How to sign Timestamp

[Binh Pham]

Thank you so much for helping thus far. I still have some more questions.

I would add the timestamp id to DocumentInternalIDContentReference like so:

DocumentInternalIDContentReference reference = new
DocumentInternalIDContentReference(timestamp.getWSUId());
reference.getTransforms().add(SignatureConstants.TRANSFORM_C14N_EXCL_OMIT_COMMENTS);
reference.setDigestAlgorithm(SignatureConstants.ALGO_ID_DIGEST_SHA1);
Signature signature = getSignature(credential);
signature.getContentReferences().add(reference);

Then call Signer.signObject(signature);?

On Tue, Oct 30, 2018 at 8:35 AM Binh Pham <btpham at gmail.com> wrote:

> I am trying to implement the NHIN SAML specs (
> https://sequoiaproject.org/wp-content/uploads/2014/11/nhin-authorization-framework-production-specification-v3.0.pdf)
> which the SAML token will appear in the header of the SOAP envelope for
> each request.
> In this specs, there are two parts to the token which are the timestamp
> and an assertion. I need to sign the timestamp and the assertion. I don't
> see there is a way to sign the timestamp with the current version (v3) of
> the library. This is my first time using the library so any help would be
> appreciated.
>
> Thank you.
>
>>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/dev/attachments/20181030/dca3410c/attachment.html>