<html><body><div style="color:#000; background-color:#fff; font-family:tahoma, new york, times, serif;font-size:10pt">Thanks Brent!<br><br>My code now looks like (removed all the error handling stuff):<br><br>BasicSAMLMessageContext messageContext = new BasicSAMLMessageContext();<br> <br>messageContext.setInboundMessageTransport(new HttpServletRequestAdapter(request));<br>SAMLMessageDecoder decoder = new HTTPPostSimpleSignDecoder(); <br>decoder.decode(messageContext);<br> <br>//get the Response<br>Response response = (Response) messageContext.getInboundSAMLMessage();<br><br>// Verify Response signature <br>if(response.getSignature() != null)<br>{<br><span class="tab"> </span>SAMLSignatureProfileValidator
profileValidator = new SAMLSignatureProfileValidator(); <br><span class="tab"> </span>profileValidator.validate(signature);<br>}<br><div><br><span></span></div><div style="color: rgb(0, 0, 0); font-size: 13.3333px; font-family: tahoma,new york,times,serif; background-color: transparent; font-style: normal;">This gives the error with xmlsec1.5.4. Is there anything wrong with the way I am getting the Response?</div><div style="color: rgb(0, 0, 0); font-size: 13.3333px; font-family: tahoma,new york,times,serif; background-color: transparent; font-style: normal;"><br></div><div style="color: rgb(0, 0, 0); font-size: 13.3333px; font-family: tahoma,new york,times,serif; background-color: transparent; font-style: normal;">Thanks for your help</div><div style="color: rgb(0, 0, 0); font-size: 13.3333px; font-family:
tahoma,new york,times,serif; background-color: transparent; font-style: normal;">-Mitu<br><span></span></div><div><br></div> <div style="font-family: tahoma, new york, times, serif; font-size: 10pt;"> <div style="font-family: times new roman, new york, times, serif; font-size: 12pt;"> <div dir="ltr"> <hr size="1"> <font face="Arial" size="2"> <b><span style="font-weight:bold;">From:</span></b> Brent Putman <putmanb@georgetown.edu><br> <b><span style="font-weight: bold;">To:</span></b> dev@shibboleth.net <br> <b><span style="font-weight: bold;">Sent:</span></b> Friday, May 10, 2013 4:56 PM<br> <b><span style="font-weight: bold;">Subject:</span></b> Re: error validating signature on Jboss<br> </font> </div> <div class="y_msg_container"><br>
<div id="yiv1123149364">
<div>
<br>
<div class="yiv1123149364moz-cite-prefix">On 5/10/13 7:48 PM, Mitu Singh wrote:<br>
</div>
<blockquote type="cite">
<div style="color:#000;background-color:#fff;font-family:tahoma, new york, times, serif;font-size:10pt;"><br>
I am not using XMLObject layer. But I am confused why my code
works with xmlsec1.4.5 (older version) and not with
xmlsec1.5.4(latest version)? Is this expected?<br>
<div><span><br>
</span></div>
</div>
</blockquote>
<br>
Yes. With xmlsec 1.5.0 and greater, the calling code must register
ID-ness on DOM attributes in order for ID-based resolution to work.
Our unmarshalling code does it, but if you are not using that part
of OpenSAML, then it's your responsibility to do so. See here:<br>
<br>
http://santuario.apache.org/java150releasenotes.html#java_1_5_0_release_notes-MajorchangestohowElementsareresolved<br>
<br>
<br>
Although: I have to wonder why you'd use our signature processing
classes but not our XMLObject support in general. The latter is kind
of the whole point of OpenSAML. <br>
<br>
<br>
</div>
</div><br>--<br>To unsubscribe from this list send an email to <a ymailto="mailto:dev-unsubscribe@shibboleth.net" href="mailto:dev-unsubscribe@shibboleth.net">dev-unsubscribe@shibboleth.net</a><br><br></div> </div> </div> </div></body></html>