shouldn't.

Opensaml-xmlsec-impl is already on the classpath of my application. I'm using OpenSAML v3.2.
Where can I find more information on the Services API? 

JCE is installed on my test-server, but I have added a call to JavaCryptoValidationInitializer.init in my startup code.
With log-level set to FINEST for org.opensaml.* there are no warning, severe or error messages logged during initialization of OpenSAML.

> If you do add a META-INF/services entry to your own jar file or project
> classpath and it fixes things, I'd be interested to know that.  The one in
> opensaml-xmlsec-impl should have been sufficient.  If the services API were
> completely broken in your environment for some reason, then lots and lots of
> other stuff should have failed long before you got to the point of validating
> the signature.  All the XMLObject provider stuff would have been
> non-functional, for example.

I have a problem with my IdP right now, but will try to manually add a META-INF/services entry tomorrow to my SP code.
In the logs there are no errors regarding XMLObjectProviders etc.

To be clear: the only thing in my entire SAML implementation that fails right now is the validation of signatures of assertions.
If I disable that, everything else works, including signing of outgoing requests. 

Thank you for your help so far! I've been stuck for quite some time, but now I feel like I'm making progress again.

--
Lasse Højgaard 
Consultant