How to sign Timestamp

[Brent Putman]

On 10/31/18 2:05 PM, Binh Pham wrote:
> The only question I have left is there away to tell the signature
> object to don't break the signature value block into multiple line?
You can try setting system property
'org.apache.xml.security.ignoreLineBreaks' to 'true'.  This part of
signing is totally under the control of the Santuario library.  So if
that property doesn't do it, then I doubt there is a way.

We actually do already make a best effort attempt to set this during
OpenSAML library init, i.e. when you call
InitializationService.initialize().  But it's possible that you're
doing something with Santuario that's causing the above system property
to be evaled before that, making our init ineffective in that regard. 


> At the end of each line, it has "
" by default. I was wondering
> if that would affect the validation anyhow.

In general it doesn't affect validation.  The Signature- and
DigestValue content is just Base64-encoded data and line-breaks are
common there.  But I guess it depends on what software is going to
validate the signature.  The ones I know about wouldn't care about
line-breaks.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/dev/attachments/20181031/fd34ec00/attachment.html>