HTTP Redirect Binding Signature Validation

[Suresh Attanayake]

Hi All,

I have a case where I have to validate the signature of the HTTP Redirect
Binding. I could not find any better description or sample on how to do
this with the OpenSAML library. However in this mailing list I found
someone pointing to have a look at the
SAML2HTTPRedirectDeflateSignatureSecurityPolicyRuleTest test case. There
the SAML2HTTPRedirectDeflateSignatureRule is used to evaluate the built
MessageContext.
My question is, is there any other way to achieve the $subject other than
using the SAML2HTTPRedirectDeflateSignatureRule ? The reason I need another
solution is I have a limitation of creating the MessageContext because I
cannot get the original HttpServletRequest object itself to where I do the
signature validation. I'm looking for a solution like where I can do the
signature validation only using the request query string.

Any help is really appreciated

Thanks you very much,
-Suresh

-- 
Suresh Attanayake

Blog : http://sureshatt.blogspot.com/
LinkedIn : http://www.linkedin.com/pub/suresh-attanayake/16/165/181
Twitter : http://twitter.com/sureshatt
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20130105/560433de/attachment.html