Scott maybe I should have asked it in another way:<br><br>When SP tries to validate the signature, theoretically it needs to:<br> a. make sure the certificate of IdP really belongs to the IdP. This is done by trust engine.<br>
b. make sure the signature is generated by the private key of the certificate by decrypting it using the public key in the certificate<br> c. make sure the message is not modified by comparing the digest value of the assertion and decrypted signature.<br>
<br>I know the method doesn't do step a, but how about step b and c? I think the method will do step b, since it accepts signature and credential as the parameters. What I really want to know if how step c is achieved?<br>
<br clear="all">Yaowen<br>
<br><br><div class="gmail_quote">On Tue, Nov 6, 2012 at 2:37 PM, Cantor, Scott <span dir="ltr"><<a href="mailto:cantor.2@osu.edu" target="_blank">cantor.2@osu.edu</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div class="im">On 11/6/12 5:28 PM, "Yaowen Tu" <<a href="mailto:yaowen.tu@gmail.com">yaowen.tu@gmail.com</a>> wrote:<br>
><br>
>3. When SP tries to validate the signature, theoretically it needs to:<br>
> a. make sure the signature is generated by the private key of<br>
>the IdP<br>
> b. make sure the message is not modified by comparing the<br>
>digest value of the assertion and decrypted signature.<br>
><br>
>The method validateSignature(Signature signature, Credential<br>
>validatingCredential) seems to only do the step (a), could you please<br>
>tell me where and how we do step (b)? Maybe the Signature object contains<br>
>some extra information than I imagined?<br>
<br>
</div>That method does b, not a. a is the job of a trust engine.<br>
<span class="HOEnZb"><font color="#888888"><br>
-- Scott<br>
</font></span><div class="HOEnZb"><div class="h5"><br>
<br>
--<br>
To unsubscribe from this list send an email to <a href="mailto:dev-unsubscribe@shibboleth.net">dev-unsubscribe@shibboleth.net</a><br>
</div></div></blockquote></div><br>