Exception while unmarshalling Integer with an element bigger than 32-bit
Ian Young
ian at iay.org.uk
Wed Jun 6 22:08:53 BST 2012
On 6 Jun 2012, at 22:05, Cantor, Scott wrote:
>> This is why the UK federation metadata toolchain strips serial numbers
>> from embedded credentials before publication. The comment I have on that
>> says that libxml2 falls over if it sees long ones, and there must have
>> been some vendor implementation that croaked.
>
> Yes, I triggered that originally by generating signatures with that
> element in it by default before we found the problem.
I think we had one case where someone's SP fell over just reading the metadata.
Depressing, really.
-- Ian
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 4813 bytes
Desc: not available
Url : http://shibboleth.net/pipermail/users/attachments/20120606/78ef581a/attachment-0001.bin
More information about the users
mailing list