<html><body><div style="color:#000; background-color:#fff; font-family:tahoma, new york, times, serif;font-size:10pt"><div><span>Brent, Paul,</span></div><div style="color: rgb(0, 0, 0); font-size: 13.3333px; font-family: tahoma,new york,times,serif; background-color: transparent; font-style: normal;"><br><span></span></div><div style="color: rgb(0, 0, 0); font-size: 13.3333px; font-family: tahoma,new york,times,serif; background-color: transparent; font-style: normal;"><span>I found the source of the issue. Jboss7.1.1 has modules for xmlsec version 1.5.4. The xmlsec that works with opensaml is 1.4.5. If I replace the xmlsec module in the jboss with 1.4.5, everything works fine. <br></span></div><div style="color: rgb(0, 0, 0); font-size: 13.3333px; font-family: tahoma,new york,times,serif; background-color: transparent; font-style: normal;"><span>I see the same error if I put the latest version of xmlsec, i.e 1.5.4 on tomcat.<br></span></div><div
style="color: rgb(0, 0, 0); font-size: 13.3333px; font-family: tahoma,new york,times,serif; background-color: transparent; font-style: normal;"><span><br></span></div><div style="color: rgb(0, 0, 0); font-size: 13.3333px; font-family: tahoma,new york,times,serif; background-color: transparent; font-style: normal;"><span>So it is not the version of xerces but the version of xmlsec. <br></span></div><div style="color: rgb(0, 0, 0); font-size: 13.3333px; font-family: tahoma,new york,times,serif; background-color: transparent; font-style: normal;"><span><br></span></div><div style="color: rgb(0, 0, 0); font-size: 13.3333px; font-family: tahoma,new york,times,serif; background-color: transparent; font-style: normal;"><span>Has anyone else seen this issue with opensaml and xmlsec latest version?</span></div><div style="color: rgb(0, 0, 0); font-size: 13.3333px; font-family: tahoma,new york,times,serif; background-color: transparent; font-style:
normal;"><br><span></span></div><div style="color: rgb(0, 0, 0); font-size: 13.3333px; font-family: tahoma,new york,times,serif; background-color: transparent; font-style: normal;"><span>Thanks</span></div><div style="color: rgb(0, 0, 0); font-size: 13.3333px; font-family: tahoma,new york,times,serif; background-color: transparent; font-style: normal;"><span>-Mitu<br></span></div><div><br></div> <div style="font-family: tahoma, new york, times, serif; font-size: 10pt;"> <div style="font-family: times new roman, new york, times, serif; font-size: 12pt;"> <div dir="ltr"> <hr size="1"> <font face="Arial" size="2"> <b><span style="font-weight:bold;">From:</span></b> Brent Putman <putmanb@georgetown.edu><br> <b><span style="font-weight: bold;">To:</span></b> dev@shibboleth.net <br> <b><span style="font-weight: bold;">Sent:</span></b> Friday, May 10, 2013 1:40 PM<br> <b><span style="font-weight: bold;">Subject:</span></b> Re: error validating
signature on Jboss<br> </font> </div> <div class="y_msg_container"><br>
<div id="yiv1780081261">
<div>
<br>
<div class="yiv1780081261moz-cite-prefix">On 5/9/13 1:56 PM, Mitu Singh wrote:<br>
</div>
<blockquote type="cite">
<div style="color:#000;background-color:#fff;font-family:tahoma, new york, times, serif;font-size:10pt;">
<div id="yiv1780081261">
<div>
<div style="color:#000;background-color:#fff;font-family:tahoma, new york, times, serif;font-size:10pt;">
<div id="yiv1780081261yui_3_7_2_28_1368055660293_39">Hello,</div>
<div id="yiv1780081261yui_3_7_2_28_1368055660293_57"><br>
</div>
<div style="color:rgb(0, 0,
0);font-size:13.3333px;font-family:tahoma, new york, times, serif;background-color:transparent;font-style:normal;" id="yiv1780081261yui_3_7_2_28_1368055660293_59">I am
implementing Service Provider using opensaml. The
Service Provider works very well when deployed on
tomcat. But when I deploy it on Jboss, I get the
following error while validating signature:</div>
<div id="yiv1780081261yui_3_7_2_28_1368055660293_98" style="color:rgb(0, 0,
0);font-size:13.3333px;font-family:tahoma, new york, times, serif;background-color:transparent;font-style:normal;">ERROR
[org.opensaml.security.SAMLSignatureProfileValidator]
Apache xmlsec IdResolver could not resolve the Element
for id reference:</div>
</div>
</div>
</div>
</div>
</blockquote>
<br>
What that error literally means is that it can't find the DOM
Element pointed to by the signature's Reference URI. It basically
uses Document#getElementById(id), where id is the value from the
Reference URI attribute, without the leading '#'. <br>
<br>
<blockquote type="cite">
<div style="color:#000;background-color:#fff;font-family:tahoma, new york, times, serif;font-size:10pt;">
<div id="yiv1780081261">
<div>
<div style="color:#000;background-color:#fff;font-family:tahoma, new york, times, serif;font-size:10pt;">
<div id="yiv1780081261yui_3_7_2_28_1368055660293_102" style="color:rgb(0, 0,
0);font-size:13.3333px;font-family:tahoma, new york, times, serif;background-color:transparent;font-style:normal;"><br id="yiv1780081261yui_3_7_2_28_1368055660293_107">
</div>
<div id="yiv1780081261yui_3_7_2_28_1368055660293_104" style="color:rgb(0, 0,
0);font-size:13.3333px;font-family:tahoma, new york, times, serif;background-color:transparent;font-style:normal;">I
am using Jboss7.1.1.Final. Has anybody else seen this
issue? How can I fix this.<br>
<br>
</div>
</div>
</div>
</div>
</div>
</blockquote>
<br>
As Paul mentioned, it's likely that it's not JBoss vs Tomcat per se,
but rather a difference in the XML parsing environments, perhaps
related to differing versions of endorsed libraries. Although I
wouldn't think that not endorsing would cause this problem, unless
JBoss is using a really old and/or broken version of Xerces.<br>
<br>
I suppose you should also verify the obvious: that the signed thing
(e.g. Assertion or Response) has a valid ID attribute with a
non-empty value, and that the Reference URI validly refers to that
same ID value.<br>
<br>
--Brent<br>
<br>
<br>
</div>
</div><br>--<br>To unsubscribe from this list send an email to <a ymailto="mailto:dev-unsubscribe@shibboleth.net" href="mailto:dev-unsubscribe@shibboleth.net">dev-unsubscribe@shibboleth.net</a><br><br></div> </div> </div> </div></body></html>