Exception while unmarshalling Integer with an element bigger than 32-bit

[Ian Young]

On 6 Jun 2012, at 21:26, Brent Putman wrote:

> Interestingly one of them is X509SerialNumber and I have a
> note that the Java X509Certificate interface actually exposes that via
> BigInteger and so to be consistent we wound up special casing our
> X509SerialNumber interface to use BigInteger also, rather than
> inheriting from XSInteger.

This is why the UK federation metadata toolchain strips serial numbers from embedded credentials before publication.  The comment I have on that says that libxml2 falls over if it sees long ones, and there must have been some vendor implementation that croaked.

	-- Ian



-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 4813 bytes
Desc: not available
Url : http://shibboleth.net/pipermail/users/attachments/20120606/435f8ec4/attachment.bin