OpenSAML-C++ EncryptedAttribute validation issue,

[Orest Pechunka]

Hi All,

I'm using OpenSAML-C++ 2.6.0 to develop SAML SP related functionality.
I've found a bug. It's related to the Assertions processing received from
IdP.  When Assertions are not encrypted, but Attributes themselves are
encrypted, the  Assertions20SchemaValidator throws an exception:

"AttributeStatement must have at least one Attribute."


That is not correct, because there are "EncryptedAttribute" instead of
"Attributes".

Here is the code, that causes this exception:

BEGIN_XMLOBJECTVALIDATOR(SAML_DLLLOCAL,AttributeStatement);
     XMLOBJECTVALIDATOR_NONEMPTY(AttributeStatement,Attribute);END_XMLOBJECTVALIDATOR;


Regards,

Orest Pechunka.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/dev/attachments/20170214/8bd32ecf/attachment.html>