DOM exception while parsing signed SAML request with extensions

[kotesh201]

Hi,

I am trying to send the xs:anyType element XML in signed SAML request
extensions. 
In order to bypass the signature verification by the shibboleth, I took out
all the Secruty policy rules from relying-party.xml file. I am doing
signature verification and CRL check on my own in external login handler.

When I try to send xs:anyType xml without signature elements, shibboleth is
parsing successfully. If I try to send the xs:anyType which has signature
elements, I am getting below error.

ERROR
[edu.internet2.middleware.shibboleth.common.profile.ProfileRequestDispatcherServlet:89]
- Error occurred while processing request
org.w3c.dom.DOMException: Cannot find Reference in Manifest
            at org.apache.xml.security.signature.Manifest.<init>(Unknown
Source) ~[xmlsec.jar:na]
            at org.apache.xml.security.signature.SignedInfo.<init>(Unknown
Source) ~[xmlsec.jar:na]
            at org.apache.xml.security.signature.XMLSignature.<init>(Unknown
Source) ~[xmlsec.jar:na]
            at
org.opensaml.xml.signature.impl.SignatureUnmarshaller.unmarshall(SignatureUnmarshaller.java:64)
~[xmltooling.jar:na]
            at
org.opensaml.xml.signature.impl.SignatureUnmarshaller.unmarshall(SignatureUnmarshaller.java:41)
~[xmltooling.jar:na]
            at
org.opensaml.xml.io.AbstractXMLObjectUnmarshaller.unmarshallChildElement(AbstractXMLObjectUnmarshaller.java:335)
~[xmltooling.jar:na]
            at
org.opensaml.xml.io.AbstractXMLObjectUnmarshaller.unmarshall(AbstractXMLObjectUnmarshaller.java:122)
~[xmltooling.jar:na]
            at
org.opensaml.xml.io.AbstractXMLObjectUnmarshaller.unmarshallChildElement(AbstractXMLObjectUnmarshaller.java:335)
~[xmltooling.jar:na]
            at
org.opensaml.xml.io.AbstractXMLObjectUnmarshaller.unmarshall(AbstractXMLObjectUnmarshaller.java:122)
~[xmltooling.jar:na]
            at
org.opensaml.xml.io.AbstractXMLObjectUnmarshaller.unmarshallChildElement(AbstractXMLObjectUnmarshaller.java:335)
~[xmltooling.jar:na]
            at
org.opensaml.xml.io.AbstractXMLObjectUnmarshaller.unmarshall(AbstractXMLObjectUnmarshaller.java:122)
~[xmltooling.jar:na]
            at
org.opensaml.xml.io.AbstractXMLObjectUnmarshaller.unmarshallChildElement(AbstractXMLObjectUnmarshaller.java:335)
~[xmltooling.jar:na]
            at
org.opensaml.xml.io.AbstractXMLObjectUnmarshaller.unmarshall(AbstractXMLObjectUnmarshaller.java:122)
~[xmltooling.jar:na]
            at
org.opensaml.xml.io.AbstractXMLObjectUnmarshaller.unmarshallChildElement(AbstractXMLObjectUnmarshaller.java:335)
~[xmltooling.jar:na]
            at
org.opensaml.xml.io.AbstractXMLObjectUnmarshaller.unmarshall(AbstractXMLObjectUnmarshaller.java:122)
~[xmltooling.jar:na]
            at
org.opensaml.xml.io.AbstractXMLObjectUnmarshaller.unmarshallChildElement(AbstractXMLObjectUnmarshaller.java:335)
~[xmltooling.jar:na]
            at
org.opensaml.xml.io.AbstractXMLObjectUnmarshaller.unmarshall(AbstractXMLObjectUnmarshaller.java:122)
~[xmltooling.jar:na]
            at
org.opensaml.ws.message.decoder.BaseMessageDecoder.unmarshallMessage(BaseMessageDecoder.java:203)
~[openws.jar:na]
            at
org.opensaml.saml2.binding.decoding.HTTPPostDecoder.doDecode(HTTPPostDecoder.java:91)
~[opensaml.jar:na]
            at
org.opensaml.ws.message.decoder.BaseMessageDecoder.decode(BaseMessageDecoder.java:79)
~[openws.jar:na]
            at
org.opensaml.saml2.binding.decoding.BaseSAML2MessageDecoder.decode(BaseSAML2MessageDecoder.java:70)
~[opensaml.jar:na]
            at
edu.internet2.middleware.shibboleth.idp.profile.saml2.SSOProfileHandler.decodeRequest(SSOProfileHandler.java:332)
~[shibboleth-identityprovider.jar:na]
            at
edu.internet2.middleware.shibboleth.idp.profile.saml2.SSOProfileHandler.performAuthentication(SSOProfileHandler.java:190)
~[shibboleth-identityprovider.jar:na]
            at
edu.internet2.middleware.shibboleth.idp.profile.saml2.SSOProfileHandler.processRequest(SSOProfileHandler.java:161)
~[shibboleth-identityprovider.jar:na]
            at
edu.internet2.middleware.shibboleth.idp.profile.saml2.SSOProfileHandler.processRequest(SSOProfileHandler.java:88)
~[shibboleth-identityprovider.jar:na]
            at
edu.internet2.middleware.shibboleth.common.profile.ProfileRequestDispatcherServlet.service(ProfileRequestDispatcherServlet.java:84)
~[shibboleth-common.jar:na]
            at javax.servlet.http.HttpServlet.service(HttpServlet.java:717)
[servlet-api.jar:na]
            at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290)
[catalina.jar:6.0.32]
            at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
[catalina.jar:6.0.32]

Can you please help me to fix this issue.      

Thanks in advance.
-Kotesh



--
View this message in context: http://shibboleth.1660669.n2.nabble.com/DOM-exception-while-parsing-signed-SAML-request-with-extensions-tp7590703.html
Sent from the Shibboleth - Users mailing list archive at Nabble.com.