XMLsectool not populating the ds:reference URI

[Mehdi Hached]

Hi Peter,

> On 12 Mar 2015, at 10:40, Peter Schober <peter.schober at univie.ac.at> wrote:
> 
> * Mehdi Hached <mehdi.hached at surfnet.nl> [2015-03-12 10:15]:
>> I am using xmlsectool to sign a SAML entitiesDescriptor document with the following command:
> 
> What version of XmlSecTool is this? 1.2.0?

The version is indeed 1.2.0

> 
>> ./xmlsectool.sh --sign --referenceIdAttributeName someID --inFile
>> fileToSign --outFile signedFile --digest SHA-256
>> --signatureAlgorithm
>> http://www.w3.org/2001/04/xmldsig-more#rsa-sha256 --key keyFile
>> --certificate certificateFile 
> 
> Does it work if you literally use "--referenceIdAttributeName ID"?
> (You don't say what your current ID attribute is you're referencing.)

Haaa. My mistake!

I was directly specifying the ID value extracted from my unsigned SAML document instead of specifying the ID attribute. It was not clear to me that xmlsectool will handle that ID fetching.

Thanks Peter,


> -peter
> -- 
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net