OpenSAML 3.2.0 not generating proper signatures

Cantor, Scott cantor.2 at osu.edu
Tue Jan 3 15:54:57 EST 2017


> Shouldn't the canonicalization take care of that?

Not in the least. XML is entirely whitespace-sensitive in general. That doesn't even scratch the surface of the hundreds of subtle and trivial ways you can corrupt a signature, it's just the most common.

-- Scott



More information about the dev mailing list