Hi Brent, <br><br>Thank you for your advice. My aim was just to illustrate how you can sign and verify SAML assertions, without any library dependency. Sorry, I should have specified, that this is the solution (it works, by the way...) that I am using for implementing the SLO protocol with the HTTP-Redirect binding.<br>
<br>Cheers,<br><br>Luis <br><br><div class="gmail_quote">2012/2/1 Brent Putman <span dir="ltr"><<a href="mailto:putmanb@georgetown.edu">putmanb@georgetown.edu</a>></span><br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div bgcolor="#FFFFFF" text="#000000"><div class="im">
<br>
<br>
On 2/1/12 3:20 AM, Luis Rodríguez Fernández wrote:
<blockquote type="cite">Hi Jose,
<div><br>
</div>
<div>
<ol>
<li>Writing: you can do it "manually". See <a href="http://stackoverflow.com/questions/6681083/consume-samlresponse-token/9080912#9080912" target="_blank">http://stackoverflow.com/questions/6681083/consume-samlresponse-token/9080912#9080912</a></li>
</ol>
</div>
</blockquote>
<br>
<br></div>
The OP's question(s) were about reading/writing SAML from/to a file,
and about signature generation and validation. I don't see anything
in that page that relates to either of those things.<br>
<br>
<br>
<br>
<blockquote type="cite">
<div>
<ol>
<li>Signature:</li>
<ul>
<li> Sign: </li>
</ul>
</ol>
<br>
</div>
</blockquote>
<br>
<br>
Just for the benefit of the archives and other people: I don't want
to be harsh, but these examples are not correct. These code
snippets illustrate how to use the Java Signature class to implement
the primitive operations of signing and validation over a byte
sequence. SAML signatures are XML Signatures, and encompass
considerably more than that. That's one of main purposes of the
OpenSAML library (in addition to general support for XML-Java
language binding). The exceptions are the "simple sign" mechanisms,
which are raw signatures over some "blob" of data, such as defined
for the HTTP Redirect DEFLATE and HTTP Post-SimpleSign bindings.
However, these examples are not even correct for those cases.
Generally, the complexity is in how you construct the actual byte[]
that you are going to sign. <br>
<br>
So just FYI.<span class="HOEnZb"><font color="#888888"><br>
<br>
--Brent<br>
</font></span></div>
<br>--<br>
To unsubscribe from this list send an email to <a href="mailto:dev-unsubscribe@shibboleth.net">dev-unsubscribe@shibboleth.net</a><br></blockquote></div><br><br clear="all"><br>-- <br>"Los caminos del usuario son inescrutables…"<br>
<br>-- Rick Cook<br>