OpenSAML 3.4.1 saml2p:Response SignatureValue contains encoded CRs

Ivaylo Milev i.milev at gmail.com
Fri Aug 13 21:31:01 UTC 2021


Hi guys,

I am trying to get OpenSAML to generate a saml2p:Response without any line
breaks, especially in the SignatureValue.

I have tried providing the -Dorg.apache.xml.security.ignoreLineBreaks=true
option to the JVM, but the output generated by OpenSAML 3.4.1 still
includes the encoded carriage return in the SignatureValue.

I know xml dig signature processors *should* be able to deal with /n and
/r/n cases, but I have a .NET client using Sustainsys2 that is broken.

Anyhow, I would appreciate any guidance on the matter!

Thanks for any pointers,

Ivaylo

PS  I have been led to use org.apache.xml.security.ignoreLineBreaks=true by
the below:


https://shibboleth.atlassian.net/browse/OSJ-267?focusedCommentId=29666&page=com.atlassian.jira.plugin.system.issuetabpanels%3Acomment-tabpanel&=
<
https://shibboleth.atlassian.net/browse/OSJ-267?focusedCommentId=29666&page=com.atlassian.jira.plugin.system.issuetabpanels%3Acomment-tabpanel&=
>
        https://shibboleth.atlassian.net/browse/XSTJ-69 <
https://shibboleth.atlassian.net/browse/XSTJ-69>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/dev/attachments/20210814/28d15419/attachment.htm>


More information about the dev mailing list