Problem reading MetaData from URL

[Tom Scavo]

On Thu, Nov 7, 2013 at 9:59 AM, Adam Portier <aportier at haverford.edu> wrote:
>
> http://myreviewroom.com/saml2/metadata/

FWIW, I just ran this through xmlsectool and it appears to choke on
the certificate in metadata:

$ $xmlsectool_path --validateSchema --schemaDirectory $schema_dir \
> --inFile $inFile_path
INFO  XmlSecTool - Reading XML document from file
'./metadata/sample-metadata.xml'
INFO  XmlSecTool - XML document parsed and is well-formed.
ERROR XmlSecTool - XML is not schema valid
org.xml.sax.SAXParseException: cvc-datatype-valid.1.2.1:
'MIIFbTCCBFWgAwIBAgIHJ/h4A9UqWTANBgkqhkiG9w0BAQUFADCByjELMAkGA1UE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-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----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' is not a valid value for 'base64Binary'.
at org.apache.xerces.util.ErrorHandlerWrapper.createSAXParseException(Unknown
Source) ~[na:na]
at org.apache.xerces.util.ErrorHandlerWrapper.error(Unknown Source) ~[na:na]
at org.apache.xerces.impl.XMLErrorReporter.reportError(Unknown Source) ~[na:na]
at org.apache.xerces.impl.XMLErrorReporter.reportError(Unknown Source) ~[na:na]
at org.apache.xerces.impl.XMLErrorReporter.reportError(Unknown Source) ~[na:na]
at org.apache.xerces.impl.xs.XMLSchemaValidator$XSIErrorReporter.reportError(Unknown
Source) ~[na:na]
at org.apache.xerces.impl.xs.XMLSchemaValidator.reportSchemaError(Unknown
Source) ~[na:na]
at org.apache.xerces.impl.xs.XMLSchemaValidator.elementLocallyValidType(Unknown
Source) ~[na:na]
at org.apache.xerces.impl.xs.XMLSchemaValidator.processElementContent(Unknown
Source) ~[na:na]
at org.apache.xerces.impl.xs.XMLSchemaValidator.handleEndElement(Unknown
Source) ~[na:na]
at org.apache.xerces.impl.xs.XMLSchemaValidator.endElement(Unknown
Source) ~[na:na]
at org.apache.xerces.jaxp.validation.DOMValidatorHelper.finishNode(Unknown
Source) ~[na:na]
at org.apache.xerces.jaxp.validation.DOMValidatorHelper.validate(Unknown
Source) ~[na:na]
at org.apache.xerces.jaxp.validation.DOMValidatorHelper.validate(Unknown
Source) ~[na:na]
at org.apache.xerces.jaxp.validation.ValidatorImpl.validate(Unknown
Source) ~[na:na]
at javax.xml.validation.Validator.validate(Unknown Source) ~[na:1.4.01]
at edu.internet2.middleware.security.XmlSecTool.schemaValidate(XmlSecTool.java:394)
[xmlsectool-1.2.0.jar:na]
at edu.internet2.middleware.security.XmlSecTool.main(XmlSecTool.java:184)
[xmlsectool-1.2.0.jar:na]

I'm not really seeing the root problem, however.

Tom