Problems with validating signatures in OpenSAML 3.0

[Lasse Højgaard]

> On 9/12/16 4:13 PM, Lasse Højgaard wrote:
> 
> 
> Opensaml-xmlsec-impl is already on the classpath of my application. I'm using OpenSAML v3.2.
> 
> Ok, that's good.  Are you pulling jars from our Maven repo, or did you build from source, etc?  If the latter: check you opensaml-xmlsec-impl jar to make sure you have the file with that entry under META-INF/services, like this:
> 
> http://svn.shibboleth.net/view/java-opensaml/trunk/opensaml-xmlsec-impl/src/main/resources/META-INF/services/org.opensaml.xmlsec.signature.support.SignatureValidationProvider?view=markup
> 
> Just thinking that maybe something in a non-standard source build might be stripping out the jar resources or something like that.

I have a local copy of the jars from maven. I have opened up the jar that is actually deployed on the server, and it indeed includes a META-INF/services/ that points to org.opensaml.xmlsec.signature.support.provider.ApacheSantuarioSignatureValidationProviderImpl
So my build-systems is not stripping anything away. Will try to see what I can find out from the Services API.

Thank you for your assistance.


Lasse Højgaard
Consultant