1. I am not sure how to check if I am passing EntityDescriptor or SPSSODescriptor. In the code sample of the wiki:<br> <br clear="all"><div class="line number11 index10 alt2"><font size="4"><code class="java plain"> Credential verificationCredential = getVerificationCredential(response);</code></font></div>
<div class="line number12 index11 alt1"><font size="4"><code class="java plain"> SignatureValidator sigValidator = </code><code class="java keyword">new</code> <code class="java plain">SignatureValidator(verificationCredential);<br>
<font size="4"> <font size="4"> The SignatureValidator only <font size="4">need a credential. I think as long as I get the <font size="4">credential</font> under </font></font></font></code></font><font size="4"><code class="java plain"><font size="4"><font size="4"><font size="4">SPSSODescriptor, that should be fine.<font size="4"><font size="4"><font size="4"> </font></font>Is that correct? <br>
<br><font size="4">2. Th<font size="4">anks for you reminds, I understand your concern. I will change it later.<br><br></font></font></font></font></font></font></code></font></div>Yaowen<br>
<br><br><div class="gmail_quote">On Wed, Oct 31, 2012 at 4:04 PM, Brent Putman <span dir="ltr"><<a href="mailto:putmanb@georgetown.edu" target="_blank">putmanb@georgetown.edu</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div class="im"><br>
On 10/31/12 6:55 PM, Yaowen Tu wrote:<br>
><br>
> Attached is the metadata file I created. When I try to validate it, I<br>
> got the exception.<br>
><br>
<br>
</div>I see that what you've actually signed is the SPSSODescriptor (as<br>
opposed to say the EntityDescriptor). That's fine as far as the SAML<br>
goes, but double-check that you are validating the signature on the<br>
former and not the latter. If you pass in the EntityDescriptor to the<br>
SignatureValidator than naturally you're going to get the error you are<br>
reporting, since the EntityDescriptor is in fact not signed.<br>
<div class="im"><br>
<br>
<br>
> I have been using createSAMLObject in a lot of places, here is the code:<br>
><br>
</div><div class="im">> defaultElementName = (QName)classVar.getDeclaredField(<br>
> "DEFAULT_ELEMENT_NAME" ).get( null );<br>
><br>
<br>
</div>Ok. I don't know why you're using reflection that way, it seems awfully<br>
complicated as opposed to just passing in the QName to the method.<br>
Also, be aware that: although I think we're pretty consistent in our use<br>
of the field name "DEFAULT_ELEMENT_NAME" in most interfaces, I can not<br>
guarantee that that is the exact field name we used everywhere, and<br>
especially in some contributed code from 3rd parties.<br>
<div class="HOEnZb"><div class="h5">--<br>
To unsubscribe from this list send an email to <a href="mailto:dev-unsubscribe@shibboleth.net">dev-unsubscribe@shibboleth.net</a><br>
</div></div></blockquote></div><br>